Hacking on Medium
Attacking Service Accounts with Kerberoasting

https://cdn-images-1.medium.com/max/2600/1*GQBVXSOlKlomGZzSS6toTQ.jpeg
Forge Service Tickets (TGS) with Kerberoasting MITRE ATT&CK ID: T1558.003, Active HTB machine

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Linux is everywhere

https://cdn-images-1.medium.com/max/1680/1*8f5AwGh_ph-STKj6HKRfyw.jpeg
First of all linux is a kernel and not an operating system. Operating systems based on linux are a combination of software from GNU and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Write-Up: Hack The Box: Starting Point — Tier 1

https://cdn-images-1.medium.com/max/600/0*MDXds2XSaxz7GNj8.png
Tier 1 of the “Starting Point” series consists of six boxes: Appointment, Sequel, Crocodile, Ignition, Pennyworth and Tactics.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El nuevo malware utilizado por los atacantes de SolarWinds pasó desapercibido durante años

https://cdn-images-1.medium.com/max/1533/0*phzdD3RB4WEaTLIA
PUBLICADO EN 2 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The evolution of a Mac trojan: UpdateAgent’s progression
https://www.reddit.com/r/redteamsec/comments/siucr9/the_evolution_of_a_mac_trojan_updateagents/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/EvolutionOfAMacTrojan) [comments] (https://www.reddit.com/r/redteamsec/comments/siucr9/the_evolution_of_a_mac_trojan_updateagents/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Real-World Impact of the Global Cybersecurity Workforce Gap on Cyber Defenders

The effect is nuanced — and fundamental to cyber defense for organizations and nations.

Dark Reading: Attacks/Breaches
Managing Detections is Not the Same as Stopping Breaches

Enterprises interested in managed detection and response (MDR) services to monitor endpoints and workloads should make sure the providers have rock-solid expertise in detecting and responding to threats.

Dark Reading: Attacks/Breaches
Why Security Pros Are Frustrated With Cloud Security

As companies shift more operations to the cloud, a shortfall in security talent and too much security data wastes more than half of the time spent on security issues, a survey finds.

Dark Reading: Attacks/Breaches
Foresite Cybersecurity Acquires Cyber Lantern

Support for more than 160 important compliance standards have been integrated into SaaS solution for small and midsize enterprises.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
WhiteSource Threat Report Reveals Massive Uptick In Cyberattacks Related To JavaScript npm

More than 1,300 malicious npm packages have been discovered for use in supply chain attacks, cryptojacking, data stealing, and more.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
INKY Completes Email Security Offering With Launch of Outbound Mail Protection

INKY Outbound Mail Protection manages a multistep approval workflow providing enforcement within the email system itself.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass HTTP traffic firewall block

Ok, question here. I'm studying an associates degree in web dev, in classroom we got limited access to the internet. Teachers seem to have a custom php webpage that they use to give us access to the internet, so they've must been using a firewall to block and unblock all http traffic.

When http traffic is blocked i know we are still able to communicate to the outside since icmp and dns packets still reach public ip addresses.

Is there a way to bypass the block and allow http traffic on my computer?

I tried to use proxychains and route traffic through tor but doesn't work. I thought of an ssh tunnel or/and an dns tunnel but i don't any computer with a static public ip address to connect to.

I'm just curious if this can be achieved in some way

submitted by /u/GabrielRosmar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I chain multiple proxies for a reverse shell connection?

So let's say I hacked into a server and I want to be persistent on that server. To anonymize myself I would have to use a proxy server but one proxy server is not enough. So how do I chain multiple proxy servers for a persistent reverse shell?

submitted by /u/Turkishmemer07
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video