hacking: security in practice
Is it possible to see outsent emails of a certain email?

I was wondering if it's possible to see if a particular email has sent out any emails within the last days? I want to know if that person was online and he's not responding to my emails or he never checked his emails?

submitted by /u/StudentForAllMyLife
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to disable all the AV software on a computer?

Recently I have started Pentesting and I was trying to develop an undetectable backdoor. The only problem was Windows Defender, which kept detecting the Meterpreter. Then, I came across this:

https://devdotpy.medium.com/how-i-evaded-windows-defender-with-a-batch-script-kinda-fd21acae35d2

It explains how to prevent WD from scanning .exe files.

I just wanted to know whether I could do this on other AV programs (McAfee, Avast, Kaspersky, etc).

Thanks

submitted by /u/ByRussX
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Docenas de fallas de seguridad descubiertas en el firmware UEFI utilizado por varios proveedores

https://cdn-images-1.medium.com/max/1480/0*VJP5xCV5idg3OUgv
PUBLICADO EN 2 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DERPNSTINK1 VM Walkthrough

https://cdn-images-1.medium.com/max/799/0*gs6lzL6r5T9KE9MZ
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
If My Organization Is Mostly in the Cloud, Do I Need a Firewall?

A firewall is still a valuable part of the IT security stack, but businesses need to consider all their attack surfaces.

Dark Reading: Attacks/Breaches
Cato Networks Delivers Instant Visibility and Control of Cloud Application Data Risk

CASB Cato converges a full CASB into its global SASE platform to defend enterprises against data breach and cloud-delivered threats.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Powerful Mindset Hack to Zap Back! Record THIS Hypnosis Session.

https://cdn-images-1.medium.com/max/960/1*QWHgdqjEBJW2ndT-GabAzA.png
This is a very effective hypnosis session carefully drafted to be extremely powerful. It will heighten your mental clarity, stamina and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GoogleSheets PDF w/ JavaScript-embedded found from the web, interested in your analysis

submitted by /u/wisdomteethhelp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Travelling around the world using Public WiFi - How to be safe?

Hi all,

I'm about to embark on some travelling and finding that I rely on a lot of Public WiFi Hotspots (ik this is pretty bad - especially with what I'm doing - largely investing). I also realise the answer is very much likely to be DON'T USE PUBLIC WIFI YOU FOOL.

I'm wondering if I should 100% use a VPN and whether that's all that's needed to help protect myself when using Public WiFi hotspots.

Or if you have any alternatives to using Public WiFi Hotspots, please let me know.

Thanks all,

- Burge

submitted by /u/MyNamesBurge
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I built a Chrome extension to find and autofill job applications in 1 click

https://b.thumbs.redditmedia.com/SSopmHKqAepALJDjgsu5qNoyeZNP2xeISauP-EDS1BU.jpg After filling out ~100 job applications by hand, I got tired of copy/pasting and writing down submitted job apps in excel sheets. So I made a website and a Chrome extension called EasyJobs to do everything easily to help lazy people like me.

The website contains ~200,000 autofillable job openings from the Internet. You can find and autofill most applications in 1 click without even leaving the website. I also included a "My Applications" section to keep track of submitted job apps (no excel!!). It's completely free:

https://easyjobs.so/

Give it a try. Let me know what you think or want something added/changed.

https://i.redd.it/9ttjdo2cbkf81.gif

submitted by /u/Ok_Woodpecker5107
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Netflix 德劇二：How to Sell Drugs online 全歐最酷線上藥頭

https://cdn-images-1.medium.com/max/2600/1*ORMDZ7nA4jIC6TiD5TlvGQ@2x.jpeg
#科技#程式語言#青少年#搖頭丸#虛擬貨幣

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What were the steps in the colonial pipeline attack?

Like what really happened in chronologic order

submitted by /u/HimymLover123
[link] [comments]

Black Hat Ethical Hacking
ESET antivirus bug let attackers gain Windows SYSTEM privileges

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png ESET antivirus bug let attackers gain Windows SYSTEM privilegesPost Views: 188 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
The flaw (CVE-2021-37852) was reported by Michael DePlante of Trend Micro’s Zero Day Initiative, and it enables attackers to escalate privileges to NT AUTHORITY\SYSTEM account rights (the highest level of privileges on a Windows system) using the Windows Antimalware Scan Interface (AMSI).
Slovak internet security firm ESET released security fixes to address a high severity local privilege escalation vulnerability affecting multiple products on systems running Windows 10 and later or Windows Server 2016 and above. AMSI was first introduced with Windows 10 Technical Preview in 2015, and it allows apps and services to request memory buffer scans from any major antivirus product installed on the system. According to ESET, this can only be achieved after attackers gain SeImpersonatePrivilege rights, normally assigned to users in the local Administrators group and the device’s local Service account to impersonate a client after authentication which should “limit the impact of this vulnerability.”

However, ZDI’s advisory says attackers are only required to “obtain the ability to execute low-privileged code on the target system,” which matches ESET’s CVSS severity rating also showing that the bug can be exploited by threat actors with low privileges.

While ESET said it only found out about this bug on November 18, a disclosure timeline available in ZDI’s advisory reveals that the vulnerability was reported four months earlier, on June 18, 2021.
See Also: Complete Offensive Security and Ethical Hacking Course Affected ESET productsThe list of products impacted by this vulnerability is quite long, and it includes:

* ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security, and ESET Smart Security Premium from version 10.0.337.1 to 15.0.18.0
* ESET Endpoint Antivirus for Windows and ESET Endpoint Security for Windows from version 6.6.2046.0 to 9.0.2032.4
* ESET Server Security for Microsoft Windows Server 8.0.12003.0 and 8.0.12003.1, ESET File Security for Microsoft Windows Server from version 7.0.12014.0 to 7.3.12006.0
* ESET Server Security for Microsoft Azure from version 7.0.12016.1002 to 7.2.12004.1000
* ESET Security for Microsoft SharePoint Server from version 7.0.15008.0 to 8.0.15004.0
* ESET Mail Security for IBM Domino from version 7.0.14008.0 to 8.0.14004.0
* ESET Mail Security for Microsoft Exchange Server from version 7.0.10019 to 8.0.10016.0
See Also: Windows vulnerability with new public exploits lets you become admin Users of ESET Server Security for Microsoft Azure are also advised to immediately update ESET File Security for Microsoft Azure to the latest available version of ESET Server Security for Microsoft Windows Server to address the flaw.

The antivirus maker released multiple security updates between December 8 and January 31 to address this vulnerability, when it patched the last vulnerable product exposed to attacks.

Luckily, ESET found no evidence of exploits designed to target products affected by this security bug in the wild.

“The attack surface can also be eliminated by disabling the Enable advanced scanning via AMSI option in ESET products’ Advanced setup,” ESET added.

“However, ESET strongly recommends performing an upgrade to a fixed product version and only applying this workaround when the upgrade is not possible[...]