Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App
Glasswall technology offers proactive protection from file-based cybersecurity threats.
___________________________
@hacking_Attack
@Hacking_Video
Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App
Glasswall technology offers proactive protection from file-based cybersecurity threats.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App
Glasswall technology offers proactive protection from file-based cybersecurity threats.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Titaniam Announces Completion of Product Suite
The Titaniam Suite includes ransomware and extortion defense capabilities in the form of five products.
___________________________
@hacking_Attack
@Hacking_Video
Titaniam Announces Completion of Product Suite
The Titaniam Suite includes ransomware and extortion defense capabilities in the form of five products.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Titaniam Announces Completion of Product Suite
The Titaniam Suite includes ransomware and extortion defense capabilities in the form of five products.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Cloudflare Announces API Gateway
Organizations can secure, manage, and monitor all of their APIs in one easy-to-use dashboard.
___________________________
@hacking_Attack
@Hacking_Video
Cloudflare Announces API Gateway
Organizations can secure, manage, and monitor all of their APIs in one easy-to-use dashboard.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Cloudflare Announces API Gateway
Organizations can secure, manage, and monitor all of their APIs in one easy-to-use dashboard.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Nok Nok Labs Unveils S3 Authentication Suite
Enhancements include support for OpenID Connect as an integration mechanism.
___________________________
@hacking_Attack
@Hacking_Video
Nok Nok Labs Unveils S3 Authentication Suite
Enhancements include support for OpenID Connect as an integration mechanism.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Nok Nok Labs Unveils S3 Authentication Suite
Enhancements include support for OpenID Connect as an integration mechanism.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Firefly Announces Release of ValidIaC Open Source Solution
___________________________
@hacking_Attack
@Hacking_Video
Firefly Announces Release of ValidIaC Open Source Solution
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Firefly Announces Release of ValidIaC Open Source Solution
Question about curl/wget and phishing sites
https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/
I have a question for anyone who might know and be kind enough to answer. Like most people, I receive phishing emails and I (usually) know that that is what they are. I'm wondering how dangerous it is, if at all, to use curl and/or wget to access those sites and try to find out what they're attempting to do to me. I made such an attempt with one site, assuming that curl would only send a GET request to the http server, and that wget would just look for links and download them, and perhaps I could learn about the modus operandi of such sites (and also inform the web hoster of the malicious activity). I also assumed that any exploit would target javascript and that neither curl nor wget can execute that. I found that curl and wget requests both resulted in a process being created in the background that lasted about 30 seconds or so. I was never able to determine what process it was. Wget downloaded a highly obfuscated script using the HTML tag. I know that it was probably foolish to do this experiment but now that I've done it I'm wondering what the dangers might be. I was surprised that a background process was created because I have never seen that with curl or wget but I admit that I don't have a lot of experience with them. I ran a virus scan and looked at rkhunter and both found nothing of interest. Needless to say I didn't run this experiment from root! No need to scold me for having done this -- I should have asked someone first or researched it better, I know. I would just like to know what the risks are of examining phishing sites in this way, and what the background process might have been. OS: Ubuntu 20.04 LTS. Thanks in advance! submitted by /u/Metataphysika (https://www.reddit.com/user/Metataphysika)
[link] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/) [comments] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/
I have a question for anyone who might know and be kind enough to answer. Like most people, I receive phishing emails and I (usually) know that that is what they are. I'm wondering how dangerous it is, if at all, to use curl and/or wget to access those sites and try to find out what they're attempting to do to me. I made such an attempt with one site, assuming that curl would only send a GET request to the http server, and that wget would just look for links and download them, and perhaps I could learn about the modus operandi of such sites (and also inform the web hoster of the malicious activity). I also assumed that any exploit would target javascript and that neither curl nor wget can execute that. I found that curl and wget requests both resulted in a process being created in the background that lasted about 30 seconds or so. I was never able to determine what process it was. Wget downloaded a highly obfuscated script using the HTML tag. I know that it was probably foolish to do this experiment but now that I've done it I'm wondering what the dangers might be. I was surprised that a background process was created because I have never seen that with curl or wget but I admit that I don't have a lot of experience with them. I ran a virus scan and looked at rkhunter and both found nothing of interest. Needless to say I didn't run this experiment from root! No need to scold me for having done this -- I should have asked someone first or researched it better, I know. I would just like to know what the risks are of examining phishing sites in this way, and what the background process might have been. OS: Ubuntu 20.04 LTS. Thanks in advance! submitted by /u/Metataphysika (https://www.reddit.com/user/Metataphysika)
[link] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/) [comments] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Question about curl/wget and phishing sites
I have a question for anyone who might know and be kind enough to answer. Like most people, I receive phishing emails and I (usually) know that...
Mip22 - An Advanced Phishing Tool
The program is made for educational purposes only for to see how the phishing method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk and avoid any sloppy actions. Installation Instructions Installation on Gnu / Linux OS. On terminal sudo su git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Installation on Android OS. On Termux git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Feautures and Properties. Mip22 is a modern and advanced cyber security program for computers with Gnu / Linux operating system and mobile phones and tablets with android operating system, for educational purposes. Details Automatic method Manual Method Tunnels Setup Email Services Vpn instructions Sound Efects (only for pc) Automatic method Easy to use via terminal. Automatic cloned services. It has 69 ready cloned electronic services, including social networks, e-mails, cloud, multumedia etc etc. Manual Method Cloning services manually by cloning the service you want. Easy to use through browser service. Tunnels Setup It has 3 tunnels to promote these services from the local server to the internet. It has ready api for the installation of some tunnels. Email Services It has 3 well-known external email services found on the internet where you can visit to send an email. Vpn instructions It has various instructions fron vpn on Android OS. Sound Efects (only for pc) It has various effects such as music in the background. Download Mip22
Read more...
