hacking: security in practice
Kasperski source code leak by NB65. Shit just Got serious! 🇺🇦🇺🇦🇺🇦 claims ties to russian gov

https://external-preview.redd.it/wJH5z-c5S-wvGrJfTW3tXdzrxLA9Ny1EsuK4APM0dYQ.jpg?width=108&crop=smart&auto=webp&s=df7521ab2b77cd0d2f5bbcecd894983ba1951454 submitted by /u/Izyhot
[link] [comments]

hacking: security in practice
A hack by Lapsus$?

Just a theory, Lapsus$ targeted Samsung & NVIDIA just a few days ago and ransomed their source code. Seems like it's happening again to Discord & Spotify. Google Cloud Services (the hosts both websites use) are still active, and both went down within minutes of each other. Apps and websites went down simultaneously, so it's more than just a website fault. This is a targeted attack of some sort, we're not sure who it's from but this feels too coincidental to happen so near to each other. Watch out, this might be just the beginning.

Edit: Matthew Prince (Cloudflare CEO) claims no issues on their end https://twitter.com/eastdakota/status/1501276906158657541?t=8Al4VRyrNyssKKNlMnn2Uw&s=19 No comment from Google. Noticeably higher traffic on other websites but could be people finding alternatives to Spotify and Discord https://downdetector.net

submitted by /u/H4lloM8
[link] [comments]

hacking: security in practice
Recommendations of books, tutorials, videos, etc. to secure node js backend and APIs

I have a bit of experience with node js and making an API but i don't have idea about security. What do you recommend me to learn about it?

submitted by /u/Ok_Gas_1601
[link] [comments]

Phonebook, the way to DoS a company

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Crazy Hacking Stories (and How You Could be a Threat to National Security)

https://cdn-images-1.medium.com/max/1000/1*tAbdInxk9ryGcNPlTGOeQg.jpeg
The title is no joke.

Continue reading on Medium »

Hacking on Medium
Development: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/916/0*doNYSEDIvo0Do3Ys
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Cyber Security in Aviation: What India Needs to Know

https://cdn-images-1.medium.com/max/1072/1*SODCgeYTbYk4MfvzqPVkMA.png
India is a country of immense potential and with the increasing number of flights, it is imperative that cyber security in aviation be…

Continue reading on Medium »

Hacking on Medium
10 Ways to Use Instagram to Grow Your Business

https://cdn-images-1.medium.com/max/640/1*AdFxGg2pDqNERfD6OJskIw.jpeg
10 Ways to Use Instagram to Grow Your Business

Continue reading on Medium »

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) EXAMPLES go run scannerport.go -ap <IP>: Allports TCP Scan go run scannerport.go <IP> Default Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnet go run scannerport.go <IP> -pr <MINPORT> <MAXPORT> go run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">ARGUMENTS-ar CIDR: ARP Discovery-ar CIDR -s: Scan ports in all hosts discovered-ap: Scan to 65535 Ports-pr MINPORT MAXPORT: Define Port Range to Scan-1000: Scan Top 1000 ports (like nmap)-t: Set Timeout (in milliseconds)EXAMPLESgo run scannerport.go -ap <IP>: Allports TCP Scango run scannerport.go <IP> Default Scan 0-1024 portsgo run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnetgo run scannerport.go <IP> -pr <MINPORT> <MAXPORT>go run scannerport.go -ar 192.168.1.1/24 -sgo run scannerport.go -1000 192.168.1.1go run scannerport.go -t 100 192.168.1.1Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) Contributors Thanks to @ajaniramon for help in this project! Download GONET-Scanner
Read more...

KitPloit - PenTest Tools!
GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

https://blogger.googleusercontent.com/img/a/AVvXsEjlIeWxhzNcMm6KZqaB4DHss0AQ7cJGE9k40Fs8FD05VbSswhv3vyWuHcgG23O4AptQzlFTebb_TAxpT5b58WeViLd0wZSGv2tK6HnyL9shbCN9HUFPDwGIP2QBaJMXHlISLQEXq6UcnhY9XcI4mkV6_j0jDOAxzXMK56hEw2SgGEbmEQTLIc6g0Vhq=w640-h360 ScreenShotshttps://blogger.googleusercontent.com/img/a/AVvXsEjVRgReZJwyf7d8FL9fZuAWpJPCV3Xf62jzPa3g_hjk5NC6jfNP6gpydkeTG9cTB1r5SVnHBNTjY_97QrtWYg6fQzwIPG8AYYAb3Z9MvtBuKY7iAI_tJc-njiMzPyw4G8Ugy1Ds8UJDL9OSf7EJd1A8PX9sUHjbb6054LJbk3tVsn365Oqey_f_e8fn=w640-h376 https://blogger.googleusercontent.com/img/a/AVvXsEhLOcnPrA8mFv7R5CMZQymA3e-oRLHAmt04OyR8rnvFgBvAvJs7EsJA8J6nZ8ETocOETGZ-9OgKnrSTF-k8dmITJanFH7DWgFCaSH7dY_aohXhrT9Xxc1lsTyc9fDU6-kKLLqqDg2SV89S6Y6S2ObzNCy1cnUyVKzdAaQCFSUBSkP-tpLn8zeI7gmoN=w640-h242 Installchmod +x install.sh
./install.sh [as root] UsageARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) [EXAMPLES] go run scannerport.go -ap <ip: Allports TCP Scan go run scannerport.go <ipDefault Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet go run scannerport.go <ip-pr <minport<maxportgo run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">[ARGUMENTS]

-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)

[EXAMPLES]

go run scannerport.go -ap <ip: Allports TCP Scan
go run scannerport.go <ipDefault Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet
go run scannerport.go <ip-pr <minport<maxport
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) ContributorsThanks to @ajaniramon for help in this project! Download GONET-Scanner

EDR testing environment
https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/

<!-- SC_OFF -->Hey folks just wondering if anyone know of any resources or books they can point me to on setting up an EDR testing environment. Any suggestions or tips would be greatly appreciated. <!-- SC_ON --> submitted by /u/david001234567 (https://www.reddit.com/user/david001234567)
[link] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/) [comments] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/)

Dark Reading: Attacks/Breaches
Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

PTC has issued patches for seven vulnerabilities — three critical — in its widely used Axeda remote management technology.

Dark Reading: Attacks/Breaches
TAC Security Launches ESOF Phish Infielder Tool to Help Organizations Prevent Phishing Attacks

Available through TAC Security’s new ESOF® VMDR Next Generation Vulnerability and Risk Management Platform.

Dark Reading: Attacks/Breaches
Even 'Perfect' APIs Can Be Abused

Broad-scale API abuse is occurring every day as businesses make their data available to trading partners — and even the public.

Dark Reading: Attacks/Breaches
Microsoft Patches Critical Exchange Server Flaw

Remote code execution vulnerability among 71 bug fixes issued in March Patch Tuesday.

hacking: security in practice
Another worst thing about being a hacker

People only notice when you successfully hack something, they don't care that it took you 5 or 6 attempts to actually get there

submitted by /u/itsgonbeokayyeah
[link] [comments]

hacking: security in practice
Website security checklist

Looking for suggestions for a checklist to check the security of a website. It has to be a manual process meaning you can look at the source code, but can't run a vulnerability scanner against the website.

Some examples

Password Recovery

HTTP vs HTTPS

Email address or Contact page

URL manipulation -

What other things would you check and how would you check?

You consider it as part of your planning stage and you visit a company website. What would you check quickly and note it might be weakness?

submitted by /u/dbikingman
[link] [comments]