Information Gathering means gathering different kinds of information about the target. It is basically, the first step or the beginning…Continue reading on Medium » (https://thenurhabib.medium.com/information-gathering-concept-techniques-and-tools-explained-f3dfee3ed82a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

A curated list of various bug bounty tools

ContentsContinue reading on Medium »
Read more...

Hacking Security Ebooks

👉Comment on any broken links or requests for books. 👉Follow me on Twitter:https://twitter.com/root_babu 👉Follow me on…Continue reading on Medium »
Read more...

A curated list of various bug bounty tools
https://medium.com/@chathurangabw/a-curated-list-of-various-bug-bounty-tools-5c5af7e4f301?source=rss------bug_bounty-5

ContentsContinue reading on Medium » (https://medium.com/@chathurangabw/a-curated-list-of-various-bug-bounty-tools-5c5af7e4f301?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Security Ebooks
https://rootbabu.medium.com/hacking-security-ebooks-5f2f01d9b642?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

👉Comment on any broken links or requests for books.
👉Follow me on Twitter:https://twitter.com/root_babu
👉Follow me on…Continue reading on Medium » (https://rootbabu.medium.com/hacking-security-ebooks-5f2f01d9b642?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A curated list of various bug bounty tools

Contents

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A teen is reportedly the mastermind behind the Lapsus$ hacking group

https://cdn-images-1.medium.com/max/1200/0*kkov3TN4llWwn4jh.jpg
A Bloomberg report has more details on the group’s supposed leader

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Create Computer Virus in Less Than 60 Seconds

https://cdn-images-1.medium.com/max/2600/1*ax5whz8d6qdt6DajCxrlbQ.jpeg
Many of you will think the methods must be on coding, but nothing like that. The tricks are based on Notepad.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Information Gathering: Concept, Techniques and Tools explained

https://cdn-images-1.medium.com/max/1400/0*jwAj7AcpxnulmPud.png
Information Gathering means gathering different kinds of information about the target. It is basically, the first step or the beginning…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Security Ebooks

https://cdn-images-1.medium.com/max/1368/1*UOz_dDjmBrQSGahHqzJceQ.jpeg
👉Comment on any broken links or requests for books.
👉Follow me on Twitter:https://twitter.com/root_babu
👉Follow me on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Nestle Denies Anonymous Hack Claims, Says It Leaked Data Itself

https://external-preview.redd.it/_6Lhprv_2bwm9rGE2IU5jmkI_R3j_DzGUf5Pqm6q2VA.jpg?width=640&crop=smart&auto=webp&s=8654c910505d995d855cd8eb4d6bc3c7a2d9e2a0 submitted by /u/Tugushin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can anyone tell me why this is not working?

I am just getting started into kali. Was following a tutorial for scanning ports. This code is supposed to show open ports, but it doesn't shows any ports open.
#!/bin/python import sys import socket from datetime import datetime #Define our target if len(sys.argv) == 2: #sys.argv is same as $1 in bash ie. taking the first argument target = socket.gethostbyname(sys.argv[1]) #translating hostname to ipv4 else: print('Invalid amount of argument') print('Syntax: python3 scanner.py
submitted by /u/muzillafirefox
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Log4j CVE-2021-44228
https://www.reddit.com/r/redteamsec/comments/tm2ted/log4j_cve202144228/

Hi all! I'm making an assignment for my university which consists in executing a pentest on a docker. By scanning with nessus I found a Log4j vulnerability and I'm trying to get the PoC of it. I searched on the web but I didn't find any interesting info about how to do that. Anyone has got some ideas? According to nessus, it seems to be related to LDAP service. (vulnerability got found on tcp port 80) https://preview.redd.it/m4vk6psk6bp81.png?width=1345&format=png&auto=webp&s=6d0e5541c4aa627f4c610943d185342a7c269909 submitted by /u/_1NiCk1_ (https://www.reddit.com/user/_1NiCk1_)
[link] (https://www.reddit.com/r/redteamsec/comments/tm2ted/log4j_cve202144228/) [comments] (https://www.reddit.com/r/redteamsec/comments/tm2ted/log4j_cve202144228/)

