Dark Reading: Attacks/Breaches
Omdia Research Spotlight: XDR

Few emerging cybersecurity market segments are garnering more attention than XDR. Here, Omdia highlights its recent research on XDR.

Dark Reading: Attacks/Breaches
New Malware Downloader Spotted in Targeted Campaigns

Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware.

Dark Reading: Attacks/Breaches
Microsoft Uses Machine Learning to Predict Attackers' Next Steps

Researchers build a model to attribute attacks to specific groups based on tactics, techniques and procedures, and then figure out their next move.

Kali Linux Tutorials
Watson : Enumerate Missing KBs & Suggest Exploits For Useful Privilege Escalation Vulnerabilities

Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage – OS Build Number: 14393>>Enumerating installed KBs… – CVE-2019-0836 : VULNERABLE>>https://exploit-db.com/exploits/46718>>https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/ – CVE-2019-0841 : VULNERABLE>>https://github.com/rogue-kdc/CVE-2019-0841>>https://rastamouse.me/tags/cve-2019-0841/ – CVE-2019-1064 : VULNERABLE>>https://www.rythmstick.net/posts/cve-2019-1064/ […]

The post Watson : Enumerate Missing KBs & Suggest Exploits For Useful Privilege Escalation Vulnerabilities appeared first on Kali Linux Tutorials.

Hacking on Medium
Hack #1: modern blurred backgrounds

https://cdn-images-1.medium.com/max/1280/1*rwjR4mvieiDVWwOqrIa70Q.jpeg
Motivated by the new retro-futuristic design taken by a lot of companies that deliver a great UI design, I started to code an easy and…

Continue reading on Medium »

Hacking on Medium
Инструмент обнаружения конфиденциальных данных c EarlyBird

https://cdn-images-1.medium.com/max/962/1*-OKbyH8MCbJgGGKbobLS0A.png
EarlyBird это инструмент обнаружения конфиденциальных данных, способный сканировать репозитории исходного кода

Continue reading on Medium »

Hacking on Medium
Hack Your Own Network To Stay Ahead Of The Hackers

https://cdn-images-1.medium.com/max/1600/0*8xRDoEeHfjmJHVhx.jpg
We despise cybercriminals. They’re a menace to business. We’re very protective of small business in Atlanta and continuously up our game…

Continue reading on Medium »

Hacking on Medium
Alerta: Nuevo malware que arrebata las contraseñas de los usuarios.

https://cdn-images-1.medium.com/max/867/0*cLrXld6gPcNTiajB
PUBLICADO EN 12 ABRIL, 2021 POR EHACKING

Continue reading on Medium »

Unauthenticated Account Takeover Through Forget Password
https://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d?source=rss------bug_bounty-5

I was hunting a full month on a federal private program and comes up with plenty of account takeovers. I am going to share one of the…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d?source=rss------bug_bounty-5)

hacking: security in practice
What are the best encryption/obfuscation methods/algorhithms to use right now? How do I find out about new ones?

I started a little python spyware project (will hopefully be payload-flexible in the future) with the goal of beating Avira's cloud-detection and sandboxing as well as most of the scanners listed on Virustotal (and also making my damn code run ffs). Through a bit of xOR here and there and a load of messing around with pyinstaller, I managed to slide under the radar of a big chunk of antivirus that I found (After detecting ~5 versions of my code, avira went on a paranoid killing spree and quarantined all my python-exes. Print-oneliners aswell.). Initially, I tried to have a 'clean' exe as a trojan. Now I got to the point where my trojan probably needs to be encased in another one (a matryoshka lol). Now I need a tool, python library, etc. that takes my exe or python script and returns an encrypted (and undetected) version of my project. I'm sorry for this long essay but I figured this would be useful to get the answers I need.

submitted by /u/_boredteen
[link] [comments]