Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Risk of EFIguard bootkit mod to disable Patchguard and Driver Signature Enforcement?

If anyone is familiar with EFIguard, a Windows bootkit/boot loader/kernel mod that disables Patchguard and Driver Signature Enforcement, can you help answer any of these questions?

1. What are the main security vulnerabilities of doing this patch and disabling DSE?
2. If I use EfiGuard from USB to boot Windows, are the patches applied permanently? (Does booting it from the USB stick mean it needs the USB plugged in permanently?)
3. Once I boot the loader (using the default settings), what exactly does that change? Does that just install EfiDSEFix.exe and make it available to run, or does it automatically change something about Windows (e.g. disable some security aspect)?
4. Does executing EfiDSEFix.exe -d
require/cause reboot?
5. Can I later re-enable DSE?
6. Do the patches persist across Windows OS updates/upgrades?

submitted by /u/thatonekidfromucla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Trio of Vendors Offer Free Services to Organizations at Risk of Russian Cyberattacks

CrowdStrike, Cloudflare, and Ping Identity have teamed up with tools and services for the healthcare, power, and water industries as a way to quickly bolster their security on several fronts.
Account Enumeration Hacking Tool Created By Python For Finding Username Of Your Target Websits…

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and…Continue reading on Medium »
Read more...
How I managed to make a DDoS attack by exploiting a company’s service — Bug Bounty

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was…Continue reading on Medium »
Read more...
Misconfiguration OAuth Lead Account Takeover #Part 2

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2Continue reading on Medium »
Read more...
Account Enumeration Hacking Tool Created By Python For Finding Username Of Your Target Websits…

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and…Continue reading on Medium »
Read more...