hacking: security in practice
Hacking Via (What Appears to be) USB-C PD

I have been looking at getting a USB-C Power Deliver Charger so I can use my Macbook Pro in the car. Because USB-C can be used for more than just power delivery, like data extraction, installation of malicious code, etc it seems like what initially appears to be an innocent car charger could be much more. I found USB-C charger that has the power rating that I want on Amazon, but seeing where it's manufactured is giving me pause. Am I just being paranoid or is this a legitimate concern? Can someone who is familiar with this type of cybersecurity threat weigh in on the state of this type of exploit and how much risk is involved? After typing this message out I'm leaning toward just getting an inverter and plugging in my wall charger! Help they tryna get mah dataz!

submitted by /u/esdot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to detect the RedLine stealer

Hey guys, I just wanted to ask a question regarding the RedLine stealer; the thing is that I am pretty sure it exists in the system that I am talking about, even though the ESET can't detect it. I am sure that it is in the system, as all the accounts whose passwords were saved in "Google" have been trying to be accessed even though MFA was enabled. The question is, how is it possible to detect the RedStealer as one of the powerful antiviruses didn't even have an idea about the stealer.

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cracking the C0dez: Reversing C++, Structs & Stack Frames with Ghidra - Full CrackMe Walkthrough

https://external-preview.redd.it/iaa0ycb4RyxbxOldwNJER-PwI3i4J-O10ZWk7daTFdU.jpg?width=320&crop=smart&auto=webp&s=67d41413af679cb184a8d0ef389e711aebd17a83 submitted by /u/B4n4n4B0x
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers slip into Microsoft Teams chats to distribute malware

https://external-preview.redd.it/PqO6cfNOmQzHKhXyW5hcWoSQ5RGILvBLoYAtXbBP-RM.jpg?width=640&crop=smart&auto=webp&s=c58917be3cf3aa46a498c665b7c46d05f85164e7 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

3-Hat Information Security
https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/

This is an advertisement for 3-Hat Information Security.
We at 3-Hat Information Security offer a series of Penetration-Testing Training Environments.
These environments can allow you to practice and test your cybersecurity skills in a safe and legal environment.
We also offer custom hosting solutions to suit your cyber security needs.
3-Hat Information Security consultants can turn your network into a bastion of security.
With over 25+ years of experience, our consultants are capable of assisting you with any of your cybersecurity needs. If your security needs an upgrade, contact us at (253)256-1807 or visit our website at https://www.3-hat.com (https://www.3-hat.com/).
We would be happy to help. We also offer free educational resources via our Tech Help Blog.
Feel free to learn from our videos and articles at https://3-hat.com/tech-help-blog/. submitted by /u/threehatinfosec (https://www.reddit.com/user/threehatinfosec)
[link] (https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/) [comments] (https://www.reddit.com/r/Pentesting/comments/sv1ikl/3hat_information_security/)

___________________________
@hacking_Attack
@Hacking_Video

OT Pentesting - Looking for advice
https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/

Hey everyone, I've been tasked with pentesting a OT network. I've never performed this before and would like to hear your thoughts on how different could it be (if at all) from the regular infrastructure pentesting? Obviously it is super critical so I'm going to be very careful not to overload it with traffic and be doing more manual testing instead of using scanners. Are there any other tips/tools/methodologies you guys can provide? I would appreciate it very much. Thanks and cheers! submitted by /u/Empty_Kaleidoscope (https://www.reddit.com/user/Empty_Kaleidoscope)
[link] (https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/) [comments] (https://www.reddit.com/r/Pentesting/comments/sv24qi/ot_pentesting_looking_for_advice/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pwning with shortcut : Abusing windows lnk feature to get foothold

https://cdn-images-1.medium.com/max/640/0*U1m2cKyR_M8uWi_y
In windows lnk is an extension of shortcut files. Windows create a shortcut which points to an actual file and run that application. In…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Papá corta el internet de la ciudad por error para desconectar a sus hijos

https://cdn-images-1.medium.com/max/1600/0*8gn4QAgQNQ94X8Q5
PUBLICADO EN 17 FEBRERO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Node.js Vulnerability Cheatsheet

https://cdn-images-1.medium.com/max/2600/0*Aypp0tnOXyVp5qze
25 vulnerabilities to look out for in Node JS applications: Directory traversal, prototype pollution, XSSI, and more…

Continue reading on ShiftLeft Blog »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Security Teams Expect Attackers to Go After End Users First

Phishing, malware, and ransomware have spurred organizations to increase their investments in endpoint security, according to Dark Reading’s Endpoint Security Survey.

Dark Reading: Attacks/Breaches
Attackers Hone Their Playbooks, Become More Agile

Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.

Dark Reading: Attacks/Breaches
Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy

Carpet bombing attacks increase sharply in 2021, along with complex multivector attacks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
NSA Issues Guidance for Selecting Strong Cisco Password Types

Poorly protected passwords in device configuration files present a risk of compromise, agency says.

Dark Reading: Attacks/Breaches
Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor

Vulnerability allows attackers to run arbitrary commands, including the ability to delete, modify, and exfiltrate private source code.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Confluera Cloud Research Finds Cybersecurity Concern as Biggest Obstacle to Cloud and Multicloud Adoption

Meanwhile, 84% of IT leaders are optimistic about their cybersecurity readiness for 2022.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I just got into hacking

Any tips for anyone just started hacking and just got into the idea of it

submitted by /u/GiraffeCapable3368
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video