Many people know that before getting the value of a tag attribute, the browser decodes the HTML entities inside. Let’s say if you try to…Continue reading on Medium » (https://medium.com/@skavans_/the-unobvious-about-xss-and-html-encoding-4e0d536a35d9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft Defender pronto bloqueará el robo de contraseñas de Windows

https://cdn-images-1.medium.com/max/1525/0*av3j0miBbrojeG17
PUBLICADO EN 14 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can you Growth Hack Leadership?

https://cdn-images-1.medium.com/max/640/1*zGHZBg6yZfyNzpXgGCelrQ.jpeg
AUTHOR’S NOTE: I really like to connect with other leaders, especially on ideas and ideals that can change the world. We are at the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
8 of the Biggest Cybersecurity M&As & Investment Deals in 2021

There were more financial deals in cybersecurity last year than in any previous year.

Dark Reading: Attacks/Breaches
San Francisco 49ers Hit With a Ransomware Attack

AP report says NFL team organization acknowledged a "network security incident" that affected its corporate IT network.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Code virtualization resources?

I'm pretty interested in how anticheats achieve obfuscation through code virtualisation. Are there any books or resources regarding this topic? I mainly want to do it for research purposes. I know it involves manipulation of the .text section in memory. There used to be old software protection modules like Themida that would virtualise regions of code. But none of it was documented.

submitted by /u/mach_vm_write
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does SMS intercepting work?

submitted by /u/iGoalie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Securing Your Aws Account.

Hello Everyone, Not so long ago I’ve encountered some strange issue with Aws. I have been charged for the services which I never used and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Teknik Jitu dan Cara Hack Chip Poker Online

https://cdn-images-1.medium.com/max/600/0*jfmeuc8BePgjw6tq.jpg
DAFTAR POKER IDN ONLINE — Mengetahui Tata Cara Teknik Jitu dan Cara Hack Chip Poker Online dengan Sistem Uang Asli di Agen Poker Online…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I was able to take over any account via the Password Reset Functionality.

Hey, This is my first writeup and I will talk about an account takeover that I found in May on a vulnerability disclosure program. Let’s…
Read more...

hacking: security in practice
Friend has a Airtag hidden in her car. Is it possible to jam Airtag or hack it to get info about owner?

Idk about you guys but I've been wondering how is it possible? I have basic understanding of linux and use a little of terminal... i have a bootable Kali USB and the cops couldn't find that airtag so yeah... any help is appreciated.

submitted by /u/ItsUhh420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can I clear app data or remove apps files in Android using meterpreter ?

I have successfully got meterpreter session...

I want to clear an app data or to remove some files of the app!!

But I don't have root access to the Android device!

I want the app which is in victim's device..to reinstall the app or to clear apps data so that the app is as new..

I want to do it through meterpreter session (by shell script Or by using shell in meterpreter session)

submitted by /u/QinnStar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Best way to detect RATs, keyloggers or viruses

I am sure that many of you are able to inject malware into code, but what are some methods in detecting general malware? Specifically those in .jar files

submitted by /u/Busy_Director
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
METASPLOIT EN TERMUX

https://cdn-images-1.medium.com/max/712/0*hqk3I_TK_m6Qvd5f
Mestasploit Framework es un software de código abierto programado en perl y ruby, fue creado para ayudar a los pentesters a ejecutar…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Adobe: Zero-Day Magento 2 RCE Bug Under Active AttackPost Views: 166 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
A zero-day remote code-execution (RCE) bug in the Magento 2 and Adobe Commerce platforms has been actively exploited in the wild.
The security vulnerability bug (CVE-2022-24086) is a critical affair, allowing pre-authentication RCE arising from improper input validation. It scores 9.8 out of 10 on the CVSS vulnerability-severity scale, but there is one mitigating factor: An attacker would need to have administrative privileges in order to be successful.

It affects versions 2.3.7-p2 and earlier and 2.4.3-p1 and earlier of both eCommerce platforms, according to the advisory.  According to SanSec, which did a deeper dive into patching bug on Magento, the following should be taken into consideration:

* If you are running Magento 2.3 or 2.4, install the custom patch from Adobe ASAP, ideally within the next few hours;
* If you are running a version of Magento 2 between 2.3.3 and 2.3.7, you should be able to manually apply the patch, as it only concerns a few lines;
* And, if you are running Magento 2.3.3 or below, you are not directly vulnerable. However, SanSec still recommends manually implementing the given patch.

SanSec noted on Monday that the bug came to light on Jan. 27, and that “this vulnerability has a similar severity as the Magento Shoplift vulnerability from 2015. At that time, nearly all unpatched Magento stores globally were compromised in the days after the exploit publication.”
See Also: Complete Offensive Security and Ethical Hacking Course
Researchers noted on Monday that patching need not be onerous:\


If you have the time, follow the instructions to patch your #magento 2 store with the guide from @avstudnitz.

