hacking: security in practice
N.Korean internet downed by suspected cyber attacks -researchers

SEOUL (Reuters) - North Korea's internet appears to have been hit by a second wave of outages in as many weeks, possibly caused by a distributed denial-of-service (DDoS) attack, researchers said on Wednesday.

https://www.msn.com/en-gb/news/world/nkorean-internet-downed-by-suspected-cyber-attacks-researchers/ar-AAT9Xo5?ocid=uxbndlbing

submitted by /u/sortasimplesecurity
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How I hacked a hardware crypto wallet and recovered $2 million

https://external-preview.redd.it/7XuSeJe6uIUQfD6BpYJYNVO0_7uTyUOclhe6Jk6BOZw.jpg?width=320&crop=smart&auto=webp&s=f838e047f389fc29c93ab3918d688a56de91e1f9 submitted by /u/Kr0x0n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why It's Time to Rethink Incident Response

The incident response landscape has changed drastically, largely from shifting attitudes among insurance companies and, to some extent, business customers feeling the pain of security incidents.

Dark Reading: Attacks/Breaches
VPNLab.net Shuttered in Latest Spate of Global Takedowns

Europol and 10 nations seized servers and disconnected the anonymous network allegedly used by many cybercriminals in the latest effort to hobble cybercrime groups.

Dark Reading: Attacks/Breaches
Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

It's not just your imagination — malicious threats have exponentially increased organizational risk.

AD CS: weaponizing the ESC7 attack - BlackArrow
https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/

submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://www.blackarrow.net/adcs-weaponizing-esc7-attack/) [comments] (https://www.reddit.com/r/redteamsec/comments/sddzpi/ad_cs_weaponizing_the_esc7_attack_blackarrow/)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Ninjasworkout - Vulnerable NodeJS Web Application

http://1.bp.blogspot.com/-neKssbqNWd8/Yd0NxF79cCI/AAAAAAAA79E/0-3SdFml0o0pGVYMOFLN_-U4850x3hdewCK4BGAYYCw/w640-h304/ninjasworkout_1-732158.png

Damn Vulnerable NodeJS Application
Quick Start

Download the Repo =>

run npm i



Afer Installing all dependency just run the application

node app.js or nodemon app.js



http://1.bp.blogspot.com/-neKssbqNWd8/Yd0NxF79cCI/AAAAAAAA79E/0-3SdFml0o0pGVYMOFLN_-U4850x3hdewCK4BGAYYCw/w640-h304/ninjasworkout_1-732158.png
ADDED BUGS

* Prototype Pollution
* No SQL Injection
* Cross site Scripting
* Broken Access Control
* Broken Session Management
* Weak Regex Implementation
* Race Condition
* CSRF -Cross Site Request Forgery
* Weak Bruteforce Protection
* User Enumeration
* Reset Password token leaking in Referrer
* Reset Password bugs
* Sensitive Data Exposure
* Unicode Case Mapping Collision
* File Upload
* SSRF
* XXE
* Open Redirection
* Directory Traversal

* Insecure Deserilization => Remote Code Execution
* Server Side Template Injection

* Timing Attack
Reset Password Module will not work !! You have to configure SMTP !! in utils=>sendmail.js

TODO

* Improvement in User Interface
* Add New Vulnerabilities on weekly basis
* Add Documentation of all the Vulnerabilites

Issues

* In case of bugs in the application, feel free to create an issues on github.

Contribution

* Feel free to create a pull request for any contribution.
Download Ninjasworkout

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Explore

https://cdn-images-1.medium.com/max/1050/0*q-Ek3DQPWc9jdWxM.png
As always we start with nmap to discover open ports.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKING AND ITS TYPES

https://cdn-images-1.medium.com/max/2135/1*tUOQzaidm7UHHwmNP912jQ.png
What’s Hacking?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — BountyHunter

https://cdn-images-1.medium.com/max/648/0*ggovlwY7kV6bf5TW.png
As always we start with nmap to discover open ports.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox — Previse

https://cdn-images-1.medium.com/max/600/0*xiBY2dQSnunTp11a.png
We start with nmap to discover open ports and services.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto.com and rising data breach numbers

https://cdn-images-1.medium.com/max/1200/1*PhXb6MknOdgE_96fLPGa9w.jpeg
Surprising possibly no one, the latest annual report from the Identity Theft Resource Center (ITRC) shows that the number of data breaches…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cracking MetaMask Vault Passwords

https://cdn-images-1.medium.com/max/644/1*7qfAi2hGklCFNk-buvcNBA.png
tldr— An attack vector exists whereby a Threat Actor who has a foothold in your environment can steal the MetaMask vault, crack the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video