Hacking on Medium
GoldenEye: 1 CTF Walkthrough

https://cdn-images-1.medium.com/max/866/0*twT_b13-4iV8va_r
Scanning

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA advierte a los administradores que parchen la vulnerabilidad de SAP de máxima gravedad

https://cdn-images-1.medium.com/max/1600/0*Prv-G0seZP9VBowt
PUBLICADO EN 9 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Mitigate Ransomware Risks With Modern Log Management

Enterprises using a modern log management platform have key tools in place to detect and mitigate some of the risks from a ransomware attack.

Dark Reading: Attacks/Breaches
Linux Malware on the Rise

Ransomware, cryptojacking, and a cracked version of the penetration-testing tool Cobalt Strike have increasingly targeted Linux in multicloud infrastructure, report states.

Dark Reading: Attacks/Breaches
Experts: Several CVEs From Microsoft's February Security Update Require Prompt Attention

Microsoft's release of relatively sparse vulnerability information makes it difficult for organizations to prioritize mitigation efforts, security experts say.

Dark Reading: Attacks/Breaches
Putting AI to Practical Use in Cybersecurity

Almost every cybersecurity product has an AI component. Here is where it's working in the real world.

Dark Reading: Attacks/Breaches
Auth0 Credential Guard Detects Breached Passwords to Prevent Account Takeover

New feature adds a dedicated security team and support for multiple languages to prevent fraudulent access with stolen credentials.

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium »
Read more...

hacking: security in practice
how do hackers find out people's location?

I am no expert on the matter hence why this post is up. I know that you can see the area that someone is in with an ip adress but is there a way for experienced people to pinpoint an exact adress without going on facebook or other websites that may contain pictures or information about you?

thanks!

submitted by /u/ChadSh1tOnly
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MS Word Password protected without a hash

My elderly neighbor is wanting to work on his book he started years ago. He had it saved on floppy disc so I bought a reader and pulled the files off. He doesn't remember the password so I told him I would try to brute force. I don't know how to without a hash though. I am thinking it is a Microsoft 97 document. It says 97-2004. How would you all handle this? Appreciate your help.

submitted by /u/SendtoJeffSmith
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How screwed up can this company be?

I was just playing around in a website when I found a path where all the resumes that people send to the company can be found.

There is more than 100 PDF files of people containing a lot of information, such as: address, age, marital status and everything that a resume typically contain.

Is that company breaking some law by doing this? How bad can this situation be for them?

I sent an e-mail for them talking about the problem, but no response yet.

submitted by /u/Im_MrLonely
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

The network data and utf-8 decoded text
https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…Continue reading on Medium » (https://gulizhiguhao.medium.com/the-network-data-and-utf-8-decoded-text-a8a61864a0ea?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AWS-Loot - Pull Secrets From An AWS Environment

Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. Install pip install -r requirements.txt An AWS credential file (.aws/credentials) is required for authentication to the target environment Access Key Access Key Secret How it works Awsloot works by going through EC2, Lambda, CodeBuilder instances and searching for high entropy strings. The EC2 Looter works by querying all available instance ID's in all regions and requesting instance's USERDATA where often developers leave secrets. The Lambda looter operates across regions as well. Lambada looter can search all available versions of a found function. It starts by searching the functions environment variables then downloads the source code and scans the source for secrets. The Codebuilder Looter works by searching for build instances and searching those builds for environment variables that might contain secrets. Usage Python3 awsloot.py Next Features Allow users to specify an ARN to scan Looter for additional services Download AWS-Loot
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The network data and utf-8 decoded text

https://cdn-images-1.medium.com/max/1080/1*AbxYh2MJLdkQvBkDe-y-OA.png
Today I want to share something about the network data and the utf-8 decoded text. I think we really should know what is going on during…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video