Deep Web
How DEEP is the Internet?

https://external-preview.redd.it/R_yYoCjjY33eRmxGtTCdlB-pbuwsZbf54KUPSPW23ow.jpg?width=320&crop=smart&auto=webp&s=981b8748021e4aff3955ff5097ad6b9be1520c5c submitted by /u/Gam3Ad1c
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kubernetes for pentesters
https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/

There’s countless article on hacking kubernetes clusters but is there any research or repos on how you can use k8s for pen testing? One idea is using a cluster in which each node is a “person” that has access to a specific machine or to a different machine. I’m open to other ideas regarding the usage of k8s to improve hacking automation submitted by /u/sirlordjax (https://www.reddit.com/user/sirlordjax)
[link] (https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/) [comments] (https://www.reddit.com/r/redteamsec/comments/snyj8y/kubernetes_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Cuts User Account Compromises in Half With Simple Change

The online tech giant auto-enabled two-step verification for more than 150 million users, throwing up steep hurdles against scammers and attackers.

Dark Reading: Attacks/Breaches
Microsoft Issues 51 CVEs for Patch Tuesday, None 'Critical'

One publicly known flaw — an elevation-of-privilege bug in Windows Kernel — was included in the patches.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Using OSINT techniques to detect community brigading in /r/Ottawa's protest megathreads - a case study

https://b.thumbs.redditmedia.com/g3ncvGknBsr4p0Ddch_FSBnjOMrXh1iM5Y4DbWz6PVw.jpg submitted by /u/Lexyr-Mod
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
.cap capture to Hashcat Format does it still work?

Hi guys, I just set up a lab and tried to use a .cap file to convert to the hashcat format in order to attempt to crack it in hashcat. Now it didn't work for me but I saw tutorials of this in the past when the -m was set to 25000 but since the changes to 22000 I have not had much luck. I know my capture file is ok cuz I used aircrack-ng with a simple wordlist and it honestly works fine. My goal was to use my gpu instead of cpu for an improved performance but it's been rather troublesome.

submitted by /u/SuperSoakerGuyx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there way to hack into a school intercom system?

Yesterday I randomly got an idea while in bed to hack my old school's intercom system, just to play an audio or something and see if anyone reacts. Note, my old school is basically on the other side of the world since I moved countries, so I need to control the intercom wirelessly, I would prefer using a laptop or Iphone. Basically, can you use the Schools IP address or bluetooth to hack into the intercoms? I don't know if it's possible to use the School's wifi to access it's Bluetooth, but I most probably cannot, but, can I still use the School's IP address to hack into either its Wifi or intercom?

PS I don't much about hacking, this was just a thought that ran through my head late at night, but I'm quite motivated to do it.

submitted by /u/Randomfrickinhuman
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
ExpressVPN offering $100k to hack its servers.

https://b.thumbs.redditmedia.com/zqwKHTDGpI3u8oELTV2ecyMh_UNR6hGCkbqb4-PPktM.jpg submitted by /u/SM177Y23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attacking Kerberos Unconstrained Delegation

https://cdn-images-1.medium.com/max/2600/1*l-7ZferETErnEznqv1QRJQ.jpeg
Trust this user/computer for delegation to any service

Continue reading on R3d Buck3T »

Dark Reading: Attacks/Breaches
Prioritizing the Right Vulnerabilities to Reduce Risk

Prioritization needs to be part of vulnerability management if security teams are to keep up and mitigate issues in a timely manner.

hacking: security in practice
John The Ripper - Double dipping from wordlist

Hello every one!

I'm attempting to help my friend open his .zip file which he forgot his password to. He has a really good idea of the format however, just unsure of which position/words are where.

For ex. Dog_freedom_6324_Banana frog_Johnathon_3432_mother etc

I'm VERY new to ethical hacking and am only doing this as a fun project to help him. I've been trying to learn how it works and have gotten as far as:

aZ"_[0-9][09][09] for my rule.

Using John --wordlist=Name --rules=Name --stdout I see that John first pulls a word from my wordlist, then adds a _ and proceeds to add 3 random numbers.

The issue is I don't know how to make John "double dip" into the wordlist as my first example would need. Ex. WordlistWordlist"47385"_Wordlist (Assuming the numericals are known)

Apologies if I'm not good at explaining - let me know if I can clarify. (The password he has used does not contain normal words in the dictionary so its important that I can tell John the words I need it to try between underscores)

Thank you so much for your time.

submitted by /u/ColdNCursed
[link] [comments]

hacking: security in practice
CISO is briefed on Red Team engagement

https://external-preview.redd.it/894IS2jtW62LvpopLiFcBMNsipUglZkp0LqXx2CoPKg.jpg?width=320&crop=smart&auto=webp&s=26a78c01b9cc3b882b555bee888fe2ad162b2f15 submitted by /u/hdh33
[link] [comments]

Microsoft Team’s Unpatched URL Spoofing Vulnerability
https://priyankraval.medium.com/microsoft-teams-unpatched-url-spoofing-vulnerability-c58f5949fac8?source=rss------bug_bounty-5