fuzzing and credentials leakage..nice bug hunting writeup

Here you find a beautiful write-up with useful tips :)Continue reading on Medium »
Read more...

hacking: security in practice
MacOS specific thick client pentesting methodology/tips?

Hello!

I'm working on a multiplatform thick client app pentest that is available on Windows, Android and MacOS. I'm testing all of the variants, which also includes MacOS that I have very limited experience with, since I'm not a Apple user. My question is, are there any MacOS specific checks or tools that I should definitely perform and look into? Be it access control, services created by the appliaction and their access level, etc?

Most of the communication towards the server has already been tested on the Win and Android builds, but I should look into some Mac-specific risks, which I have very limited experience with, so any tip or a book/guide recommendation would be greatly appreciated.

Thank you!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Crypto Fraud New Trick: the Victim’s MetaMask Wallet Was Emptied

https://external-preview.redd.it/k0sLZ4WvzQx8927zR8ugPBEqZ0fnVEm0SgnRP_WfjCQ.jpg?width=640&crop=smart&auto=webp&s=dfe6172d1833805cf04ddc0c1bfb9922e55a77c8 submitted by /u/cantowok
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A Brilliant Analysis on An Advanced Ransomware Intrusion (Quantum Ransomware )

https://external-preview.redd.it/z5xGYzpQPudc_8c86TSLjGwkCti7kcl7Q_GKpa1bdnM.jpg?width=640&crop=smart&auto=webp&s=5038bd4def3a44baeb21b017bde317397e8bf6b2 submitted by /u/theycallmemonlight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SMS Sender ID with punctuation?

I've done SMS spoofing for a long time but today I saw something that confused me. I received a confirmation code from the government and the sender ID contained a dot (.)

Well.... alphanumeric sender ids aren't supposed to contain punctuation, i'm baffle to how they managed to do so? Could it be RCS Verified Identities?

submitted by /u/SMSSpoofer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Overlapping ICS/OT Mandates Distract From Threat Detection and Response

It's time for regulators of critical infrastructure — including industrial control systems and operational technology — to focus more on operational resiliency.

fuzzing and credentials leakage..nice bug hunting writeup
https://medium.com/@abdalrahman.alshammas/fuzzing-and-credentials-leakage-nice-bug-hunting-writeup-38b2e774b300?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Here you find a beautiful write-up with useful tips :)Continue reading on Medium » (https://medium.com/@abdalrahman.alshammas/fuzzing-and-credentials-leakage-nice-bug-hunting-writeup-38b2e774b300?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox Timing Write-Up

https://cdn-images-1.medium.com/max/1400/1*L76oKyshUeL5Z9aD8vgCkg.png
The Timing machine on HackTheBox has just retired! This is my write-up about the Timing machine on HackTheBox. Here I detail the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Will banning the shame game on hacking victims improve cybersecurity?

https://cdn-images-1.medium.com/max/2600/1*USMXzh-fdAsvQb_bv_LPsA.jpeg
In cybersecurity, you’re never bulletproof. But you don’t have to be defenseless against hackers either — unless you don’t care.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beyaz şapkalı hacker kiralama gerçekleştirmek

Beyaz şapkalı veya siyah şapkalı olmak üzere temelde ikiye ayrılan hacker platformları sizlere seçenekler sunmaktadır.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El FBI advierte sobre el ransomware BlackCat que afectó a más de 60 organizaciones en todo el mundo

https://cdn-images-1.medium.com/max/1493/0*I249zpN1xmhT311I
PUBLICADO EN 25 ABRIL, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Lapsus$: Who, What, Where, Why, How

https://cdn-images-1.medium.com/max/2600/0*pv4i7bUHaBnXFK3K
Lapsus$ (often stylized LAPSUS$, aka DEV-0537) is an extortionist threat group that has made headlines in 2022 due to its large-scale…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video