Caso de uso não autorizados de chave da API do Google Maps
https://medium.com/@cupc4k3/caso-de-uso-n%C3%A3o-autorizados-de-chave-da-api-do-google-maps-89498752cf7d?source=rss------bug_bounty-5

Fala galera,Continue reading on Medium » (https://medium.com/@cupc4k3/caso-de-uso-n%C3%A3o-autorizados-de-chave-da-api-do-google-maps-89498752cf7d?source=rss------bug_bounty-5)

Hi I need some help.
https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/

So my girlfriends Instagram account is apart of that onlyfans/porn scam thing going around. I wanted to know what legal actions I could take. I’m waiting on a response from his account so I can figure out where it came from. Is it legal/possible to find his digital footprint from his/her Instagram response to my account? I’m studying cybersecurity in hopes to get into the industry, but I don’t know what to do. I’m more concerned about that it’s ruining her image, and I want to do something about it. What can I do? submitted by /u/Wonderful-Captain-92 (https://www.reddit.com/user/Wonderful-Captain-92)
[link] (https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How are people hacking instagram account with links

I see a bunch of my friends accounts getting stolen with some links , how are they getting all there info from one simple link they send on instagram dms ?

submitted by /u/Bacon4U1400
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do you spy on someone else’s phone without them knowing?

Phone hacking is the hone of investigating a portable gadget regularly utilizing computer abuses to analyze everything from the least…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2021–40662 Chamilo LMS 1.11.14 RCE

This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los piratas informáticos apuntan a las redes bancarias con un nuevo rootkit para robar dinero de…

https://cdn-images-1.medium.com/max/1606/0*-d2alFj_qBLIDWgp
PUBLICADO EN 22 MARZO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Human Connection: the Story of Awedience

https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times

Continue reading on The Airbnb Tech Blog »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Idk if this is related to hacking but hear me out....

So Iv'e been seeing these random "text" posts on live streams (pokemon unite) but at 1st glance I thought it was just a random dude tryna act all cool and all. Now I just searched for some unite vid and in one of the comment section I saw multiple "text" written from like 2-3 accounts with weird names. So I decide to check a profile out and I see some random vids with rgb pixels that make no sense....do they mean anything like a secret code or something??? Here's the link to the Youtube channel - https://www.youtube.com/channel/UCmS9H8nIBbyKhBBFhsuQiiQ

submitted by /u/Dark_Phantom2003
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Videos/Podcasts on Hacking

Not your typical request for ‘how do I do this?’ - but more of a recommendation request for podcasts or videos showcasing impressive exploits

As an example, I love LiveOverflows videos going over in depth binary exploitation, and the likes of Darknet Diaries for podcasts covering interesting subjects

So I’m not specifically interested in tutorials, I guess in line with write ups? A recent example being the story of the guy that recovered the $2m crypto wallet

Any recommendations welcome

submitted by /u/nexiviper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wich would be the best way to exploit a DOM XSS vulnerability?

I have been reading about XSS attacks and how to exploit them but it's unclear to me how could I grab an hipotetic victim's credentials without showing my IP but also as much efficient as possible, I mean, if I want to hide my IP I could use BeeF behind TOR and use a gateway so when the victim clicks on the link with the beef script injected I would be able to grab his password but TOR is really slow so there could be a bottle neck in Wich browser asks the gateway for the script and it returns it 5 seconds later that it's a lot and make it suspicious. If I would care just about efficiency I could just create an script that sends the grabbed password to my email but that could reveal my identity.

Wich would be the best method ?

submitted by /u/Dasemu24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

DEV-0537 criminal actor targeting organizations for data exfiltration and destruction - Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ransomware Group Claims Major Okta Breach

Screenshots that ransomware gang Lapsus$ released this week suggest the threat actor also stole Microsoft source code.

Dark Reading: Attacks/Breaches
Security Teams Need to Investigate the Okta Breach Themselves

Trust, but verify. While organizations wait for official alerts and notifications from Okta, security teams should also begin their own investigations to determine whether they have been exposed.

Dark Reading: Attacks/Breaches
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations

Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.

___________________________
@hacking_Attack
@Hacking_Video

FastFinder - Incident Response - Fast Suspicious File Finder
http://www.kitploit.com/2022/03/fastfinder-incident-response-fast.html

___________________________
@hacking_Attack
@Hacking_Video

FastFinder is a lightweight tool made for threat hunting, live forensics (https://www.kitploit.com/search/label/Forensics) and triage on both Windows and Linux Platforms. It is focused on endpoint enumeration (https://www.kitploit.com/search/label/Enumeration) and suspicious file finding based on various criterias: file path / name md5 / sha1 / sha256 checksum simple string content match complex content condition(s) based on YARA
Ready for battle! fastfinder has been tested in real cases in multiple CERT, CSIRT and SOC use cases examples directory (https://www.kitploit.com/search/label/Directory) now include real malwares / suspect behaviors or vulnerability (https://www.kitploit.com/search/label/Vulnerability) scan examples Installation Compiled release of this software are available. If you want to compile from sources, it could be a little bit tricky because it strongly depends of go-yara and CGO compilation. Anyway, you'll find a detailed documentation for windows (https://github.com/codeyourweb/fastfinder/blob/master/README.windows-compilation.md) and for linux (https://github.com/codeyourweb/fastfinder/blob/master/README.linux-compilation.md) Usage "] [-b|--build ""] [-o|--output ""] [-n|--no-window] [-u|--no-userinterface] [-v|--verbosity ] [-t|--triage] Incident Response - Fast suspicious file finder Arguments: -h --help Print help information -c --configuration Fastfind configuration file. Default: -b --build Output a standalone package with configuration and rules in a single binary -o --output Save fastfinder logs in the specified file -n --no-window Hide fastfinder window -u --no-userinterface Hide advanced user interface -v --verbosity File log verbosity | 4: Only alert | 3: Alert and errors | 2: Alerts,errors and I/O operations | 1: Full verbosity) . Default: 3 -t --triage Triage mode (infinite run - scan every new file in the input path directories). Default: false'> ___ __ ___ ___ __ ___ __
|__ /\ /__` | |__ | |\ | | \ |__ |__)
| /~~\ .__/ | | | | \| |__/ |___ | \

2021-2022 | Jean-Pierre GARNIER | @codeyourweb
https://github.com/codeyourweb/fastfinder

usage: fastfinder [-h|--help] [-c|--configuration ""] [-b|--build
""] [-o|--output ""] [-n|--no-window]
[-u|--no-userinterface] [-v|--verbosity ]
[-t|--triage]

Incident Response - Fast suspicious file finder

Arguments:

-h --help Print help information
-c --configuration Fastfind configuration file. Default:
-b --build Output a standalone package with configuration and
rules in a single binary
-o --ou tput Save fastfinder logs in the specified file
-n --no-window Hide fastfinder window
-u --no-userinterface Hide advanced user interface
-v --verbosity File log verbosity
| 4: Only alert
| 3: Alert and errors
| 2: Alerts,errors and I/O operations
| 1: Full verbosity)
. Default: 3
-t --triage Triage mode (infinite run - scan every new file in
the input path directories). Default: false

___________________________
@hacking_Attack
@Hacking_Video