Hacking on Medium
Write-Up: Hack The Box: Starting Point — Tier 1

https://cdn-images-1.medium.com/max/600/0*MDXds2XSaxz7GNj8.png
Tier 1 of the “Starting Point” series consists of six boxes: Appointment, Sequel, Crocodile, Ignition, Pennyworth and Tactics.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El nuevo malware utilizado por los atacantes de SolarWinds pasó desapercibido durante años

https://cdn-images-1.medium.com/max/1533/0*phzdD3RB4WEaTLIA
PUBLICADO EN 2 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The evolution of a Mac trojan: UpdateAgent’s progression
https://www.reddit.com/r/redteamsec/comments/siucr9/the_evolution_of_a_mac_trojan_updateagents/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/EvolutionOfAMacTrojan) [comments] (https://www.reddit.com/r/redteamsec/comments/siucr9/the_evolution_of_a_mac_trojan_updateagents/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
The Real-World Impact of the Global Cybersecurity Workforce Gap on Cyber Defenders

The effect is nuanced — and fundamental to cyber defense for organizations and nations.

Dark Reading: Attacks/Breaches
Managing Detections is Not the Same as Stopping Breaches

Enterprises interested in managed detection and response (MDR) services to monitor endpoints and workloads should make sure the providers have rock-solid expertise in detecting and responding to threats.

Dark Reading: Attacks/Breaches
Why Security Pros Are Frustrated With Cloud Security

As companies shift more operations to the cloud, a shortfall in security talent and too much security data wastes more than half of the time spent on security issues, a survey finds.

Dark Reading: Attacks/Breaches
Foresite Cybersecurity Acquires Cyber Lantern

Support for more than 160 important compliance standards have been integrated into SaaS solution for small and midsize enterprises.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
WhiteSource Threat Report Reveals Massive Uptick In Cyberattacks Related To JavaScript npm

More than 1,300 malicious npm packages have been discovered for use in supply chain attacks, cryptojacking, data stealing, and more.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
INKY Completes Email Security Offering With Launch of Outbound Mail Protection

INKY Outbound Mail Protection manages a multistep approval workflow providing enforcement within the email system itself.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypass HTTP traffic firewall block

Ok, question here. I'm studying an associates degree in web dev, in classroom we got limited access to the internet. Teachers seem to have a custom php webpage that they use to give us access to the internet, so they've must been using a firewall to block and unblock all http traffic.

When http traffic is blocked i know we are still able to communicate to the outside since icmp and dns packets still reach public ip addresses.

Is there a way to bypass the block and allow http traffic on my computer?

I tried to use proxychains and route traffic through tor but doesn't work. I thought of an ssh tunnel or/and an dns tunnel but i don't any computer with a static public ip address to connect to.

I'm just curious if this can be achieved in some way

submitted by /u/GabrielRosmar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I chain multiple proxies for a reverse shell connection?

So let's say I hacked into a server and I want to be persistent on that server. To anonymize myself I would have to use a proxy server but one proxy server is not enough. So how do I chain multiple proxy servers for a persistent reverse shell?

submitted by /u/Turkishmemer07
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to see outsent emails of a certain email?

I was wondering if it's possible to see if a particular email has sent out any emails within the last days? I want to know if that person was online and he's not responding to my emails or he never checked his emails?

submitted by /u/StudentForAllMyLife
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to disable all the AV software on a computer?

Recently I have started Pentesting and I was trying to develop an undetectable backdoor. The only problem was Windows Defender, which kept detecting the Meterpreter. Then, I came across this:

https://devdotpy.medium.com/how-i-evaded-windows-defender-with-a-batch-script-kinda-fd21acae35d2

It explains how to prevent WD from scanning .exe files.

I just wanted to know whether I could do this on other AV programs (McAfee, Avast, Kaspersky, etc).

Thanks

submitted by /u/ByRussX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Docenas de fallas de seguridad descubiertas en el firmware UEFI utilizado por varios proveedores

https://cdn-images-1.medium.com/max/1480/0*VJP5xCV5idg3OUgv
PUBLICADO EN 2 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video