Dark Reading: Attacks/Breaches
Researchers Warn of Stealthy Chinese Backdoor Targeting Multiple Foreign Agencies

A stealthy backdoor program used by China-linked threat actors has targeted government computers at multiple foreign agencies, allowing attackers to retain a presence on sensitive networks and exfiltrate data while remaining undetected.

hacking: security in practice
Could hacking organizations use people specialized in persuasion?

Hi there,

I always loved the world of hacking, but life took me in another direction. Now I work in advertising as a copywriter (persuasive writing), but I would still love to be part of this world. I was wondering if my knowledge could eventually be of use for an ethical hacking organization.

Since hacker a lot of times rely on social engineering, that kinda makes sense for me. However, I think it's best to hear the opinion of someone that already knows about this.

I also have some background in coding, but I don't think that's relevant in this case.

submitted by /u/MrVulpe
[link] [comments]

hacking: security in practice
Resource for different types of cyberattacks

Is there a resource you guys use for learning about different types of attacks? For example, I was trying to find what types of attacks are possible on an open network and couldn't find any great resources. Thanks! and sorry if this is a stupid question

submitted by /u/Nlbjj91011
[link] [comments]

hacking: security in practice
Conti group chat leaks

https://external-preview.redd.it/0E5jZOaMvVIGJ-VsM57tNQ9kxgSt3iYnxH1wirTo8ZM.jpg?width=640&crop=smart&auto=webp&s=f990a004f832d8a566bbbd8c357cb8d156e57cde submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking on Medium
Stress testing websites with HTTP flood attack

https://cdn-images-1.medium.com/max/1250/1*-f1MQNv8yn1psL1S_bdmNA.png
Exploring a specific type of DDoS attacks — HTTP flood

Continue reading on Medium »

Hacking on Medium
Hacking the backdoor

https://cdn-images-1.medium.com/max/810/1*PQC_SpF1gsILdi6gyCKWyA.png
Hi guys, I’m back with a new blog and this it’s great for beginners like me, with this blog I’ll try to explain how I “hack” this machine…

Continue reading on Medium »

Hacking on Medium
TryHackMe — Boiler CTF — Writeup

https://cdn-images-1.medium.com/max/600/1*FWQmWkVY7A0xZgsE50B5MA.png
E vamos para mais um CTF.
Conforme definido pelo autor, este CTF é de nível intermediário.

Continue reading on Medium »

Hacking on Medium
16 deadliest Malwares of all time

https://cdn-images-1.medium.com/max/1920/0*9iPP7QV3Gwy7dpzd
The deadliest malware occurred throughout history

Continue reading on Medium »

Hacking on Medium
Knowledge of Malware

https://cdn-images-1.medium.com/max/2000/1*NLpPakxffwOe9XIVECq3pg.jpeg
Hello readers

Continue reading on Medium »

Hacking on Medium
CISA advierte sobre fallas de alta gravedad en el software SCADA de Schneider y GE Digital

https://cdn-images-1.medium.com/max/1600/0*VNUMGb4GaCcmnSis
PUBLICADO EN 28 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

hacking: security in practice
How would you find a target gateway from an entirely external stance?

Hey All,

I'm just looking for options and best practices for the following scenario

I have a home network where I have my "lab" for lack of a better term, How would you as an "attacker" find that IP address externally?

This may be a much lower level question than I thought so if so pardon my ignorance and I appreciate any help.

submitted by /u/Varloch_The_Undying
[link] [comments]

hacking: security in practice
Russian Electric Vehicle Chargers Hacked, Tell Users ‘PUTIN IS A DICKHEAD’

https://external-preview.redd.it/sfjV9qm5C9aI1FFKo486Bw3nUpZbM1EvDhr6Pe3Kg4k.jpg?width=640&crop=smart&auto=webp&s=88c7c3c91979e1ea1128a0d125ce21409d1c1cf2 submitted by /u/sleepdeeptreep
[link] [comments]

hacking: security in practice
how beginner friendly is « hacking: the art of exploitation » by jon erickson?

what prior knowledge would be helpful? what books should i read before if any

submitted by /u/Upset-Pool4864
[link] [comments]

hacking: security in practice
What keylogger *actually* works for windows that hasn't a GUI with it?

I tried to hack my computer with a botnet before this. Spoiler alert: It didn't work. So I thought "well, let's take this step by step. Let's begin with a keylogger first and then move to those fancy botnets and trojans". But here I come across another problem.

I searched enormous amounts of Github pages, online and none of the keyloggers I tested actually works. Either I need to do large amounts of debugging or to compile c++ files (which by the way, I don't know how to do that and I don't have visual code studio). Can someone find me a working windows keylogger that I could use?

P.S.: My computer has Windows 10 with 64x architecture.

submitted by /u/407PrxAuthReq
[link] [comments]

hacking: security in practice
norussian.tk offline / moved to new URL?

yap, title is 'bout everything. Just would like to know what's going on with this ez to use site!

submitted by /u/Resposible-Spirit42
[link] [comments]

hacking: security in practice
Honeypot Research Project

Hi, so I’m a freshman in a cybersecurity program and also part of the honors program. For that I need to have a research project done in about a year. I don’t really know much of anything relating to the field but I’m thinking of setting up a basic honeypot and analyzing the data. Will I even get any hits? Also, are there any good resources/ advice on getting started with this if it’s even a good idea? I would like to try and set it up on maybe linode or maybe AWS. If it’s not a good idea what might be some other beginner/ intermediate projects I should look into?

submitted by /u/LilUziGrt
[link] [comments]

hacking: security in practice
Handful of Russian media websites display anti-Putin message after hack

https://external-preview.redd.it/8lYKpYRtEvQkpNLjlz5a2grFl177F6vnRKZsxyn9qLw.jpg?width=640&crop=smart&auto=webp&s=22560c10b972184a6f4ae5f54b4a1830e3044cd7 submitted by /u/Practical_Dream538
[link] [comments]

hacking: security in practice
Like the NFL? Have a Samsung TV? NFL Sunday Ticket Application Vulnerability

The NFL Sunday Ticket app from DirectTV does not properly terminate a user's session, so if you're able to find a login via a disclosed list of credentials and jump on, you can retain access, even if the user performs a password change.

The entry level employee dealing with triage doesn't think this is a vuln so figured I'd just post it.

submitted by /u/PlzNoBigRed
[link] [comments]