hacking: security in practice
Official MalDuino Lite and Elite Missing

Hello!

Why isn't there any MalDuino Lite and Elite available on maltronics (the official selling website) and on the official MalDuino website?
Are there only these versions available?

Thanks!

submitted by /u/The-Malix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Real talk
https://www.reddit.com/r/redteamsec/comments/tp8a6v/real_talk/

submitted by /u/DrinkMoreCodeMore (https://www.reddit.com/user/DrinkMoreCodeMore)
[link] (https://i.redd.it/ecpmehjektp81.jpg) [comments] (https://www.reddit.com/r/redteamsec/comments/tp8a6v/real_talk/)

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/wxw2ua5xjtp81.jpg?width=320&crop=smart&auto=webp&s=b70c9c5ebb98d88f8910f2d74153189ec6d2ec62 submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
(serious) Online course(s) to get started with career

Hello everyone! I read books of network along with linux and use Kali Linux. I am currently learning bash. I want to know which online course(s) to get a career in ethical hacking?

submitted by /u/Introthink
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/3q4B_z0G7V-2rGxrJ5ncTuTVREivAgnJulT9KP_92FE.jpg submitted by /u/New-Iron3342
[link] [comments]

Fix software bugs in minutes with error monitoring
https://medium.com/@petesuhas/fix-software-bugs-in-minutes-with-error-monitoring-15d24a81820a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Consumers of software products have more options than they can name. If a much-beloved food delivery service crashes, there are at least…Continue reading on Medium » (https://medium.com/@petesuhas/fix-software-bugs-in-minutes-with-error-monitoring-15d24a81820a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Fix software bugs in minutes with error monitoring

Consumers of software products have more options than they can name. If a much-beloved food delivery service crashes, there are at least…Continue reading on Medium »
Read more...

Kali Linux Tutorials
Njsscan : A Semantic Aware SAST Tool That Can Find Insecure Code Patterns In Node.js Applications

Njsscan is a static application testing (SAST) tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Installationpip install njsscanRequires Python 3.6+ and supports only Mac and Linux Command Line Options$ njsscan
usage: njsscan [-h] [–json] [–sarif] [–sonarqube] [–html] [-o OUTPUT] [-c CONFIG] [–missing-controls] [-w] [-v] [path …]
positional arguments:
path Path can be file(s) or directories with source code
optional arguments:
-h, –help show this help message and exit
–json set output format as JSON
–sarif set output format as SARIF 2.1.0
–sonarqube set output format compatible with SonarQube
–html set output format as HTML
-o OUTPUT, –output OUTPUT
output filename to save the result
-c CONFIG, –config CONFIG
Location to .njsscan config file
–missing-controls enable missing security controls check
-w, –exit-warning non zero exit code on warning
-v, –version show njsscan version Example Usage$ njsscan test.js
Pattern Match ████████████████████████████████████████████████████████████ 1
Semantic Grep ███████████████████████████ 160
njsscan: v0.1.9 | Ajin Abraham | opensecurity.in
═══════════╤═══════════════════════════════════════════════════════════════════════════════════════════════╕
│ RULE ID │ express_xss │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ OWASP │ A1: Injection │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ CWE │ CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ DESCRIPTION │ Untrusted User Input in Response will result in Reflected Cross Site Scripting Vulnerability. │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ SEVERITY │ ERROR │
├─────────────┼───────────────────────────────────────────────────────────────────────────────────────────────┤
│ FILES │ ╒════════════════╤═══════════════════════════════════════════════╕ │
│ │ │ File │ test.js │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Match Position │ 5 – 46 │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Line Number(s) │ 7: 8 │ │
│ │ ├────────────────┼───────────────────────────────────────────────┤ │
│ │ │ Match String │ const { name } = req.query; │ │
│ │ │ │ res.send(‘Hello :’ + name + “”) │ │
│ │ ╘════════════════╧═══════════════════════════════════════════════╛ │
╘═════════════╧═══════════════════════════════════════════════════════════════════════════════════════════════╛ nodejsscan SASTnodejsscan, built on top of njsscan provides a full fledged vulnerability management user interface along with other nifty integrations. Python APIfrom njsscan.njsscan import NJSScan
node_source = ‘/node_source/true_positives/sqli_node.js’
scanner = NJSScan([node_source], json=True, check_controls=False)
scanner.scan()
{
‘templates’: {},
‘nodejs’: {
‘node_sqli_injection’: {
‘files’: [{
‘file_path’: ‘/node_source/true_positives/sqli_node.js’,
‘match_position’: (1, 24),
‘match_lines’: (4, 11),
‘match_string’: ‘var employeeId = req.foo;\n\nvar sql = “SELECT * FROM trn_employee WHERE employee_id = ” + employeeId;\n\n\n\nconnection.query(sql, function (error, results, fields) {\n\n if (error) {\n\n throw error;\n\n }\n\n console.log(results);’
}],
‘metadata’: {
‘owasp’: ‘A1: Injection’,
‘cwe’: “CWE-89: Impr[...]