___________________________
@hacking_Attack
@Hacking_Video

Instagram and Facebook Account Takeover if another user account is logged into your system/mobile
https://medium.com/@deshamonep.kumar/instagram-and-facebook-account-takeover-if-another-user-account-is-logged-into-your-system-mobile-faabcdc02648?source=rss------bug_bounty-5

Hi, I'm Praveen Kumar, let's start with how we can take complete takeover and access to other Facebook and Instagram accounts if it's…Continue reading on Medium » (https://medium.com/@deshamonep.kumar/instagram-and-facebook-account-takeover-if-another-user-account-is-logged-into-your-system-mobile-faabcdc02648?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Instagram and Facebook Account Takeover if another user account is logged into your system/mobile

Hi, I'm Praveen Kumar, let's start with how we can take complete takeover and access to other Facebook and Instagram accounts if it's…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
DeadBolt Ransomware Resurfaces to Hit QNAP Again

DeadBolt Ransomware Resurfaces to Hit QNAP AgainPost Views: 38
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
DeadBolt ransomware has resurfaced in a new wave of attacks on QNAP that begin in mid-March and signals a new targeting of the Taiwan-based network-attached storage (NAS) devices by the fledgling threat, researchers said.
Researchers from Censys, which provides attack-surface management solutions, said they observed DeadBolt infections on QNAP gear ramp up slowly starting March 16, with a total of 373 infections that day. That number that rose to 1,146 devices by March 19, according to a blog post by Censys senior security researcher Mark Ellzey.

The current attacks harken back to January, when the company had to push out an unplanned update to its NAS devices, one that not all customers welcomed. The update was meant to clean up after DeadBolt attacks that were greeting customers with the ransomware group’s screen when they logged in, effectively locking them out of the device.

The new wave of attacks ostensibly follow the same pattern as January’s wave, but the majority of the victims are running the QNAP QTS Linux kernel version 5.10.60, Ellzey said. That’s a later version than the update (QTS 5.0.0.1891) pushed out to customers in January.

That said, “at this time, Censys cannot state whether this is a new attack targeting different versions of the QTS operating system, or if it’s the original exploit targeting unpatched QNAP devices,” he acknowledged.

Moreover, the new infections do not seem to be targeting a specific organization or country; they seem to be evenly split between subscribers of various consumer internet service providers, Ellzey added.
See Also: Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Déjà Vu for QNAP CustomersThe attacks behave the same as the January attacks as far as what the customers experience — and they ask for the same ransom as previous DeadBolt attacks on QNAP devices, Ellzey said.

“Except for the [Bitcoin] addresses used to send ransoms to, the attack remains the same: backup files are encrypted, the web administration interface is modified, and victims are greeted with [ransom] messages,” he wrote in the post.

The attackers are asking for 0.03 Bitcoin for a decryption key, which is about $1,223 at today’s exchange rate. They’re also asking for a ransom from QNAP itself: 5 bitcoin or $203,988, for information related to the vulnerabilities; and 50 bitcoin, or about $2 million, for a master key to unlock all affected victims, Ellzey said.

QNAP is not the only company in the crosshairs of DeadBolt, which first came to researchers’ attention due to the January attacks. In mid-February, Reddit users began reporting that the ransomware was targeting ASUSTOR ADM devices, according to Censys.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH Attack DetectionCensys researchers picked up on the latest wave of QNAP attacks due to the unique way the current DeadBolt ransomware variant communicates with victims, according to the post.

“Instead of encrypting the entire device, which effectively takes the device offline (and out of the purview of Censys), the ransomware only targets specific backup directories for encryption, and vandalizes the web-administration interface with an informational message explaining how to remove the infection,” Ellzey wrote.

Therefore, using a simple search query, Censys “could easily find infected devices exposed on the public inte[...]

___________________________
@hacking_Attack
@Hacking_Video