Note: sanitization of these screenshots was performed to protect the identities of stakeholders involved.Continue reading on Medium » (https://popalltheshells.medium.com/how-to-spoof-e-mails-dmarc-spf-and-phishing-5184c10679a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Evolved phishing: Device registration trick adds to phishers’ toolbox for victims without MFA
https://www.reddit.com/r/redteamsec/comments/sdbez1/evolved_phishing_device_registration_trick_adds/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/EvolvedPhishing) [comments] (https://www.reddit.com/r/redteamsec/comments/sdbez1/evolved_phishing_device_registration_trick_adds/)

___________________________
@hacking_Attack
@Hacking_Video

chvancooten/NimPackt-v1: Nim-based assembly packer and shellcode loader for opsec & profit
https://www.reddit.com/r/redteamsec/comments/sdbiys/chvancootennimpacktv1_nimbased_assembly_packer/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://github.com/chvancooten/NimPackt-v1) [comments] (https://www.reddit.com/r/redteamsec/comments/sdbiys/chvancootennimpacktv1_nimbased_assembly_packer/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anonymous posts pro-Taiwanese slogans on UN agency website, while calling for the creation of a "neutral grouping" of countries "wedged between NATO and Russia" in attempt to defuse the tension. They embedded a video in the end that introduces an MIT experimental antiviral drug

https://external-preview.redd.it/B8yg3ZEPrLMM_oHCWVWOwNsd9MmBJ4CNgWW93S3E-SM.jpg?width=320&crop=smart&auto=webp&s=e0ab450e10cc7895e3c0f355664b4a02ddccea63 submitted by /u/socookre
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta360 cameras share users photos - and can be rooted - via wifi

https://b.thumbs.redditmedia.com/ab8W1TLaSa8euReYVBiEkk7bLl9GsN8PAfw0tzyg6WY.jpg submitted by /u/cmdr_sidhartagautama
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

submitted by /u/donutloop
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
N.Korean internet downed by suspected cyber attacks -researchers

SEOUL (Reuters) - North Korea's internet appears to have been hit by a second wave of outages in as many weeks, possibly caused by a distributed denial-of-service (DDoS) attack, researchers said on Wednesday.

https://www.msn.com/en-gb/news/world/nkorean-internet-downed-by-suspected-cyber-attacks-researchers/ar-AAT9Xo5?ocid=uxbndlbing

submitted by /u/sortasimplesecurity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How I hacked a hardware crypto wallet and recovered $2 million

https://external-preview.redd.it/7XuSeJe6uIUQfD6BpYJYNVO0_7uTyUOclhe6Jk6BOZw.jpg?width=320&crop=smart&auto=webp&s=f838e047f389fc29c93ab3918d688a56de91e1f9 submitted by /u/Kr0x0n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why It's Time to Rethink Incident Response

The incident response landscape has changed drastically, largely from shifting attitudes among insurance companies and, to some extent, business customers feeling the pain of security incidents.

Dark Reading: Attacks/Breaches
VPNLab.net Shuttered in Latest Spate of Global Takedowns

Europol and 10 nations seized servers and disconnected the anonymous network allegedly used by many cybercriminals in the latest effort to hobble cybercrime groups.

Dark Reading: Attacks/Breaches
Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

It's not just your imagination — malicious threats have exponentially increased organizational risk.

AD CS: weaponizing the ESC7 attack - BlackArrow
https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/

submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://www.blackarrow.net/adcs-weaponizing-esc7-attack/) [comments] (https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Ninjasworkout - Vulnerable NodeJS Web Application

http://1.bp.blogspot.com/-neKssbqNWd8/Yd0NxF79cCI/AAAAAAAA79E/0-3SdFml0o0pGVYMOFLN_-U4850x3hdewCK4BGAYYCw/w640-h304/ninjasworkout_1-732158.png

Damn Vulnerable NodeJS Application
Quick Start

Download the Repo =>

run npm i



Afer Installing all dependency just run the application

node app.js or nodemon app.js



http://1.bp.blogspot.com/-neKssbqNWd8/Yd0NxF79cCI/AAAAAAAA79E/0-3SdFml0o0pGVYMOFLN_-U4850x3hdewCK4BGAYYCw/w640-h304/ninjasworkout_1-732158.png
ADDED BUGS

* Prototype Pollution
* No SQL Injection
* Cross site Scripting
* Broken Access Control
* Broken Session Management
* Weak Regex Implementation
* Race Condition
* CSRF -Cross Site Request Forgery
* Weak Bruteforce Protection
* User Enumeration
* Reset Password token leaking in Referrer
* Reset Password bugs
* Sensitive Data Exposure
* Unicode Case Mapping Collision
* File Upload
* SSRF
* XXE
* Open Redirection
* Directory Traversal

* Insecure Deserilization => Remote Code Execution
* Server Side Template Injection

* Timing Attack
Reset Password Module will not work !! You have to configure SMTP !! in utils=>sendmail.js

TODO

* Improvement in User Interface
* Add New Vulnerabilities on weekly basis
* Add Documentation of all the Vulnerabilites

Issues

* In case of bugs in the application, feel free to create an issues on github.

Contribution

* Feel free to create a pull request for any contribution.
Download Ninjasworkout

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Explore

https://cdn-images-1.medium.com/max/1050/0*q-Ek3DQPWc9jdWxM.png
As always we start with nmap to discover open ports.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKING AND ITS TYPES

https://cdn-images-1.medium.com/max/2135/1*tUOQzaidm7UHHwmNP912jQ.png
What’s Hacking?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video