Fala galera,Continue reading on Medium » (https://medium.com/@cupc4k3/caso-de-uso-n%C3%A3o-autorizados-de-chave-da-api-do-google-maps-89498752cf7d?source=rss------bug_bounty-5)

Hi I need some help.
https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/

So my girlfriends Instagram account is apart of that onlyfans/porn scam thing going around. I wanted to know what legal actions I could take. I’m waiting on a response from his account so I can figure out where it came from. Is it legal/possible to find his digital footprint from his/her Instagram response to my account? I’m studying cybersecurity in hopes to get into the industry, but I don’t know what to do. I’m more concerned about that it’s ruining her image, and I want to do something about it. What can I do? submitted by /u/Wonderful-Captain-92 (https://www.reddit.com/user/Wonderful-Captain-92)
[link] (https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkbxo3/hi_i_need_some_help/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How are people hacking instagram account with links

I see a bunch of my friends accounts getting stolen with some links , how are they getting all there info from one simple link they send on instagram dms ?

submitted by /u/Bacon4U1400
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do you spy on someone else’s phone without them knowing?

Phone hacking is the hone of investigating a portable gadget regularly utilizing computer abuses to analyze everything from the least…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2021–40662 Chamilo LMS 1.11.14 RCE

This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los piratas informáticos apuntan a las redes bancarias con un nuevo rootkit para robar dinero de…

https://cdn-images-1.medium.com/max/1606/0*-d2alFj_qBLIDWgp
PUBLICADO EN 22 MARZO, 2022 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Human Connection: the Story of Awedience

https://cdn-images-1.medium.com/max/2600/1*wYiW3cB5YfO_oLC9CVHW3A.jpeg
How a home-grown product helps Airbnb employees feel more connected during solitary times

Continue reading on The Airbnb Tech Blog »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Idk if this is related to hacking but hear me out....

So Iv'e been seeing these random "text" posts on live streams (pokemon unite) but at 1st glance I thought it was just a random dude tryna act all cool and all. Now I just searched for some unite vid and in one of the comment section I saw multiple "text" written from like 2-3 accounts with weird names. So I decide to check a profile out and I see some random vids with rgb pixels that make no sense....do they mean anything like a secret code or something??? Here's the link to the Youtube channel - https://www.youtube.com/channel/UCmS9H8nIBbyKhBBFhsuQiiQ

submitted by /u/Dark_Phantom2003
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Videos/Podcasts on Hacking

Not your typical request for ‘how do I do this?’ - but more of a recommendation request for podcasts or videos showcasing impressive exploits

As an example, I love LiveOverflows videos going over in depth binary exploitation, and the likes of Darknet Diaries for podcasts covering interesting subjects

So I’m not specifically interested in tutorials, I guess in line with write ups? A recent example being the story of the guy that recovered the $2m crypto wallet

Any recommendations welcome

submitted by /u/nexiviper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wich would be the best way to exploit a DOM XSS vulnerability?

I have been reading about XSS attacks and how to exploit them but it's unclear to me how could I grab an hipotetic victim's credentials without showing my IP but also as much efficient as possible, I mean, if I want to hide my IP I could use BeeF behind TOR and use a gateway so when the victim clicks on the link with the beef script injected I would be able to grab his password but TOR is really slow so there could be a bottle neck in Wich browser asks the gateway for the script and it returns it 5 seconds later that it's a lot and make it suspicious. If I would care just about efficiency I could just create an script that sends the grabbed password to my email but that could reveal my identity.

Wich would be the best method ?

submitted by /u/Dasemu24
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

DEV-0537 criminal actor targeting organizations for data exfiltration and destruction - Microsoft Security Blog
https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.microsoft.com/security/blog/2022/03/22/dev-0537-criminal-actor-targeting-organizations-for-data-exfiltration-and-destruction/) [comments] (https://www.reddit.com/r/redteamsec/comments/tkfetv/dev0537_criminal_actor_targeting_organizations/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ransomware Group Claims Major Okta Breach

Screenshots that ransomware gang Lapsus$ released this week suggest the threat actor also stole Microsoft source code.

Dark Reading: Attacks/Breaches
Security Teams Need to Investigate the Okta Breach Themselves

Trust, but verify. While organizations wait for official alerts and notifications from Okta, security teams should also begin their own investigations to determine whether they have been exposed.

Dark Reading: Attacks/Breaches
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations

Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.

___________________________
@hacking_Attack
@Hacking_Video

FastFinder - Incident Response - Fast Suspicious File Finder
http://www.kitploit.com/2022/03/fastfinder-incident-response-fast.html

