Dark Reading: Attacks/Breaches
Voice-Changing Software Found on APT Attackers' Server

Security researchers believe the presence of Morph Vox Pro could indicate APT-C-23 has new plans for their phishing campaigns.

Dark Reading: Attacks/Breaches
Did 4 Major Ransomware Groups Truly Form a Cartel?

An analysis of well-known extortion groups and their cryptocurrency transactions reveals the answer.

Examining the database in SQL injection attacks

When exploiting SQL injection vulnerabilities, it is often necessary to gather some information about the database itself. This includes…Continue reading on Medium »
Read more...

Examining the database in SQL injection attacks
https://mrinalprakash4577.medium.com/examining-the-database-in-sql-injection-attacks-1e56f051e7b2?source=rss------bug_bounty-5

When exploiting SQL injection vulnerabilities, it is often necessary to gather some information about the database itself. This includes…Continue reading on Medium » (https://mrinalprakash4577.medium.com/examining-the-database-in-sql-injection-attacks-1e56f051e7b2?source=rss------bug_bounty-5)

Hacking on Medium
The Background of Adonis Code Hijacking

https://cdn-images-1.medium.com/max/723/1*GPggmMkVZnY3uYFydmjdqw.png
A popular moderation system in roblox, Adonis, has been commonly copied and parts of the code changed in order to fit the malicious intent…

Continue reading on Medium »

Hacking on Medium
Subdomain Flyover And Manual Exploration Of The Results

https://cdn-images-1.medium.com/max/2592/0*rYNnCU8cqG9a3zpu
So you have a list of subdomains, now what?

Continue reading on Medium »

CRITICAL Blind Storage XSS — My first Bug Bounty
https://gatolouco.medium.com/critical-blind-storage-xss-my-first-bug-bounty-d318f6ba570c?source=rss------bug_bounty-5

The impact of a XSS on support chat!Continue reading on Medium » (https://gatolouco.medium.com/critical-blind-storage-xss-my-first-bug-bounty-d318f6ba570c?source=rss------bug_bounty-5)

CRITICAL Blind Storage XSS — My first Bug Bounty

The impact of a XSS on support chat!Continue reading on Medium »
Read more...

hacking: security in practice
Docker for SSH server used in reverse port forwarding

Hi,

I'm looking for a simple docker ssh server used in ssh tunnel for reverse port forwarding. I would like that ssh server to be as simple as possible and only doing the port forward, no shell is needed.

Just to be sure to be understood, here's the setup exactly.

Client is opening an ssh connection using something like this:

# autossh -M 4522 -N -f -o "PubkeyAuthentication=yes" -o "PasswordAuthentication=no" -i /home/user/.ssh/id_rsa -o "ServerAliveInterval 30" -o "ServerAliveCountMax 3" -R 4422:localhost:22 user@my_ssh_server -p23334

So the client, outside of my network connects to my ssh server on port 23334 and opens a local port on ssh server, 4422, that forwards to HIS localhost on port 22.

So when i connect to port 4422 on my server, i'm forwarded through the ssh tunnel and finally on the port 22 of the ssh client.

Now, what I would like is using a docker container instead of using my own ssh server. Also, i would like the user to not being able to get a shell, but still being able to open a local port for the forwarding.

Hope i'm clear enough, sorry if it seems confusing ;)

EDIT: Formating

submitted by /u/redtwhix
[link] [comments]

hacking: security in practice
Zoom

How do hackers hack zoom And how to prevent it?

submitted by /u/Striking_Garden_1808
[link] [comments]