hacking: security in practice
Does anyone have a walk through for using CVE-2021-3156?

Context:

I'm a student in my final semester of college, and I'm taking a capstone course where we have to do a research project on a hacking/computer security related topic, and I went with CVE-2021-3156, the sudo privilege escalation. I'm trying to figure out how to actually use the exploit, but all my research has given me "Luckily, this has been patched, make sure to update your systems!" Which in my case is not very helpful.

If any of you know how it works or have any ideas on better ways to research than a simple google search, please let me know.

Thanks

submitted by /u/prodias2
[link] [comments]

hacking: security in practice
"Must watch" defcon talks?

I was watching some old presentations and asked myself, what are considered to be the "must have" of defcon talks by hacker community? What are your favourite talks?

submitted by /u/nopainXX
[link] [comments]

Dark Reading: Attacks/Breaches
Clear & Present Danger: Data Hoarding Undermines Better Security

Facebook and Google can identify patterns of attack within their own data, but smaller businesses rarely see enough traffic to successfully identify an attack or warn users.

Tencent Cloud Hadir di Indonesia, Apa yang Terbaru?
https://localhunter.medium.com/tencent-cloud-hadir-di-indonesia-apa-yang-terbaru-bf257f2e094?source=rss------bug_bounty-5

Pertama kalinya Tencent Cloud membuka cabang di Indonesia dengan sejumlah teknologi terbaharukan yakni Internet Data Center, yang diklaim…Continue reading on Medium » (https://localhunter.medium.com/tencent-cloud-hadir-di-indonesia-apa-yang-terbaru-bf257f2e094?source=rss------bug_bounty-5)

Tencent Cloud Hadir di Indonesia, Apa yang Terbaru?

Pertama kalinya Tencent Cloud membuka cabang di Indonesia dengan sejumlah teknologi terbaharukan yakni Internet Data Center, yang diklaim…Continue reading on Medium »
Read more...

Hacking on Medium
White Hat, Black Hat

https://cdn-images-1.medium.com/max/911/1*aXuJubcfim32K1M19n9PBQ.png
The word hack (the root of the word hacker) was already a few hundred years old before it became associated with attacks on computer…

Continue reading on Medium »

Hacking on Medium
​Защищаемся от IP-логгеров(от утечки IP-адреса)

https://cdn-images-1.medium.com/max/962/1*-OKbyH8MCbJgGGKbobLS0A.png
Сейчас любой школьник может подсунуть вам iplogger и узнать ваш IP-адрес, ситуация не очень приятная, согласитесь.

Continue reading on Medium »

Hacking on Medium
All About Google Dorks

https://cdn-images-1.medium.com/max/923/1*_Gpqfq1tqKFCSv-3RzG0UA.png
In this blog, you will get to know about google Dorking and some pro tips which I used to become the author of my own google dork.

Continue reading on Medium »

Hacking on Medium
Detectando el “siguiente” ataque cibernético estilo SolarWinds.

https://cdn-images-1.medium.com/max/938/0*-UnaLd2RvsA5wwBC
PUBLICADO EN 13 ABRIL, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
Proyectos para practicar web hacking

Existen diversos proyectos para practicar ataques a aplicaciones web, tanto tradicionales como a APIs, en base a una investigación…

Continue reading on Medium »

Hacking on Medium
TryHackMe: Sakura — Beginner Friendly

https://cdn-images-1.medium.com/max/605/1*DzngRJw_NLyjAoGn-n1_dw.png
PLATFORM: TryHackMe

Continue reading on Medium »

Hacking on Medium
Getting started with Penetration Testing

https://cdn-images-1.medium.com/max/1366/1*64xHlVGjwcOUK59YcctVYg.png
How to learn, practice and perform pen-testing (from theory to practice)

Continue reading on Medium »