hacking: security in practice
How would you find a target gateway from an entirely external stance?

Hey All,

I'm just looking for options and best practices for the following scenario

I have a home network where I have my "lab" for lack of a better term, How would you as an "attacker" find that IP address externally?

This may be a much lower level question than I thought so if so pardon my ignorance and I appreciate any help.

submitted by /u/Varloch_The_Undying
[link] [comments]

hacking: security in practice
Russian Electric Vehicle Chargers Hacked, Tell Users ‘PUTIN IS A DICKHEAD’

https://external-preview.redd.it/sfjV9qm5C9aI1FFKo486Bw3nUpZbM1EvDhr6Pe3Kg4k.jpg?width=640&crop=smart&auto=webp&s=88c7c3c91979e1ea1128a0d125ce21409d1c1cf2 submitted by /u/sleepdeeptreep
[link] [comments]

hacking: security in practice
how beginner friendly is « hacking: the art of exploitation » by jon erickson?

what prior knowledge would be helpful? what books should i read before if any

submitted by /u/Upset-Pool4864
[link] [comments]

hacking: security in practice
What keylogger *actually* works for windows that hasn't a GUI with it?

I tried to hack my computer with a botnet before this. Spoiler alert: It didn't work. So I thought "well, let's take this step by step. Let's begin with a keylogger first and then move to those fancy botnets and trojans". But here I come across another problem.

I searched enormous amounts of Github pages, online and none of the keyloggers I tested actually works. Either I need to do large amounts of debugging or to compile c++ files (which by the way, I don't know how to do that and I don't have visual code studio). Can someone find me a working windows keylogger that I could use?

P.S.: My computer has Windows 10 with 64x architecture.

submitted by /u/407PrxAuthReq
[link] [comments]

hacking: security in practice
norussian.tk offline / moved to new URL?

yap, title is 'bout everything. Just would like to know what's going on with this ez to use site!

submitted by /u/Resposible-Spirit42
[link] [comments]

hacking: security in practice
Honeypot Research Project

Hi, so I’m a freshman in a cybersecurity program and also part of the honors program. For that I need to have a research project done in about a year. I don’t really know much of anything relating to the field but I’m thinking of setting up a basic honeypot and analyzing the data. Will I even get any hits? Also, are there any good resources/ advice on getting started with this if it’s even a good idea? I would like to try and set it up on maybe linode or maybe AWS. If it’s not a good idea what might be some other beginner/ intermediate projects I should look into?

submitted by /u/LilUziGrt
[link] [comments]

hacking: security in practice
Handful of Russian media websites display anti-Putin message after hack

https://external-preview.redd.it/8lYKpYRtEvQkpNLjlz5a2grFl177F6vnRKZsxyn9qLw.jpg?width=640&crop=smart&auto=webp&s=22560c10b972184a6f4ae5f54b4a1830e3044cd7 submitted by /u/Practical_Dream538
[link] [comments]

hacking: security in practice
Like the NFL? Have a Samsung TV? NFL Sunday Ticket Application Vulnerability

The NFL Sunday Ticket app from DirectTV does not properly terminate a user's session, so if you're able to find a login via a disclosed list of credentials and jump on, you can retain access, even if the user performs a password change.

The entry level employee dealing with triage doesn't think this is a vuln so figured I'd just post it.

submitted by /u/PlzNoBigRed
[link] [comments]

Hacking on Medium
AI Trojan Horse: DNN Fake Learning

https://cdn-images-1.medium.com/max/2560/1*kZgypH5qt6hfdzPV3TxPCQ.png
Train the DNNs with buried trigger data, activate at will

Continue reading on The Dock on the Bay »

Hacking on Medium
Diplomacy Using Cyberweapons

https://cdn-images-1.medium.com/max/2600/1*53wCNtWRjUCcu3dSXBgAcg.jpeg
Everything was being digitized during the Obama administration. Smartphones have become ubiquitous. People were uploading their entire…

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Phishing Attack in Ukraine Could Be Prelude to Disinformation Campaign

Belarus-based APT behind the attacks may also be working in concert with Russia, researchers say.

Dark Reading: Attacks/Breaches
Invicti Security Adds Software Composition Analysis to Its Industry- Leading AppSec Platform

Invicti SCA enables users to track and secure open-source components to reduce security risk.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Deep Instinct 2022 Threat Landscape Report Finds 125% Increase in Threat Types and Novel Evasion Techniques

The Deep Instinct Threat Research team monitored attack volumes and types and extrapolated their findings to predict where the future of cybersecurity is heading, determine what motivates attackers, and lays out the steps organizations can take now in order to protect themselves in the future.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Toyota Halts Production After Suspected Supply Chain Attack

Toyota suspends production at all 14 plants in Japan after a supplier reported being hit by "some kind of cyberattack."

Dark Reading: Attacks/Breaches
CISO Checklist for Offboarding Security Staff

The Great Resignation strikes cybersecurity teams too. Here's a checklist for CISOs to ensure security is retained even as security staff is not.

Dark Reading: Attacks/Breaches
KnowBe4 Research: Half of Employees Use Unauthorized File Services to Complete Work

Report examines the prevalence of two common insecure practices.

___________________________
@hacking_Attack
@Hacking_Video