___________________________
@hacking_Attack
@Hacking_Video
The program is made for educational purposes only for to see how the phishing method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk and avoid any sloppy actions. Installation Instructions Installation on Gnu / Linux OS. On terminal sudo su git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Installation on Android OS. On Termux git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Feautures and Properties. Mip22 is a modern and advanced cyber security program for computers with Gnu / Linux operating system and mobile phones and tablets with android operating system, for educational purposes. Details Automatic method Manual Method Tunnels Setup Email Services Vpn instructions Sound Efects (only for pc) Automatic method Easy to use via terminal. Automatic cloned services. It has 69 ready cloned electronic services, including social networks, e-mails, cloud, multumedia etc etc. Manual Method Cloning services manually by cloning the service you want. Easy to use through browser service. Tunnels Setup It has 3 tunnels to promote these services from the local server to the internet. It has ready api for the installation of some tunnels. Email Services It has 3 well-known external email services found on the internet where you can visit to send an email. Vpn instructions It has various instructions fron vpn on Android OS. Sound Efects (only for pc) It has various effects such as music in the background. Download Mip22
Read more...
___________________________
@hacking_Attack
@Hacking_Video
Hacking on Medium
How Smart Cities could become Dark Cities
https://cdn-images-1.medium.com/max/1920/0*2DByC4dZ1piWU40I.jpg
Here is a short and vulgarized exercice on how a “smart city” can become very stupid. All these elements are based on real-life situations…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How Smart Cities could become Dark Cities
https://cdn-images-1.medium.com/max/1920/0*2DByC4dZ1piWU40I.jpg
Here is a short and vulgarized exercice on how a “smart city” can become very stupid. All these elements are based on real-life situations…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How Smart Cities could become Dark Cities
Here is a short and vulgarized exercice on how a “smart city” can become very stupid. All these elements are based on real-life situations…
Hacking on Medium
Ethical Hacking for Beginners: Learn the Basics
https://cdn-images-1.medium.com/max/1000/0*kbXHFGtcyE2omjHR.jpg
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Ethical Hacking for Beginners: Learn the Basics
https://cdn-images-1.medium.com/max/1000/0*kbXHFGtcyE2omjHR.jpg
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Ethical Hacking for Beginners: Learn the Basics
If you’re interested in learning hacking skills or pursuing a career in ethical hacking, you’re in the right place. in this blog post we will discuss Ethical Hacking for Beginners and how to get into…
Hacking on Medium
Protecting Intellectual Property From Hackers
https://cdn-images-1.medium.com/max/1500/1*Yr62z1pReTDVJJUGiDRE2w.jpeg
Last week saw a data breach announcement from Samsung, which the company publicly acknowledged and for which the hacking group Lapsus$…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Protecting Intellectual Property From Hackers
https://cdn-images-1.medium.com/max/1500/1*Yr62z1pReTDVJJUGiDRE2w.jpeg
Last week saw a data breach announcement from Samsung, which the company publicly acknowledged and for which the hacking group Lapsus$…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Protecting Intellectual Property From Hackers
Last week saw a data breach announcement from Samsung, which the company publicly acknowledged and for which the hacking group Lapsus$…
Hacking on Medium
Simple CTF — Lab and Report
https://cdn-images-1.medium.com/max/824/1*6lhVKJfHxXLL4eXwLefAiQ.png
Lab goals
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Simple CTF — Lab and Report
https://cdn-images-1.medium.com/max/824/1*6lhVKJfHxXLL4eXwLefAiQ.png
Lab goals
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Simple CTF — Lab and Report
Lab goals
Hacking on Medium
CISA agrega 15 vulnerabilidades que están siendo explotadas a su catálogo
https://cdn-images-1.medium.com/max/1600/0*cGL3D-VwEWH0Bpte
PUBLICADO EN 17 MARZO, 2022 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
CISA agrega 15 vulnerabilidades que están siendo explotadas a su catálogo
https://cdn-images-1.medium.com/max/1600/0*cGL3D-VwEWH0Bpte
PUBLICADO EN 17 MARZO, 2022 POR EHACKING
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
CISA agrega 15 vulnerabilidades que están siendo explotadas a su catálogo
PUBLICADO EN 17 MARZO, 2022 POR EHACKING
Hacking on Medium
Windows Privilege Escalation: Weak Service Permissions
https://cdn-images-1.medium.com/max/645/1*TGr9a8igFWptRdksfb31lg.jpeg
Adversaries can hijack binaries/executables used by windows services with their malicious payload if the permissions on the services are…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Windows Privilege Escalation: Weak Service Permissions
https://cdn-images-1.medium.com/max/645/1*TGr9a8igFWptRdksfb31lg.jpeg
Adversaries can hijack binaries/executables used by windows services with their malicious payload if the permissions on the services are…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Windows Privilege Escalation: Weak Service Permissions
Adversaries can hijack binaries/executables used by windows services with their malicious payload if the permissions on the services are…