Fun ideas for physical pentesting?
https://www.reddit.com/r/redteamsec/comments/sy82mb/fun_ideas_for_physical_pentesting/

Hey team! So my sec team started a physical security assessment a week ago and its been fun. I got to use the under-the-door tool, tailgate, clone rfid card and bypass motion sensor entrances/exits. I was wondering if you guys had any ideas about what you would do if you had “keys to the kingdom” such as the server room or someones desktop? Edit: grammar submitted by /u/Enes_24 (https://www.reddit.com/user/Enes_24)
[link] (https://www.reddit.com/r/redteamsec/comments/sy82mb/fun_ideas_for_physical_pentesting/) [comments] (https://www.reddit.com/r/redteamsec/comments/sy82mb/fun_ideas_for_physical_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

Chasing the Silver Petit Potam to Domain Admin
https://www.reddit.com/r/redteamsec/comments/syagrh/chasing_the_silver_petit_potam_to_domain_admin/

submitted by /u/ZephrX112 (https://www.reddit.com/user/ZephrX112)
[link] (https://blog.zsec.uk/chasing-the-silver-petit-potam/) [comments] (https://www.reddit.com/r/redteamsec/comments/syagrh/chasing_the_silver_petit_potam_to_domain_admin/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SafeNet Sentinel Dual

Ok, so... I have a Chinese made sub-surface laser engraver that came with Windows xp desk top pc with "laser image 3.0" software installed, none of the software will run without the dog drive "safenet dongle" plugged in which got destroyed. Any help will be greatly appreciated and potentially rewarded. Plz.

submitted by /u/PhilTech345
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Breaking news: Journalist will not be charged with exposing network vulnerability. Other news: MO governor still a moron.

Police probe shows Missouri data weakness existed 11 years before Post Dispatch exposed it

submitted by /u/bcidri
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

2FA Misconfiguration leads to adding any number as 2FA verification
https://binamrapandey.medium.com/2fa-misconfiguration-leads-to-adding-any-number-as-2fa-verification-30d5545d1b12?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I was testing 2FA on a website. At first, I tried to bypass 2FA but I was not successful, then I thought of something else. What if I can…Continue reading on Medium » (https://binamrapandey.medium.com/2fa-misconfiguration-leads-to-adding-any-number-as-2fa-verification-30d5545d1b12?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
China Implicated in Prolonged Supply Chain Attack Targeting Taiwan Financial Sector

https://cdn-images-1.medium.com/max/727/1*KXtna41f8oIjFvPuM1YxCA.png
Severe Vulnerability Uncovered in Major Taiwan Financial Software

Continue reading on CyCraft »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
2FA Misconfiguration leads to adding any number as 2FA verification

https://cdn-images-1.medium.com/max/600/1*HoiwwoReAAagQQ3JgoTwOA.png
I was testing 2FA on a website. At first, I tried to bypass 2FA but I was not successful, then I thought of something else. What if I can…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

2FA Misconfiguration leads to adding any number as 2FA verification

I was testing 2FA on a website. At first, I tried to bypass 2FA but I was not successful, then I thought of something else. What if I can…Continue reading on Techiepedia »
Read more...

hacking: security in practice
Chinese hackers linked to zero-day attack on Taiwanese financial sector

https://external-preview.redd.it/rXZJ7lWjaCwmZjlDcJ7lDE97wxMaWldykO6VIPZB37Q.jpg?width=640&crop=smart&auto=webp&s=9359281d031fffb4a5d63bd8151a10bafa3745f9 submitted by /u/caffcaff_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
logging into a raspberry pi

Hey everyone,

I was wondering if someone can explain how someone is able to log into a raspberry pi.

I was listening to a podcast and the host interviewed a pentester talking about the time he was hired by a company to test their security. During the interview, he mentions after he got his way into the building, he snuck into an empty room to plug in his raspberry pi in to access their network when he got back to his hotel.

I don't understand what he means by that. Did he just ssh into it?

submitted by /u/XenomXX_121
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -7-
https://hcibo.medium.com/my-pentest-log-7-21d3ffc54eb6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings to all from Sergius and Bacchus,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-7-21d3ffc54eb6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
웜홀 해킹사건 요약

무려 3주 전에 작성한 글인데,
블로그 새로 운영하기로 마음먹어서 미디엄에 다시 글 올립니다.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
2FA Misconfiguration leads to adding any number as 2FA verification

https://cdn-images-1.medium.com/max/600/1*HoiwwoReAAagQQ3JgoTwOA.png
I was testing 2FA on a website. At first, I tried to bypass 2FA but I was not successful, then I thought of something else. What if I can…

Continue reading on Techiepedia »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Behind-the-Scenes of Infosec Writeups

https://cdn-images-1.medium.com/max/2600/0*w1kLBf2sTlKGA-RF
How the publication grew since 2017, one message at a time.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NMAP commands for scanning remote hosts

https://cdn-images-1.medium.com/max/1400/0*EFTTcCckcJLL977e.jpeg
Network mapper, abbreviated as Nmap, is an open-source network scanning tool that scans remote hosts and probes for a wealth of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video