___________________________
@hacking_Attack
@Hacking_Video

FastFinder is a lightweight tool made for threat hunting, live forensics (https://www.kitploit.com/search/label/Forensics) and triage on both Windows and Linux Platforms. It is focused on endpoint enumeration (https://www.kitploit.com/search/label/Enumeration) and suspicious file finding based on various criterias: file path / name md5 / sha1 / sha256 checksum simple string content match complex content condition(s) based on YARA
Ready for battle! fastfinder has been tested in real cases in multiple CERT, CSIRT and SOC use cases examples directory (https://www.kitploit.com/search/label/Directory) now include real malwares / suspect behaviors or vulnerability (https://www.kitploit.com/search/label/Vulnerability) scan examples Installation Compiled release of this software are available. If you want to compile from sources, it could be a little bit tricky because it strongly depends of go-yara and CGO compilation. Anyway, you'll find a detailed documentation for windows (https://github.com/codeyourweb/fastfinder/blob/master/README.windows-compilation.md) and for linux (https://github.com/codeyourweb/fastfinder/blob/master/README.linux-compilation.md) Usage "] [-b|--build ""] [-o|--output ""] [-n|--no-window] [-u|--no-userinterface] [-v|--verbosity ] [-t|--triage] Incident Response - Fast suspicious file finder Arguments: -h --help Print help information -c --configuration Fastfind configuration file. Default: -b --build Output a standalone package with configuration and rules in a single binary -o --output Save fastfinder logs in the specified file -n --no-window Hide fastfinder window -u --no-userinterface Hide advanced user interface -v --verbosity File log verbosity | 4: Only alert | 3: Alert and errors | 2: Alerts,errors and I/O operations | 1: Full verbosity) . Default: 3 -t --triage Triage mode (infinite run - scan every new file in the input path directories). Default: false'> ___ __ ___ ___ __ ___ __
|__ /\ /__` | |__ | |\ | | \ |__ |__)
| /~~\ .__/ | | | | \| |__/ |___ | \

2021-2022 | Jean-Pierre GARNIER | @codeyourweb
https://github.com/codeyourweb/fastfinder

usage: fastfinder [-h|--help] [-c|--configuration ""] [-b|--build
""] [-o|--output ""] [-n|--no-window]
[-u|--no-userinterface] [-v|--verbosity ]
[-t|--triage]

Incident Response - Fast suspicious file finder

Arguments:

-h --help Print help information
-c --configuration Fastfind configuration file. Default:
-b --build Output a standalone package with configuration and
rules in a single binary
-o --ou tput Save fastfinder logs in the specified file
-n --no-window Hide fastfinder window
-u --no-userinterface Hide advanced user interface
-v --verbosity File log verbosity
| 4: Only alert
| 3: Alert and errors
| 2: Alerts,errors and I/O operations
| 1: Full verbosity)
. Default: 3
-t --triage Triage mode (infinite run - scan every new file in
the input path directories). Default: false

___________________________
@hacking_Attack
@Hacking_Video

Depending on where you are looking for files, FastFinder could be used with admin OR simple user rights. Scan and export file match according to your needs configuration examples are available there (https://github.com/codeyourweb/fastfinder/blob/master/examples) input:
path: [] # match file path AND / OR file name based on simple string
content:
grep: [] # match literal string value inside file content
yara: [] # use yara rule and specify rules path(s) for more complex pattern search (wildcards / regex / conditions)
checksum: [] # parse for md5/sha1/sha256 in file content
options:
contentMatchDependsOnPathMatch: true # if true, paths are a pre-filter for content searchs. If false, paths and content both generate matchs
findInHardDrives: true # enumerate hard drive content
findInRemovableDrives: true # enumerate removable drive content
findInNetworkDrives: true # enumerate network drive content
findInCDRomDrives: true # enumerate physical CD-ROM and mounted iso / vhd...
output:
copyMatchingFiles: true # cr eate a copy of every matching file
base64Files: true # base64 matched content before copy
filesCopyPath: '' # empty value will copy matched files in the fastfinder.exe folder
advancedparameters:
yaraRC4Key: '' # yara rules can be (un)/ciphered using the specified RC4 key
maxScanFilesize: 2048 # ignore files up to maxScanFileSize Mb (default: 2048)
cleanMemoryIfFileGreaterThanSize: 512 # clean fastfinder internal memory after heavy file scan (default: 512Mb)
Search everywhere or in specified paths: use '?' in paths for simple char wildcard (eg. powershe??.exe) use '\*' in paths for multiple chars wildcard (eg. \*.exe) regular expressions are also available , just enclose paths with slashes (eg. /[0-9]{8}\.exe/) environment variables can also be used (eg. %TEMP%\myfile.exe) Important notes input path are always case INSENSITIVE content search on string (grep) are always case SENSITIVE backslashes SHOULD NOT be escaped (except with regular expressions) For more informations, take a look at the examples (https://github.com/codeyourweb/fastfinder/blob/master/examples) About this project I initially created this project to automate fast system oriented IOC detection on a wide computer network. It fulfills the needs I have today. Nevertheless if you have complementary ideas, do not hesitate to ask for, I will see to implement them if they can be useful for everyone. On the other hand, pull request will be studied carefully. Future releases I don't plan to add any additional features right now. The next release will be focused on: Unit testing / Code testing coverage / CI Build more examples based on live malwares tradecraft and threat actor campaigns

Download Fastfinder (https://github.com/codeyourweb/fastfinder)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pequenas anotações sobre o cabeçalho TCP/IP e sua conexão através do Three-way Handshake

https://cdn-images-1.medium.com/max/856/1*oqx14hnvll8OIaQzAmauVA.jpeg
Em palavras simples, o TCP (Transmission Control Protocol) é um protocolo orientado a conexão responsável pela transmissão de dados na…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video