hacking: security in practice
IT ARMY of Ukraine published emails of Russian Duma, Russian media and Russian Ministry of Energy and Russian Ministry of Digital Development on their Telegram.

https://external-preview.redd.it/Y-wufTzw4lBwZwiMqXFb2RsJyAlvcOBdRhBtQe8ayWY.jpg?width=320&crop=smart&auto=webp&s=ed5395e9e2f4f35409a338c9e57ee5653fe87c19 submitted by /u/YetAnotherInvestor
[link] [comments]

hacking: security in practice
Current password crackers

I used to use Cain and Abel years ago for fun and I’m looking to get back into the space.

Is Hydra the current go to tool for password cracking and network sniffing? What’s your personal favorite?

submitted by /u/DanWilks12
[link] [comments]

hacking: security in practice
CVE-2022-26143: TP240PhoneHome reflection/amplification DDoS attack vector

https://external-preview.redd.it/s5CT9rsCPeHTnFRnXjVuHNZb0uKtbMDv2ydvcoie6O4.jpg?width=640&crop=smart&auto=webp&s=429030fd4660f7c2e9ce5f7b0c591a561a3faf23 submitted by /u/AlexForster
[link] [comments]

hacking: security in practice
Kasperski source code leak by NB65. Shit just Got serious! 🇺🇦🇺🇦🇺🇦 claims ties to russian gov

https://external-preview.redd.it/wJH5z-c5S-wvGrJfTW3tXdzrxLA9Ny1EsuK4APM0dYQ.jpg?width=108&crop=smart&auto=webp&s=df7521ab2b77cd0d2f5bbcecd894983ba1951454 submitted by /u/Izyhot
[link] [comments]

hacking: security in practice
A hack by Lapsus$?

Just a theory, Lapsus$ targeted Samsung & NVIDIA just a few days ago and ransomed their source code. Seems like it's happening again to Discord & Spotify. Google Cloud Services (the hosts both websites use) are still active, and both went down within minutes of each other. Apps and websites went down simultaneously, so it's more than just a website fault. This is a targeted attack of some sort, we're not sure who it's from but this feels too coincidental to happen so near to each other. Watch out, this might be just the beginning.

Edit: Matthew Prince (Cloudflare CEO) claims no issues on their end https://twitter.com/eastdakota/status/1501276906158657541?t=8Al4VRyrNyssKKNlMnn2Uw&s=19 No comment from Google. Noticeably higher traffic on other websites but could be people finding alternatives to Spotify and Discord https://downdetector.net

submitted by /u/H4lloM8
[link] [comments]

hacking: security in practice
Recommendations of books, tutorials, videos, etc. to secure node js backend and APIs

I have a bit of experience with node js and making an API but i don't have idea about security. What do you recommend me to learn about it?

submitted by /u/Ok_Gas_1601
[link] [comments]

Phonebook, the way to DoS a company

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Crazy Hacking Stories (and How You Could be a Threat to National Security)

https://cdn-images-1.medium.com/max/1000/1*tAbdInxk9ryGcNPlTGOeQg.jpeg
The title is no joke.

Continue reading on Medium »

Hacking on Medium
Development: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/916/0*doNYSEDIvo0Do3Ys
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Cyber Security in Aviation: What India Needs to Know

https://cdn-images-1.medium.com/max/1072/1*SODCgeYTbYk4MfvzqPVkMA.png
India is a country of immense potential and with the increasing number of flights, it is imperative that cyber security in aviation be…

Continue reading on Medium »

Hacking on Medium
10 Ways to Use Instagram to Grow Your Business

https://cdn-images-1.medium.com/max/640/1*AdFxGg2pDqNERfD6OJskIw.jpeg
10 Ways to Use Instagram to Grow Your Business

Continue reading on Medium »

