Dark Reading: Attacks/Breaches
Free Cybersecurity Tools and Services List Published by CISA

The Cybersecurity & Infrastructure Security Agency (CISA) says this "living repository" is a mix of popular open source and free tools and services from both the private and public sectors.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Axiomatics Introduces Orchestrated Authorization

New enhancements and capabilities help enterprises embrace cloud-native technologies.

___________________________
@hacking_Attack
@Hacking_Video

SharpCookieMonster - Extracts Cookies From Chrome
http://www.kitploit.com/2022/02/sharpcookiemonster-extracts-cookies.html

___________________________
@hacking_Attack
@Hacking_Video

This is a Sharp port of @defaultnamehere's cookie-crimes (https://github.com/defaultnamehere/cookie_crimes) module - full credit for their awesome work! This C# project will dump cookies (https://www.kitploit.com/search/label/Cookies) for all sites, even those with httpOnly/secure/session flags.
Usage Simply run the binary. SharpCookieMonster.exe [https://sitename.com] [chrome-debugging-port] [user data dir]
An optional first argument sepcifies the site that chrome will initially connect to when launched (default https://www.google.com (https://www.google.com/)). An optional second argument specifies the port to launch the chrome debugger (https://www.kitploit.com/search/label/Debugger) on (by default 9142). Finally, an optional third argument specifies the path to the user data directory, which can be overridden in order to access (https://www.kitploit.com/search/label/Access) different profiles etc (default %APPDATALOCAL%\Google\Chrome\User Data). Building The binary (https://www.kitploit.com/search/label/Binary) has been built to be compatible with .NET 3.5 in order to be compatible with victims with older versions of .NET installed. However in order to use WebSockets to communicate with Chrome the WebSocket4Net package was added. If you want to run this down C2 such as using PoshC2 (https://github.com/nettitude/PoshC2)'s sharpcookiemonster command or via CobaltStrike's execute-assembly then use ILMerge to merge the built executable with the WebSocket4Net.dll library. First rename the original binary then run: ILMerge.exe /targetplatform:"v2,C:\Windows\Microsoft.NET\Framework\v2.0.50727" /out:SharpCookieMonster.exe SharpCookieMonsterOriginal.exe WebSocket4Net.dll


Download SharpCookieMonster (https://github.com/m0rv4i/SharpCookieMonster)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Is Exploit Development?

submitted by /u/joe691013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create bouncing servers

I have only been doing cybersecurity for 2 years now, just as a hobby. I am kind of new to servers and hiding yourself while hacking, but how do hackers create bouncing servers?

submitted by /u/Kenmorgan202
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
CVE-2016-9682: SonicWALL SMA/SRA

https://external-preview.redd.it/URS_9mQLdooMLi9Krpbv79GqrFldxxI4kk-GSX_PGAg.jpg?width=320&crop=smart&auto=webp&s=ddc21b571f0768bcda564b1da61e20d0dc751fbc submitted by /u/Y2Che
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Happens When Russian Hackers Come for the Electric grid?

There have been hundreds of victims since the progressive attack on the US grid silently hijacked by hackers with alleged links to Russia…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Increase my my credit

Honestly has anyone ever got his credit or school grade fixed by a hacker before ? please drop your comments and also refer.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tiempos de operación e infección del malware

https://cdn-images-1.medium.com/max/1526/0*JZZrThggzWOIp4AA
PUBLICADO EN 18 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Protect Your Secure String Data At All Cost!

https://cdn-images-1.medium.com/max/1903/1*l6Xw7ey0bYbIkPBFZsdV9w.png
First of all, let me clear about my self, i am not the security expert just a noob who like playing around the internet, so if you spot…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft advierte sobre la amenaza ‘Ice Phishing’ en Web3 y redes descentralizadas

https://cdn-images-1.medium.com/max/728/0*hnL_c5fXkUb5eGpr.gif
PUBLICADO EN 18 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
WordPress Plugin With Over 3 Million Installs Has a Vulnerability

https://cdn-images-1.medium.com/max/2600/0*H9s1ikteMUeY-Q4B
UpdraftPlus, a WordPress plug-in, has a serious bug that puts backups at risk

Continue reading on DataDrivenInvestor »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Key Application Security Metrics Show Few Signs of Improvement

A new study shows that organizations continued to take an inordinately long time to fix vulnerabilities and fixed fewer known issues in their environments last year than in 2020.

Hacking on Medium
Breaking Domain Trusts with Forged Trust Tickets

https://cdn-images-1.medium.com/max/2600/1*-O6D99_2qz_8GU-eIvfrQA.jpeg
Abuse Active Directory domain trusts for privilege escalation to Enterprise Admin

Continue reading on R3d Buck3T »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I made a tool to find and stream public/misconfigured security cams

Hi everyone,

I made a "hack" tool using python which uses Selenium and OpenCV to find and stream misconfigured/public webcams, security cams, and CCTV cams to your computer.

Check it out at https://github.com/flancast90/camview to learn more about it, and ⭐ it if you like!

Feel free to ask any questions in the comments, I'm sure the code needs some optimisation 😂, and I'm still a beginner compared to many of you.

submitted by /u/Muted_Original
[link] [comments]