My Pentest Log -9-

Greetings from Kerkoporta to all,Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Google to Buy Mandiant, Aims to Automate Security Response

In a deal worth $5.4 billion, Google would expand its security portfolio with managed detection and response (MDR) and threat intelligence, with an increasing focus on automation.

Dark Reading: Attacks/Breaches
Dark Reading Reflects on International Women's Day

A look at how far the information security industry has come - and how far it still has to go.

Dark Reading: Attacks/Breaches
Security Industry Association Reveals the 2022 Women in Security Forum Power 100 List

This new annual program showcases 100 women who are role models, leaders, innovators, and influencers in the global security industry.

Phonebook, the way to DoS a company

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)Continue reading on Medium »
Read more...

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser
http://www.kitploit.com/2022/03/gonet-scanner-golang-network-scanner.html

ScreenShots

Install chmod +x install.sh
./install.sh [as root]

Usage ARP Discovery -ar CIDR (https://www.kitploit.com/search/label/CIDR) -s: Scan (https://www.kitploit.com/search/label/Scan) ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) [EXAMPLES] go run scannerport.go -ap : Allports TCP Scan go run scannerport.go Default Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet go run scannerport.go -pr go run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover (https://www.kitploit.com/search/label/Discover) if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">[ARGUMENTS]

-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)

[EXAMPLES]

go run scannerport.go -ap : Allports TCP Scan
go run scannerport.go Default Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 : ARP Ping Scan ALL local Subnet
go run scannerport.go -pr
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)

Contributors Thanks to @ajaniramon for help in this project!

Download GONET-Scanner (https://github.com/luijait/GONET-Scanner)

hacking: security in practice
IT ARMY of Ukraine published emails of Russian Duma, Russian media and Russian Ministry of Energy and Russian Ministry of Digital Development on their Telegram.

https://external-preview.redd.it/Y-wufTzw4lBwZwiMqXFb2RsJyAlvcOBdRhBtQe8ayWY.jpg?width=320&crop=smart&auto=webp&s=ed5395e9e2f4f35409a338c9e57ee5653fe87c19 submitted by /u/YetAnotherInvestor
[link] [comments]

hacking: security in practice
Current password crackers

I used to use Cain and Abel years ago for fun and I’m looking to get back into the space.

Is Hydra the current go to tool for password cracking and network sniffing? What’s your personal favorite?

submitted by /u/DanWilks12
[link] [comments]

hacking: security in practice
CVE-2022-26143: TP240PhoneHome reflection/amplification DDoS attack vector

https://external-preview.redd.it/s5CT9rsCPeHTnFRnXjVuHNZb0uKtbMDv2ydvcoie6O4.jpg?width=640&crop=smart&auto=webp&s=429030fd4660f7c2e9ce5f7b0c591a561a3faf23 submitted by /u/AlexForster
[link] [comments]

hacking: security in practice
Kasperski source code leak by NB65. Shit just Got serious! 🇺🇦🇺🇦🇺🇦 claims ties to russian gov

https://external-preview.redd.it/wJH5z-c5S-wvGrJfTW3tXdzrxLA9Ny1EsuK4APM0dYQ.jpg?width=108&crop=smart&auto=webp&s=df7521ab2b77cd0d2f5bbcecd894983ba1951454 submitted by /u/Izyhot
[link] [comments]

hacking: security in practice
A hack by Lapsus$?

Just a theory, Lapsus$ targeted Samsung & NVIDIA just a few days ago and ransomed their source code. Seems like it's happening again to Discord & Spotify. Google Cloud Services (the hosts both websites use) are still active, and both went down within minutes of each other. Apps and websites went down simultaneously, so it's more than just a website fault. This is a targeted attack of some sort, we're not sure who it's from but this feels too coincidental to happen so near to each other. Watch out, this might be just the beginning.

Edit: Matthew Prince (Cloudflare CEO) claims no issues on their end https://twitter.com/eastdakota/status/1501276906158657541?t=8Al4VRyrNyssKKNlMnn2Uw&s=19 No comment from Google. Noticeably higher traffic on other websites but could be people finding alternatives to Spotify and Discord https://downdetector.net

submitted by /u/H4lloM8
[link] [comments]