___________________________
@hacking_Attack
@Hacking_Video

oper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’)”,
‘description’: ‘Untrusted input concatinated with raw SQL query can result in SQL Injection.’,
‘severity’: ‘ERROR’
}
}
},
‘errors’: []
} Configure njsscanA .njsscanfile in the root of the source code directory allows you to configure njsscan. You can also use a custom .njsscanfile using --configargument.

nodejs-extensions:
.js
template-extensions:
.new
.hbs
”
ignore-filenames:
skip.js
ignore-paths:
__MACOSX
skip_dir
node_modules
ignore-extensions:
.jsx
ignore-rules:
regex_injection_dos
pug_jade_template
severity-filter:
WARNING
ERROR Suppress FindingsYou can suppress findings from javascript source files by adding the comment // njsscan-ignore: rule_id1, rule_id2to the line that trigger the findings.

Example:

app.get(‘/some/redirect’, function (req, res) {
var target = req.param(“target”);
res.redirect(target); // njsscan-ignore: express_open_redirect
}); CI/CD IntegrationsYou can enable njsscan in your CI/CD or DevSecOps pipelines. Github ActionAdd the following to the file .github/workflows/njsscan.yml.

name: njsscan
on:
push:
branches: [ master, main ]
pull_request:
branches: [ master, main ]
jobs:
njsscan:
runs-on: ubuntu-latest
name: njsscan check
steps:
– name: Checkout the code
uses: actions/checkout@v2
– name: nodejsscan scan
id: njsscan
uses: ajinabraham/njsscan-action@master
with:
args: ‘.’ Github Code Scanning IntegrationAdd the following to the file .github/workflows/njsscan_sarif.yml.

name: njsscan sarif
on:
push:
branches: [ master, main ]
pull_request:
branches: [ master, main ]
jobs:
njsscan:
runs-on: ubuntu-latest
name: njsscan code scanning
steps:
– name: Checkout the code
uses: actions/checkout@v2
– name: nodejsscan scan
id: njsscan
uses: ajinabraham/njsscan-action@master
with:
args: ‘. –sarif –output results.sarif || true’
– name: Upload njsscan report
uses: github/codeql-action/upload-sarif@v1
with:
sarif_file: results.sarif Gitlab CI/CDAdd the following to the file .gitlab-ci.yml.

stages:
– test
njsscan:
image: python
before_script:
– pip3 install –upgrade njsscan
script:
– njsscan .

Example: dvna with njsscan gitlab Travis CIAdd the following to the file .travis.yml.

language: python
install:
– pip3 install –upgrade njsscan
script:
– njsscan . Circle CIAdd the following to the file .circleci/config.yamlversion: 2.1
jobs:
njsscan:
docker:
– image: cimg/python:3.9.6
steps:
– checkout
– run:
name: Install njsscan
command: pip install –upgrade njsscan
– run:
name: njsscan check
command: njsscan . DockerPrebuilt image from DockerHubdocker pull opensecurity/njsscan
docker run -v /path-to-source-dir:/src opensecurity/njsscan /src Build Locallydocker build -t njsscan .
docker run -v /path-to-source-dir:/src njsscan /src Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Can your web domain be stolen? Domain Hijacking

https://cdn-images-1.medium.com/max/1600/1*RzbcC0E53PZxqPQq9hOZiA.png
Imagine you live in a big city. It’s a nice city, but it has a problem. The people who run public transit have discovered that it’s easier…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack Bluetooth In 2022 — ExploitByte

https://cdn-images-1.medium.com/max/1400/0*peGAO-KguBCcEPiD
How To Hack Bluetooth In 2022 — In This Blog we Will You About Bluethooth hacking ,What is Bluetooth Hacking And Many More

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find info from breaches

Hey wonderful peeps, anyone know a good place to find leaked info from past data breaches? Im looking into the Zynga breach and trying to find that info. Comment or dm me if youve got any tips!

submitted by /u/floatingcoffeepoop
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
In theory, how could I spread malware across a local network?

Hey guys! I'm working on a project currently, it's a backdoor/RAT. I was wondering how I could possibly spread the malware across the local network of the victim. I have an entire separate network I set up with 2 virtual computers on it to emulate spreading.

I was thinking if the computers were vulnerable to some sort of exploit, like EternalBlue for Win 7, The idea would be to make the victim host a VPN that I could connect to, and access their local network. Is that possible? Or is there more to it? I've been trying to do research but can't find anything!

This is not going to be used in any malicious way, but I want to finish this project and open source it on github.

Thanks, a fellow cybersecurity enthusiast!

submitted by /u/ThatsFluke
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FCC adds Kaspersky to its list of national security threats

https://external-preview.redd.it/oNmgk0Rv2r_IIjaQY1L9C7a6yHOLmM1QKeHB0zmSeL4.jpg?width=640&crop=smart&auto=webp&s=801f94fa2c7fe8644e11616e7c042ab808ff0ae3 submitted by /u/Atari_Portfolio
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
'Preparation, not panic': Top US cyber official asks Americans to look out for Russian hacking efforts

https://external-preview.redd.it/H2AKXTzQdPHgOv_YB7U5zPhcToi5U_Ieqy6F7mrVBs8.jpg?width=640&crop=smart&auto=webp&s=5b34dc902850720bad992f1c247d754eda0d16c3 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video