Dark Reading: Attacks/Breaches
Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App

Glasswall technology offers proactive protection from file-based cybersecurity threats.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Titaniam Announces Completion of Product Suite

The Titaniam Suite includes ransomware and extortion defense capabilities in the form of five products.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cloudflare Announces API Gateway

Organizations can secure, manage, and monitor all of their APIs in one easy-to-use dashboard.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Nok Nok Labs Unveils S3 Authentication Suite

Enhancements include support for OpenID Connect as an integration mechanism.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Firefly Announces Release of ValidIaC Open Source Solution

___________________________
@hacking_Attack
@Hacking_Video

Question about curl/wget and phishing sites
https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/

I have a question for anyone who might know and be kind enough to answer. Like most people, I receive phishing emails and I (usually) know that that is what they are. I'm wondering how dangerous it is, if at all, to use curl and/or wget to access those sites and try to find out what they're attempting to do to me. I made such an attempt with one site, assuming that curl would only send a GET request to the http server, and that wget would just look for links and download them, and perhaps I could learn about the modus operandi of such sites (and also inform the web hoster of the malicious activity). I also assumed that any exploit would target javascript and that neither curl nor wget can execute that. I found that curl and wget requests both resulted in a process being created in the background that lasted about 30 seconds or so. I was never able to determine what process it was. Wget downloaded a highly obfuscated script using the HTML tag. I know that it was probably foolish to do this experiment but now that I've done it I'm wondering what the dangers might be. I was surprised that a background process was created because I have never seen that with curl or wget but I admit that I don't have a lot of experience with them. I ran a virus scan and looked at rkhunter and both found nothing of interest. Needless to say I didn't run this experiment from root! No need to scold me for having done this -- I should have asked someone first or researched it better, I know. I would just like to know what the risks are of examining phishing sites in this way, and what the background process might have been. OS: Ubuntu 20.04 LTS. Thanks in advance! submitted by /u/Metataphysika (https://www.reddit.com/user/Metataphysika)
[link] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/) [comments] (https://www.reddit.com/r/Pentesting/comments/tgiww4/question_about_curlwget_and_phishing_sites/)

___________________________
@hacking_Attack
@Hacking_Video

Mip22 - An Advanced Phishing Tool

The program is made for educational purposes only for to see how the phishing method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk and avoid any sloppy actions. Installation Instructions Installation on Gnu / Linux OS. On terminal sudo su git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Installation on Android OS. On Termux git clone git://github.com/makdosx/mip22.git chmod -R 777 mip22 cd mip22 bash mip22.sh Feautures and Properties. Mip22 is a modern and advanced cyber security program for computers with Gnu / Linux operating system and mobile phones and tablets with android operating system, for educational purposes. Details Automatic method Manual Method Tunnels Setup Email Services Vpn instructions Sound Efects (only for pc) Automatic method Easy to use via terminal. Automatic cloned services. It has 69 ready cloned electronic services, including social networks, e-mails, cloud, multumedia etc etc. Manual Method Cloning services manually by cloning the service you want. Easy to use through browser service. Tunnels Setup It has 3 tunnels to promote these services from the local server to the internet. It has ready api for the installation of some tunnels. Email Services It has 3 well-known external email services found on the internet where you can visit to send an email. Vpn instructions It has various instructions fron vpn on Android OS. Sound Efects (only for pc) It has various effects such as music in the background. Download Mip22
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Smart Cities could become Dark Cities

https://cdn-images-1.medium.com/max/1920/0*2DByC4dZ1piWU40I.jpg
Here is a short and vulgarized exercice on how a “smart city” can become very stupid. All these elements are based on real-life situations…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ethical Hacking for Beginners: Learn the Basics

https://cdn-images-1.medium.com/max/1000/0*kbXHFGtcyE2omjHR.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 3 Best Operating Systems For Hackers

https://cdn-images-1.medium.com/max/2600/1*SuJOoiVOZuh25jY0A37GDw.jpeg
1. BackBox

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Protecting Intellectual Property From Hackers

https://cdn-images-1.medium.com/max/1500/1*Yr62z1pReTDVJJUGiDRE2w.jpeg
Last week saw a data breach announcement from Samsung, which the company publicly acknowledged and for which the hacking group Lapsus$…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Simple CTF — Lab and Report

https://cdn-images-1.medium.com/max/824/1*6lhVKJfHxXLL4eXwLefAiQ.png
Lab goals

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CISA agrega 15 vulnerabilidades que están siendo explotadas a su catálogo

https://cdn-images-1.medium.com/max/1600/0*cGL3D-VwEWH0Bpte
PUBLICADO EN 17 MARZO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Privilege Escalation: Weak Service Permissions

https://cdn-images-1.medium.com/max/645/1*TGr9a8igFWptRdksfb31lg.jpeg
Adversaries can hijack binaries/executables used by windows services with their malicious payload if the permissions on the services are…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How hackers in Belarus are complicating Putin’s Ukraine invasion

https://external-preview.redd.it/IufgSS3a_KNTDylJBpcZmukwc_lfMPolZyFNKTHrkMA.jpg?width=640&crop=smart&auto=webp&s=b3f7753e5e032e215c467d3219a6a11493c378bf submitted by /u/postalex
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I have a doubt regarding DNS cache poisoning.

I don’t know whether this is the correct place to ask this doubt. Since r/dns is having lesser activity I am asking this here. DNS cache poisoning happens if an attacker can reply to DNS query from Resolver with the correct Transaction ID and Port number, before the Authoritative nameserver replies. My question is does the attacker needs to spoof the IP address of the authoritative nameserver? Somewhere I read that since DNS is using UDP it is causing the DNS cache issue because in TCP we will be doing handshake(authentication). But even if it’s using UDP, it can check the IP address right. So the Resolver checks the IP,it is not the IP address referred by TLD nameserver, it just discards the response. So my assumption is the attacker is spoofing the IP or Resolver is missing such a check on IP address, latter being least likely, as we are moving more security focused.

submitted by /u/zxallen_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video