Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
131K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Dark Reading: Attacks/Breaches
After a Busy December, Attacks on Log4j Vulnerability Dropped

While attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.
Dark Reading: Attacks/Breaches
Why the World Needs a Global Collective Cyber Defense

This sort of approach would enable cross-company and cross-sector threat information sharing, an effort that would allow companies to easily turn data into actionable insights.
Real-world examples of cryptographic failures
https://www.reddit.com/r/Pentesting/comments/t8s1kp/realworld_examples_of_cryptographic_failures/

Hi all. I have been doing CTF challenges and I'm aware of famous cryptographic schemes. Although there are weaknesses intentionally injected in the CTF challenges, I was wondering how common cryptographic failures are as against XSS or SQLi. Since algorithms like RSA are strong enough to brute force and there are a lot of warnings on the web around using weak crypto methods, I think that crypto vulnerabilities are not that common. Could you experts who see real-world applications of this vulnerability elaborate on this? submitted by /u/pyDeb (https://www.reddit.com/user/pyDeb)
[link] (https://www.reddit.com/r/Pentesting/comments/t8s1kp/realworld_examples_of_cryptographic_failures/) [comments] (https://www.reddit.com/r/Pentesting/comments/t8s1kp/realworld_examples_of_cryptographic_failures/)

___________________________
@hacking_Attack
@Hacking_Video
All about Account Takeover

Account Takeover Methods
Read more...
$$$ Bank Verification Bypass(Broken Object Level Authorisation)

Hey Readers, 👋, Hope you are doing great,
Read more...
hacking: security in practice
CamPhish tool permission requirements

Heyo I was playing around with camphish and realised that in order to take pics, it requires the target to press accept to giving access to their camera . I know there are programs out there that can instantly gain access to a targets webcam without asking for permissions(i see most of them use a evil twin attack) . And mainly is there a way to detect such software if it was planted onto my pc(through clicking on links)

submitted by /u/Barlie2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Reverse engineering

So I’m in a lot of Linux subreddits, a lot of people damn closed source software to hell meanwhile there is some closed source software that’s cool.

Can’t they make it open source via reverse engineering or decompiling?

If so: why don’t people do this more?

I’m pretty sure only the distribution of the software after the fact would be illegal, I mean you’d have to say goodbye to updates and patches, but???

submitted by /u/605yeeter
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
A new era of hacking?

With this recent declaration of cyber war by anonymous on the Russian federation, do you guys think this brings in a new era of hacking where gangs of hackers will be in active "gang wars" with other gangs? Just an interesting thought.

submitted by /u/seanie-123
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Making a Career Switch and Looking for Advice
https://www.reddit.com/r/Pentesting/comments/t8ubg6/making_a_career_switch_and_looking_for_advice/

Hello everyone. So I graduated form college a few years ago with a BFA in Acting and as you can probably guess, its a very hard industry to get into, let alone make a living in your years, thus I've been doing a lot of gig work and serving at restaurants. These jobs haven't been very consistent and moneywise and so I am making a career switch into IT, CyberSec. I was thinking with my acting background that I would be a good fit for Red Team as a social engineer. I should also point out that I am in a CyberSec Bootcamp and am going to come out with a cert in Sec+. I guess what I'm looking for is advice for getting onto Red Team without any real IT background. Any thoughts will be appreciated. THANK YOU submitted by /u/gosh_sammit (https://www.reddit.com/user/gosh_sammit)
[link] (https://www.reddit.com/r/Pentesting/comments/t8ubg6/making_a_career_switch_and_looking_for_advice/) [comments] (https://www.reddit.com/r/Pentesting/comments/t8ubg6/making_a_career_switch_and_looking_for_advice/)

___________________________
@hacking_Attack
@Hacking_Video