hacking: security in practice
Recommendations of books, tutorials, videos, etc. to secure node js backend and APIs

I have a bit of experience with node js and making an API but i don't have idea about security. What do you recommend me to learn about it?

submitted by /u/Ok_Gas_1601
[link] [comments]

Phonebook, the way to DoS a company

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;)Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Crazy Hacking Stories (and How You Could be a Threat to National Security)

https://cdn-images-1.medium.com/max/1000/1*tAbdInxk9ryGcNPlTGOeQg.jpeg
The title is no joke.

Continue reading on Medium »

Hacking on Medium
Development: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/916/0*doNYSEDIvo0Do3Ys
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
Cyber Security in Aviation: What India Needs to Know

https://cdn-images-1.medium.com/max/1072/1*SODCgeYTbYk4MfvzqPVkMA.png
India is a country of immense potential and with the increasing number of flights, it is imperative that cyber security in aviation be…

Continue reading on Medium »

Hacking on Medium
10 Ways to Use Instagram to Grow Your Business

https://cdn-images-1.medium.com/max/640/1*AdFxGg2pDqNERfD6OJskIw.jpeg
10 Ways to Use Instagram to Grow Your Business

Continue reading on Medium »

GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

ScreenShots Install chmod +x install.sh./install.sh as root Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) EXAMPLES go run scannerport.go -ap <IP>: Allports TCP Scan go run scannerport.go <IP> Default Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnet go run scannerport.go <IP> -pr <MINPORT> <MAXPORT> go run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">ARGUMENTS-ar CIDR: ARP Discovery-ar CIDR -s: Scan ports in all hosts discovered-ap: Scan to 65535 Ports-pr MINPORT MAXPORT: Define Port Range to Scan-1000: Scan Top 1000 ports (like nmap)-t: Set Timeout (in milliseconds)EXAMPLESgo run scannerport.go -ap <IP>: Allports TCP Scango run scannerport.go <IP> Default Scan 0-1024 portsgo run scannerport.go -ar 192.168.0.1/24 <IP>: ARP Ping Scan ALL local Subnetgo run scannerport.go <IP> -pr <MINPORT> <MAXPORT>go run scannerport.go -ar 192.168.1.1/24 -sgo run scannerport.go -1000 192.168.1.1go run scannerport.go -t 100 192.168.1.1Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) Contributors Thanks to @ajaniramon for help in this project! Download GONET-Scanner
Read more...

KitPloit - PenTest Tools!
GONET-Scanner - Golang Network Scanner With Arp Discovery And Own Parser

https://blogger.googleusercontent.com/img/a/AVvXsEjlIeWxhzNcMm6KZqaB4DHss0AQ7cJGE9k40Fs8FD05VbSswhv3vyWuHcgG23O4AptQzlFTebb_TAxpT5b58WeViLd0wZSGv2tK6HnyL9shbCN9HUFPDwGIP2QBaJMXHlISLQEXq6UcnhY9XcI4mkV6_j0jDOAxzXMK56hEw2SgGEbmEQTLIc6g0Vhq=w640-h360 ScreenShotshttps://blogger.googleusercontent.com/img/a/AVvXsEjVRgReZJwyf7d8FL9fZuAWpJPCV3Xf62jzPa3g_hjk5NC6jfNP6gpydkeTG9cTB1r5SVnHBNTjY_97QrtWYg6fQzwIPG8AYYAb3Z9MvtBuKY7iAI_tJc-njiMzPyw4G8Ugy1Ds8UJDL9OSf7EJd1A8PX9sUHjbb6054LJbk3tVsn365Oqey_f_e8fn=w640-h376 https://blogger.googleusercontent.com/img/a/AVvXsEhLOcnPrA8mFv7R5CMZQymA3e-oRLHAmt04OyR8rnvFgBvAvJs7EsJA8J6nZ8ETocOETGZ-9OgKnrSTF-k8dmITJanFH7DWgFCaSH7dY_aohXhrT9Xxc1lsTyc9fDU6-kKLLqqDg2SV89S6Y6S2ObzNCy1cnUyVKzdAaQCFSUBSkP-tpLn8zeI7gmoN=w640-h242 Installchmod +x install.sh
./install.sh [as root] UsageARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports (like nmap) -t: Set Timeout (in milliseconds) [EXAMPLES] go run scannerport.go -ap <ip: Allports TCP Scan go run scannerport.go <ipDefault Scan 0-1024 ports go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet go run scannerport.go <ip-pr <minport<maxportgo run scannerport.go -ar 192.168.1.1/24 -s go run scannerport.go -1000 192.168.1.1 go run scannerport.go -t 100 192.168.1.1 Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up) Example: go run scannerport.go google.com -1000 (Will resolve google.com + Will scan top 1000 ports) Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port)">[ARGUMENTS]

