Ladies and Gentlemen, let’s do some API hacking today. I will discuss some of the top 10 API bugs and where one can find them.Continue reading on Medium » (https://aaryanapex.medium.com/top-10-api-bugs-where-to-find-them-5dac338b3d73?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Top 10 API Bugs — Where To Find Them

Ladies and Gentlemen, let’s do some API hacking today. I will discuss some of the top 10 API bugs and where one can find them.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Software-Developer Security Vendor Snyk Buys Cloud Security Company

Acquisition helps expand Snyk into the cloud security sector.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A hacking group

Hey guys! I wanted to invite you guys to my discord server: https://discord.gg/bM8puuhH (just launched it a couple of days back). It is targeted at helping cybersec enthusiasts who are into bug bounty and other related fields. How? I'm trying to put tons of cybersec tools at a single place so that anyone can find tools you probably are unaware of. I'm currently putting resources on the group, so wait I'll be putting a whole lot more awesome tools to help you.

I'm no pro, but if we share information with each other we can grow together!

I'll be posting some internship opportunities at the internship channel if I find any.

You can contribute too by sharing resources which you think might be beneficial for the hacking community :)

And what's more, we encourage you to show your current projects and gather members for it!

Hope you have a cool time at our group. Feel free to DM me. I'll try to respond as soon as possible. I'm a bit busy with my college studies but I'll try to do best from my side.

Thanks.

submitted by /u/ultimate_smash
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking Via (What Appears to be) USB-C PD

I have been looking at getting a USB-C Power Deliver Charger so I can use my Macbook Pro in the car. Because USB-C can be used for more than just power delivery, like data extraction, installation of malicious code, etc it seems like what initially appears to be an innocent car charger could be much more. I found USB-C charger that has the power rating that I want on Amazon, but seeing where it's manufactured is giving me pause. Am I just being paranoid or is this a legitimate concern? Can someone who is familiar with this type of cybersecurity threat weigh in on the state of this type of exploit and how much risk is involved? After typing this message out I'm leaning toward just getting an inverter and plugging in my wall charger! Help they tryna get mah dataz!

submitted by /u/esdot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to detect the RedLine stealer

Hey guys, I just wanted to ask a question regarding the RedLine stealer; the thing is that I am pretty sure it exists in the system that I am talking about, even though the ESET can't detect it. I am sure that it is in the system, as all the accounts whose passwords were saved in "Google" have been trying to be accessed even though MFA was enabled. The question is, how is it possible to detect the RedStealer as one of the powerful antiviruses didn't even have an idea about the stealer.

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cracking the C0dez: Reversing C++, Structs & Stack Frames with Ghidra - Full CrackMe Walkthrough

https://external-preview.redd.it/iaa0ycb4RyxbxOldwNJER-PwI3i4J-O10ZWk7daTFdU.jpg?width=320&crop=smart&auto=webp&s=67d41413af679cb184a8d0ef389e711aebd17a83 submitted by /u/B4n4n4B0x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers slip into Microsoft Teams chats to distribute malware

https://external-preview.redd.it/PqO6cfNOmQzHKhXyW5hcWoSQ5RGILvBLoYAtXbBP-RM.jpg?width=640&crop=smart&auto=webp&s=c58917be3cf3aa46a498c665b7c46d05f85164e7 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

3-Hat Information Security
https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/

This is an advertisement for 3-Hat Information Security.
We at 3-Hat Information Security offer a series of Penetration-Testing Training Environments.
These environments can allow you to practice and test your cybersecurity skills in a safe and legal environment.
We also offer custom hosting solutions to suit your cyber security needs.
3-Hat Information Security consultants can turn your network into a bastion of security.
With over 25+ years of experience, our consultants are capable of assisting you with any of your cybersecurity needs. If your security needs an upgrade, contact us at (253)256-1807 or visit our website at https://www.3-hat.com (https://www.3-hat.com/).
We would be happy to help. We also offer free educational resources via our Tech Help Blog.
Feel free to learn from our videos and articles at https://3-hat.com/tech-help-blog/. submitted by /u/threehatinfosec (https://www.reddit.com/user/threehatinfosec)
[link] (https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/) [comments] (https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/)

___________________________
@hacking_Attack
@Hacking_Video

OT Pentesting - Looking for advice
https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/

Hey everyone, I've been tasked with pentesting a OT network. I've never performed this before and would like to hear your thoughts on how different could it be (if at all) from the regular infrastructure pentesting? Obviously it is super critical so I'm going to be very careful not to overload it with traffic and be doing more manual testing instead of using scanners. Are there any other tips/tools/methodologies you guys can provide? I would appreciate it very much. Thanks and cheers! submitted by /u/Empty_Kaleidoscope (https://www.reddit.com/user/Empty_Kaleidoscope)
[link] (https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/) [comments] (https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pwning with shortcut : Abusing windows lnk feature to get foothold

https://cdn-images-1.medium.com/max/640/0*U1m2cKyR_M8uWi_y
In windows lnk is an extension of shortcut files. Windows create a shortcut which points to an actual file and run that application. In…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Papá corta el internet de la ciudad por error para desconectar a sus hijos

https://cdn-images-1.medium.com/max/1600/0*8gn4QAgQNQ94X8Q5
PUBLICADO EN 17 FEBRERO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Node.js Vulnerability Cheatsheet

https://cdn-images-1.medium.com/max/2600/0*Aypp0tnOXyVp5qze
25 vulnerabilities to look out for in Node JS applications: Directory traversal, prototype pollution, XSSI, and more…

Continue reading on ShiftLeft Blog »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Security Teams Expect Attackers to Go After End Users First

Phishing, malware, and ransomware have spurred organizations to increase their investments in endpoint security, according to Dark Reading’s Endpoint Security Survey.

Dark Reading: Attacks/Breaches
Attackers Hone Their Playbooks, Become More Agile

Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.