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) EXAMPLES go run scannerport.go -ap <IP>: Allports TCP Scan go run scannerport.go <IP> Default Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnet go run scannerport.go <IP> -pr <MINPORT> <MAXPORT> go run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">ARGUMENTS-ar CIDR: ARP Discovery-ar CIDR -s: Scan ports in all hosts discovered-ap: Scan to 65535 Ports-pr MINPORT MAXPORT: Define Port Range to Scan-1000: Scan Top 1000 ports (like nmap)-t: Set Timeout (in milliseconds)EXAMPLESgo run scannerport.go -ap <IP>: Allports TCP Scango run scannerport.go <IP> Default Scan 0-1024 portsgo run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnetgo run scannerport.go <IP> -pr <MINPORT> <MAXPORT>go run scannerport.go -ar 192.168.1.1/24 -sgo run scannerport.go -1000 192.168.1.1go run scannerport.go -t 100 192.168.1.1Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) Contributors Thanks to @ajaniramon for help in this project! Download GONET-Scanner
Read more...

KitPloit - PenTest Tools!
GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

https://blogger.googleusercontent.com/img/a/AVvXsEjlIeWxhzNcMm6KZqaB4DHss0AQ7cJGE9k40Fs8FD05VbSswhv3vyWuHcgG23O4AptQzlFTebb_TAxpT5b58WeViLd0wZSGv2tK6HnyL9shbCN9HUFPDwGIP2QBaJMXHlISLQEXq6UcnhY9XcI4mkV6_j0jDOAxzXMK56hEw2SgGEbmEQTLIc6g0Vhq=w640-h360 ScreenShotshttps://blogger.googleusercontent.com/img/a/AVvXsEjVRgReZJwyf7d8FL9fZuAWpJPCV3Xf62jzPa3g_hjk5NC6jfNP6gpydkeTG9cTB1r5SVnHBNTjY_97QrtWYg6fQzwIPG8AYYAb3Z9MvtBuKY7iAI_tJc-njiMzPyw4G8Ugy1Ds8UJDL9OSf7EJd1A8PX9sUHjbb6054LJbk3tVsn365Oqey_f_e8fn=w640-h376 https://blogger.googleusercontent.com/img/a/AVvXsEhLOcnPrA8mFv7R5CMZQymA3e-oRLHAmt04OyR8rnvFgBvAvJs7EsJA8J6nZ8ETocOETGZ-9OgKnrSTF-k8dmITJanFH7DWgFCaSH7dY_aohXhrT9Xxc1lsTyc9fDU6-kKLLqqDg2SV89S6Y6S2ObzNCy1cnUyVKzdAaQCFSUBSkP-tpLn8zeI7gmoN=w640-h242 Installchmod +x install.sh
./install.sh [as root] UsageARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) [EXAMPLES] go run scannerport.go -ap <ip: Allports TCP Scan go run scannerport.go <ipDefault Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet go run scannerport.go <ip-pr <minport<maxportgo run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">[ARGUMENTS]

-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)

[EXAMPLES]

go run scannerport.go -ap <ip: Allports TCP Scan
go run scannerport.go <ipDefault Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet
go run scannerport.go <ip-pr <minport<maxport
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) ContributorsThanks to @ajaniramon for help in this project! Download GONET-Scanner

EDR testing environment
https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/

<!-- SC_OFF -->Hey folks just wondering if anyone know of any resources or books they can point me to on setting up an EDR testing environment. Any suggestions or tips would be greatly appreciated. <!-- SC_ON --> submitted by /u/david001234567 (https://www.reddit.com/user/david001234567)
[link] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/) [comments] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/)

Dark Reading: Attacks/Breaches
Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

PTC has issued patches for seven vulnerabilities — three critical — in its widely used Axeda remote management technology.

Dark Reading: Attacks/Breaches
TAC Security Launches ESOF Phish Infielder Tool to Help Organizations Prevent Phishing Attacks

Available through TAC Security’s new ESOF® VMDR Next Generation Vulnerability and Risk Management Platform.