hacking: security in practice
Would this method work or do they have checks

I just thought of a way to break any copy protection on any console

my idea goes like this what if you used digital oscilloscopes to sniff each bit on the data lines between the console and the disk drive then replay that exact bit stream to the console it would have no way at all to tell if it is getting the same 1's and 0's but they have to have some way i dont understand

let me know of any ways they might detect that

submitted by /u/whypickthisname
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
will a vpn prevent a hacker with honeypot wifi from stealing your info?

if a hacker creates a fake wifi connection called "airport wifi", and i connect to it, and i have mullvad vpn, will the hacker be blocked from seeing my passwords?

submitted by /u/seriousdudenow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hunting the Remastered Gucci Botnet

https://cdn-images-1.medium.com/max/896/1*BCzB7Ngsytmydc18QugtoA.png
I check my honey pots pretty regularly through the Virus Total API to see what volume of activity I am getting. A couple of days ago I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Tips for Pentesting on MacBook Pro?
https://www.reddit.com/r/Pentesting/comments/sxgdui/tips_for_pentesting_on_macbook_pro/

Hey all, Just got a M1 pro. Any general tips for setting it up with pentesting in mind? I’m interested in display, configuration preferences, software all that kinda stuff. submitted by /u/Larniiiii (https://www.reddit.com/user/Larniiiii)
[link] (https://www.reddit.com/r/Pentesting/comments/sxgdui/tips_for_pentesting_on_macbook_pro/) [comments] (https://www.reddit.com/r/Pentesting/comments/sxgdui/tips_for_pentesting_on_macbook_pro/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
signal jammers

is there any way to tell if a signal jammer is in use around you? say in a work place or in public if I suddenly lost signal could I tell if the cause is a jammer? If so how?

submitted by /u/unmatchedfailure
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's the best VPN from a hackers perspective?

out of curiosity

submitted by /u/Separate-Ad9302
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Do you suspect a partner is being unfaithful, having a secret life or hiding things from you?

https://cdn-images-1.medium.com/max/2600/1*XpwcM8l8o9qb8NCalZDyHw.jpeg
Background checks are performed. Private investigators may be able to listen in on phone calls or read text messages. However, they have…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What are the benefits of hiring a private investigator?

https://cdn-images-1.medium.com/max/2600/1*p0lY6OiLufQPvStiwBoz8w.jpeg
Numerous reasons exist for why committing adultery on your own may not be the best course of action. Just thinking about it may be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How can you tell if a private investigator is following you?

https://cdn-images-1.medium.com/max/2600/1*UYcp2CWlau25j8KdOo_cCg.jpeg
Look for strange autos that are parked near your home or in places where you frequently travel.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HacktheBox[Bolt]

https://cdn-images-1.medium.com/max/1860/1*2dxzoMVkDBs1wvC9FXn6TA.png
Bolt was a fun box labeled medium. Enumerating directories for the bolt.htb domain identifies a /download directory containing a copy of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Send a Email to me and get kicked out of Google Groups !!

A Feature that almost broke Google Groups !!
Read more...

Reading and Writing into Process's Memory
https://www.reddit.com/r/redteamsec/comments/sxm8bn/reading_and_writing_into_processs_memory/

Get the basic understanding on the remote process memory read and write all by windows 32 API and create your own game hacks. https://tbhaxor.com/reading-and-writing-into-processs-memory/ submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/sxm8bn/reading_and_writing_into_processs_memory/) [comments] (https://www.reddit.com/r/redteamsec/comments/sxm8bn/reading_and_writing_into_processs_memory/)

___________________________
@hacking_Attack
@Hacking_Video

Automating a Red Team lab with Packer, Terraform and Ansible
https://www.reddit.com/r/redteamsec/comments/sxnnd0/automating_a_red_team_lab_with_packer_terraform/

submitted by /u/nickonos (https://www.reddit.com/user/nickonos)
[link] (https://nickzero.co.uk/automating-a-red-team-lab/) [comments] (https://www.reddit.com/r/redteamsec/comments/sxnnd0/automating_a_red_team_lab_with_packer_terraform/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OpenSea Phishing

https://cdn-images-1.medium.com/max/1920/1*iA-6tStFqvJlIZ2_Vim9IA.jpeg
OpenSea has experienced a phishing scam. Such an attack hooked over 640 ETH in assets from 32 users with the label Fake_Phishing5169.

Continue reading on CryptoStars »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Thirteen ways to hack in the digital world

https://cdn-images-1.medium.com/max/824/1*jKleprC84vs5zkgKx1TVcQ.jpeg
1. Admin Key Compromise

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

C0V3RT - An exploration of all things "Covert Entry" Watch "C0V3RT - Can0pen3r's Green Belt Submission "American Clone Picked, Gutted, & Reassembled" (Tutorial)" on YouTube
https://www.reddit.com/r/redteamsec/comments/sxpa0q/c0v3rt_an_exploration_of_all_things_covert_entry/

submitted by /u/Can0pen3r (https://www.reddit.com/user/Can0pen3r)
[link] (https://youtu.be/r1w7etG93Sg) [comments] (https://www.reddit.com/r/redteamsec/comments/sxpa0q/c0v3rt_an_exploration_of_all_things_covert_entry/)

___________________________
@hacking_Attack
@Hacking_Video

Polygon Consensus Bypass Bugfix Review
https://medium.com/immunefi/polygon-consensus-bypass-bugfix-review-7076ce5047fe?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/polygon-consensus-bypass-bugfix-review-7076ce5047fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on serversPost Views: 208 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
Two vulnerabilities in open source monitoring platform Zabbix could allow an attacker to bypass authentication and execute arbitrary code on a targeted server.
The security flaws were found in Zabbix Web Frontend, a platform used to collect, centralize. and track metrics such as CPU load and network traffic across entire infrastructures.

Researchers from SonarSource, who discovered the bugs, noted that Zabbix is a high-profile target for threat actors due to its popularity, features, and its “privileged position in most company’s networks”. IssuesThe first vulnerability, tracked as CVE-2022-23131, which was given a severity of 9.1, is unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified.

A malicious unauthenticated actor could exploit this issue to escalate privileges and gain admin access to the Zabbix Frontend.
See Also: Complete Offensive Security and Ethical Hacking Course
A caveat to this is that to perform the attack, SAML authentication is required to be enabled, and the assailant has to know the username of Zabbix user (or use the guest account, which is disabled by default), a security advisory from Zabbix notes.

The second vulnerability found by SonarSource, tracked as CVE-2022-23134, is rated as medium severity and allows some steps of setup.php file to be reachable not only by super-administrators, but by unauthenticated users as well.

A malicious actor could pass step checks and potentially change the configuration of Zabbix Frontend, an advisory notes.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Patch nowIn a blog post from SonarSource, the researchers said that when writing and reviewing code related to important security features, “it is easy to make the same assumptions as the original developer who introduced the vulnerability”.

They wrote: “Here, there were no integration tests related to the client-side session storage that could have spotted this behavior.

“Always provide access to sensible services with extended internal accesses (e.g. orchestration, monitoring) over VPNs or a restricted set of IP addresses, harden filesystem permissions to prevent unintended changes, remove setup scripts, etc.”

Finally, the researchers recommended upgrading all instances running a Zabbix Web Frontend to 6.0.0beta2, 5.4.9, 5.0.19, or 4.0.37. See Also: Offensive Security Tool: Swaks – Swiss Army Knife for SMTP
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: How ILOVEYOU worm became the first global computer virus pandemic Source: portswigger.net Source Linkhttps://www.blackh[...]

___________________________
@hacking_Attack
@Hacking_Video