If you don't have the time? Do the quick and dirty patch described here:https://t.co/nZTlQGSBmp

It will take you less than 5 minutes, but you _have_ to patch today! https://t.co/gkhT07QgbA pic.twitter.com/7NqJMV3qzb

— willem wigman (@willemwigman) February 14, 2022
See Also: Windows vulnerability with new public exploits lets you become admin Update ASAP to Stave Off AttacksIndeed, updating is important for online merchants: The Magecart group famously targets unpatched versions of Magento in particular, looking for a way to plant credit-card skimmers on the checkout pages of eCommerce websites.

The threat actor, which is actually a consortium of many different card-harvesting subgroups, consistently evolves its skimmers to be more effective and efficient at evasion as well. For instance, in November, it added an extra browser process that uses the WebGL JavaScript API to check a user’s machine to ensure it’s not running on a virtual machine – thus evading researcher detection. And in January, an attack on Segway involved planting the skimmer by using a favicon that traditional security systems wouldn’t inspect.

For now, Adobe characterized the attacks as “very limited.” But card-skimmer activity is on the rise, and updates on the part of website owners seem sparse. Last week, SanSec reported a wave of skimming attacks targeting more than 500 sites, in particular those using outdated and unsupported Magento 1 implementations. Further data from Source Defense found as many as 50,000 to 100,000 sites that are using the end-of-life Magento 1. See Also: Offensive Security Tool: Stratus Red Team
“Magento and other eCommerce platforms have a long histo[...]

___________________________
@hacking_Attack
@Hacking_Video

ry of vulnerabilities…Running an eCommerce website on an outdated and unpatched platform is like driving your car without your seat belt on,” said Ron Bradley, vice president, Shared Assessments, via email. “The driver is thinking, the store is right around the corner, by the time I put on my seatbelt on, I’ll be there, plus I don’t want to wrinkle my clothes. Then comes the crash!”
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/banner-2022.1-release-90x90.jpg Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH15 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/acastro_210104_1777_google_0001-90x90.jpg Google Project Zero: Vendors are now quicker at fixing zero-days1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Apple-Warning-90x90.jpg Apple patches new zero-day exploited to hack iPhones, iPads, Macs4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/f4bc-article-200611-wordpress-body-text-90x90.jpg PHP Everywhere RCE flaws threaten thousands of WordPress sites5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/178-706-450-android-patch-770x439_c-90x90.jpg Google fixes remote escalation of privileges bug on Android6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-4-90x90.jpg Qbot needs only 30 minutes to steal your credentials, emails1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/364-3648628_google-drive-90x90.jpg Google Drive integration errors created SSRF flaws in multiple applications1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/ezgif.com-gif-maker-3-90x90.jpg Cisco patches critical vulnerabilities in SMB routers, exploitation available2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/b2b-90x90.jpg ESET antivirus bug let attackers gain Windows SYSTEM privileges2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/image6-90x90.png Cloudflare launches a paid public bug bounty program2 weeks ago
The post Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Fear of Getting Hacked.

Hey, this wouldn’t be a typical post of just a standardized computer question rather a more specific one.

I know little about hacking, but I know that it’s important to not get hacked. I read things like “well I’m not a specific target” or “I don’t have anything valuable to hack”

During the download, I spilled water on my keyboard, which caused it to break malfunction or what. It would type “//zxcv.bnm” or “xccxcx” over and over. My entire bottom keys - z through m was completely different. This started to happen the exact moment the DL finished. I thought it was a virus or hacker, or something.

I even used a restore point and I deleted the downloads, ran my AV twice and I typed with it to get the same result. I switched out keyboards to avail, it works fine. I just ran the AV again, and I stared at my empty screen for a few seconds

I realized I’m not prepared at all incase of something like a virus or something similar. I had a panic attack right away, because in the past I was a victim of sextortion, eventually it passed but the file is still out there and now I can never have a political career (lol). I hope to erase it one day, but it’s given me spooks from it,

The point is what can I do to stay protected, I know I can’t beat the “fed” or the entire system, but I just want to stay well guarded in case something happens. What are the best anti viruses, what are the key things to look for, what are the best tools.

Any help would be appreciated.

TDLR: I had a spook that PC was compromised , and am wondering what are the best tools to stay guarded.

submitted by /u/marvelistcomplex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacker could've printed unlimited 'Ether' but chose $2M bug bounty instead

https://external-preview.redd.it/UwL5IAixFS_oPyaQjXQamk90CL09JZeGui06MBAPOFw.jpg?width=640&crop=smart&auto=webp&s=67d7a25901b27243a7d1b374defe5de383b77e66 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video