-ar CIDR: ARP Discovery
-ar CIDR -s: Scan ports in all hosts discovered
-ap: Scan to 65535 Ports
-pr MINPORT MAXPORT: Define Port Range to Scan
-1000: Scan Top 1000 ports (like nmap)
-t: Set Timeout (in milliseconds)

[EXAMPLES]

go run scannerport.go -ap <ip: Allports TCP Scan
go run scannerport.go <ipDefault Scan 0-1024 ports
go run scannerport.go -ar 192.168.0.1/24 <ip: ARP Ping Scan ALL local Subnet
go run scannerport.go <ip-pr <minport<maxport
go run scannerport.go -ar 192.168.1.1/24 -s
go run scannerport.go -1000 192.168.1.1
go run scannerport.go -t 100 192.168.1.1
Example: go run scannerport.go -ar 192.168.1.1/24 (will send an arp ping to every host of net to discover if is it up)
Example: go run scannerport .go google.com -1000 (Will resolve google.com + Will scan top 1000 ports)
Example: go run scannerport.go 192.168.0.1 -pr 100 3000 (will scan every port in these range you must put first minor port) ContributorsThanks to @ajaniramon for help in this project! Download GONET-Scanner

EDR testing environment
https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/

<!-- SC_OFF -->Hey folks just wondering if anyone know of any resources or books they can point me to on setting up an EDR testing environment. Any suggestions or tips would be greatly appreciated. <!-- SC_ON --> submitted by /u/david001234567 (https://www.reddit.com/user/david001234567)
[link] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/) [comments] (https://www.reddit.com/r/Pentesting/comments/t9sz78/edr_testing_environment/)

Dark Reading: Attacks/Breaches
Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

PTC has issued patches for seven vulnerabilities — three critical — in its widely used Axeda remote management technology.

Dark Reading: Attacks/Breaches
TAC Security Launches ESOF Phish Infielder Tool to Help Organizations Prevent Phishing Attacks

Available through TAC Security’s new ESOF® VMDR Next Generation Vulnerability and Risk Management Platform.

Dark Reading: Attacks/Breaches
Even 'Perfect' APIs Can Be Abused

Broad-scale API abuse is occurring every day as businesses make their data available to trading partners — and even the public.

Dark Reading: Attacks/Breaches
Microsoft Patches Critical Exchange Server Flaw

Remote code execution vulnerability among 71 bug fixes issued in March Patch Tuesday.

hacking: security in practice
Another worst thing about being a hacker

People only notice when you successfully hack something, they don't care that it took you 5 or 6 attempts to actually get there

submitted by /u/itsgonbeokayyeah
[link] [comments]

hacking: security in practice
Website security checklist

Looking for suggestions for a checklist to check the security of a website. It has to be a manual process meaning you can look at the source code, but can't run a vulnerability scanner against the website.

Some examples

Password Recovery

HTTP vs HTTPS

Email address or Contact page

URL manipulation -

What other things would you check and how would you check?

You consider it as part of your planning stage and you visit a company website. What would you check quickly and note it might be weakness?

submitted by /u/dbikingman
[link] [comments]

hacking: security in practice
My friends instragram got hacked by one of those PayPal scams. Is there anything we can do to make the scammers life a living hell?

I managed to ip grab him and he’s from la but that’s All I know/was able to do

submitted by /u/saab_lover
[link] [comments]

hacking: security in practice
Hide when I’m online from a router

My isp can see what computer is logged onto their router and when they go online. Is it possible to hide this from them and become invisible on the router page? This gets annoying as they can see when I turn on my pc

submitted by /u/loluydied
[link] [comments]

Hacking on Medium
Piratas informáticos rusos apuntan a ucranianos y aliados europeos a través de ataques de phishing

https://cdn-images-1.medium.com/max/1441/0*R0bzmFojnzZOdiSa
PUBLICADO EN 8 MARZO, 2022POR EHACKING

Continue reading on Medium »