Dark Reading: Attacks/Breaches
Microsoft the No. 1 Most-Spoofed Brand in Phishing Attacks

New Barracuda Networks data shows attackers sent some 3 million emails from around 12,000 pilfered accounts.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Pen Testing Gains Critical Security Buy-in and Defense Insight

It's more important than ever for companies to challenge their defenses, learning about new gaps and opportunities for improvement along the way.

Dark Reading: Attacks/Breaches
4 Critical Capabilities for a SaaS Security Posture Management (SSPM) Solution

The need for deep visibility and remediation for SaaS security settings is critical. If you're considering a SaaS Security Posture Management solution, here’s a checklist of what to look for.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
CSC Unveils 3D Domain Monitoring Solution on DomainSec Platform

Continuing CSC research indicates over 70% of brand-specific domains are fake.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
TAC Security Survey Reveals: 88% of Businesses Rely on Manual Processes to Identify Network Vulnerabilities

___________________________
@hacking_Attack
@Hacking_Video

TOOL: ntlmrelayx2proxychains
https://www.reddit.com/r/redteamsec/comments/tfwjf3/tool_ntlmrelayx2proxychains/

ntlmrelayx2proxychains (https://github.com/He-No/ntlmrelayx2proxychains) aims to connect the tool of the SecureAuthCorps' (https://github.com/SecureAuthCorp) impacket (https://github.com/SecureAuthCorp/impacket) suite, ntlmrelayx.py (hereafter referred to as "ntlmrelayx"), along with @byt3bl33d3r (https://github.com/byt3bl33d3r)'s tool, CrackMapExec (https://github.com/byt3bl33d3r/CrackMapExec) (hereafter referred to as "CME"), over proxychains (https://github.com/haad/proxychains), developped by haad (https://github.com/haad). Currently, when having active relays via ntlmrelayx.py, you need to manually provide user, domain, and ip address in CME over proxychains. The idea behind this tool is to automate this process. So have you ever felt too lazy to explore all shares, loggedin users, sessions, disks, and/or password policy manually after using ntlmrelayx or felt too lazy to dump the lsa, sam, and/or ntds on all systems where you found a local administrator? If so, you'll for sure enjoy ntlmrelayx2proxychains (https://github.com/He-No/ntlmrelayx2proxychains)! :) Link: https://github.com/He-No/ntlmrelayx2proxychains submitted by /u/BugbearB (https://www.reddit.com/user/BugbearB)
[link] (https://www.reddit.com/r/redteamsec/comments/tfwjf3/tool_ntlmrelayx2proxychains/) [comments] (https://www.reddit.com/r/redteamsec/comments/tfwjf3/tool_ntlmrelayx2proxychains/)

___________________________
@hacking_Attack
@Hacking_Video

The 13 Best Vulnerable Web Applications & Vulnerable Websites for Testing

This list contains a variety of vulnerable websites, vulnerable web apps, battlegrounds and wargames communities.Continue reading on Medium »
Read more...

hacking: security in practice
Cracking With Hashcat in the Cloud

https://external-preview.redd.it/whiHC3F8MtCbNbWM67zT-b6b7qz8Ud2wJB7dG2DTl4A.jpg?width=640&crop=smart&auto=webp&s=65397209d7d0c6132881c09c9a38498cf3898564 submitted by /u/eikendev
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do you run your 'Hacking'-OS?

I'm currently running Kali-Linux through WSL2 and Kex and is getting myself a new laptop soon. I'm planning on installing running my daily-use OS (Ubuntu) and have kali quickly accessible somehow.

What do you guys recommend? I've seen alot about either buying a machine online and streaming it to your browser, or running it in a vm - are there other good ways?

submitted by /u/KaukaShibaAthlete
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the best method to access files on a target pc using another pc on the same network.

Ok so how do I access my laptop files from my desktop if my desktop was the attacker and laptop was the victim. We can assume both machines are in the same wifi network but I do not have physical access to the victim machine

submitted by /u/ArctikPhoenix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Digital Frontline: How 400,000 Cyber Volunteers Paralysed Putin’s Military Operation

https://cdn-images-1.medium.com/max/2400/1*Y2TVyDIYFW3FZodoJjicBQ.jpeg
An army of multi-national IT experts have joined forces to help counter Russia’s malicious cyber attacks, leaving Putin’s ‘special…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I became root unexpectedly

https://cdn-images-1.medium.com/max/2600/0*K2zC-jt9xqcuUMb7
The scope of the mission

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The 13 Best Vulnerable Web Applications & Vulnerable Websites for Testing

https://cdn-images-1.medium.com/max/698/0*rDgR7paxJX6Y2tdu.png
This list contains a variety of vulnerable websites, vulnerable web apps, battlegrounds and wargames communities.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
X-XSS-Protection headers. Protection or vulnerability?

https://cdn-images-1.medium.com/max/2600/0*sV2Or6IUcL_IVcyN
What is it?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
You Could Be the Next Target

https://cdn-images-1.medium.com/max/2600/1*yZhz2Ik_q62TzZXwpiIYZQ.jpeg
There is a global war going on and anyone could be the next target. It could be an international corporation. It could be you.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The 13 Best Vulnerable Web Applications & Vulnerable Websites for Testing
https://thenurhabib.medium.com/the-13-best-vulnerable-web-applications-vulnerable-websites-for-testing-8e10c38ba0a8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video