KitPloit - PenTest Tools!
VulFi - Plugin To IDA Pro Which Can Be Used To Assist During Bug Hunting In Binaries

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Do I Report My Security Program's ROI?

If security leaders focus on visibility and metrics, they can demonstrate their program's value to company leadership and boards.

Dark Reading: Attacks/Breaches
Log4j Attack Surface Remains Massive

Four months after the Log4Shell vulnerability was disclosed, most affected open source components remain unpatched, and companies continue to use vulnerable versions of the logging tool.

https://b.thumbs.redditmedia.com/fuOH7HtzwQBzFExnKVWvDyI6_YA3ehzkn8pe-wvaWMw.jpg Hey folks. Quick question, sorry if this is the wrong space. I'm building a small CTF challenge based on a domain controller Windows box (Server 2022). The challengers will need to make use of the enumdomusers remote procedure call to grab a list of valid users and progress further. I'm having trouble configuring the Windows box to accept null sessions. I've seen RPC null sessions so many times from the other side of the CTF, I didn't realise how frustrating it would be to configure it myself.

I've made every conceivable change to the group policy applied to the Windows box to allow anonymous access including the below changes. At the moment I just get "NT_STATUS_LOGON_FAILURE" when attempting a null session.

​

https://preview.redd.it/1ddyqawawyv81.png?width=653&format=png&auto=webp&s=750090cbdfb8bd861e11f92d80b295e34a81d253

Authenticated RPC sessions are working fine, so I'm thinking it's not a firewall/network issue. Any help much appreciated!

As an aside, quite how server owners manage to configure RPC to accept null sessions where it's not default on the OS is beyond me after how long I've spent digging around on this.

submitted by /u/NobodyTellsMe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
does anyone have CVE-2019-9514 PoC?

i'm trying to test one of my sites for this attack. i cannot seem to find any PoC anywhere but the official report from microsoft says that it does exist and it is accessible. can anyone help me find it?

submitted by /u/acnegenic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I decrypt saved Chrome passwords?

If I exported the Google Chrome (Version 98) data in AppData/local, how will I go about decrypting the saved passwords? There are a couple of SQLite files containing the URL and the encrypted passwords.

submitted by /u/Sushi_Roll_Monster
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How unsafe is my bank’s ebanking if I can see plaintext credentials in payloads in developer tool?

I myself is not terribly worried because I’m a broke ass. But that shit look unprofessional as hell

submitted by /u/oiducwa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking: a pox on hearts and homes

https://cdn-images-1.medium.com/max/2448/1*VYTJDc9MdvdIHyb2vhQSlQ.jpeg
Until sickness comes, health is not valued

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This Tech_Supp0rt:1 website could get you in Scam| THM |iconv

https://cdn-images-1.medium.com/max/1455/1*fCifGUuhT_mwwtq_ghR-Xw.png
I was spending, my weekend while having a chilled beer and flicking through some good THM Machines, while flicking through something hit…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: [Day 19] Blue Teaming Something Phishy Is Going On

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Who was the email sent to? (Answer is the email address)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

4EVERLAND chính thức khởi động “First Leap Program” với giải thưởng lên đến 15 triệu 4EVER
https://medium.com/@kizz12114/4everland-ch%C3%ADnh-th%E1%BB%A9c-kh%E1%BB%9Fi-%C4%91%E1%BB%99ng-first-leap-program-v%E1%BB%9Bi-gi%E1%BA%A3i-th%C6%B0%E1%BB%9Fng-l%C3%AAn-%C4%91%E1%BA%BFn-15-tri%E1%BB%87u-4ever-f71b587f4443?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Kính chào toàn thể người dùng,Continue reading on Medium » (https://medium.com/@kizz12114/4everland-ch%C3%ADnh-th%E1%BB%A9c-kh%E1%BB%9Fi-%C4%91%E1%BB%99ng-first-leap-program-v%E1%BB%9Bi-gi%E1%BA%A3i-th%C6%B0%E1%BB%9Fng-l%C3%AAn-%C4%91%E1%BA%BFn-15-tri%E1%BB%87u-4ever-f71b587f4443?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

4EVERLAND chính thức khởi động “First Leap Program” với giải thưởng lên đến 15 triệu 4EVER

Kính chào toàn thể người dùng,Continue reading on Medium »
Read more...

hacking: security in practice
Anyone know what exploits armitage can use to take down Windows Server 2019?

This is only for experimental purposes only. I have a VM environment setup with a domain controller and 3 client PCs Server is Windows 2019 Domain clients are Win7 Win 8.1 and Win10

I am using Kali Linux obviously. I remember doing a Nmap scan for open ports on the server and I found a bunch of open ports. What Exploits can you use on their server because I remember going through exploit after exploit and nothing was happening. Once again this is for experimental purposes.

submitted by /u/geegol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to Hack social media such as TikTok.

I mean company wide. Could a Hacker destroy TikTok?

submitted by /u/ThaDigitalMarketer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video