hacking: security in practice
does anyone have CVE-2019-9514 PoC?

i'm trying to test one of my sites for this attack. i cannot seem to find any PoC anywhere but the official report from microsoft says that it does exist and it is accessible. can anyone help me find it?

submitted by /u/acnegenic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I decrypt saved Chrome passwords?

If I exported the Google Chrome (Version 98) data in AppData/local, how will I go about decrypting the saved passwords? There are a couple of SQLite files containing the URL and the encrypted passwords.

submitted by /u/Sushi_Roll_Monster
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How unsafe is my bank’s ebanking if I can see plaintext credentials in payloads in developer tool?

I myself is not terribly worried because I’m a broke ass. But that shit look unprofessional as hell

submitted by /u/oiducwa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking: a pox on hearts and homes

https://cdn-images-1.medium.com/max/2448/1*VYTJDc9MdvdIHyb2vhQSlQ.jpeg
Until sickness comes, health is not valued

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This Tech_Supp0rt:1 website could get you in Scam| THM |iconv

https://cdn-images-1.medium.com/max/1455/1*fCifGUuhT_mwwtq_ghR-Xw.png
I was spending, my weekend while having a chilled beer and flicking through some good THM Machines, while flicking through something hit…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: [Day 19] Blue Teaming Something Phishy Is Going On

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
Who was the email sent to? (Answer is the email address)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

4EVERLAND chính thức khởi động “First Leap Program” với giải thưởng lên đến 15 triệu 4EVER
https://medium.com/@kizz12114/4everland-ch%C3%ADnh-th%E1%BB%A9c-kh%E1%BB%9Fi-%C4%91%E1%BB%99ng-first-leap-program-v%E1%BB%9Bi-gi%E1%BA%A3i-th%C6%B0%E1%BB%9Fng-l%C3%AAn-%C4%91%E1%BA%BFn-15-tri%E1%BB%87u-4ever-f71b587f4443?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Kính chào toàn thể người dùng,Continue reading on Medium » (https://medium.com/@kizz12114/4everland-ch%C3%ADnh-th%E1%BB%A9c-kh%E1%BB%9Fi-%C4%91%E1%BB%99ng-first-leap-program-v%E1%BB%9Bi-gi%E1%BA%A3i-th%C6%B0%E1%BB%9Fng-l%C3%AAn-%C4%91%E1%BA%BFn-15-tri%E1%BB%87u-4ever-f71b587f4443?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

4EVERLAND chính thức khởi động “First Leap Program” với giải thưởng lên đến 15 triệu 4EVER

Kính chào toàn thể người dùng,Continue reading on Medium »
Read more...

hacking: security in practice
Anyone know what exploits armitage can use to take down Windows Server 2019?

This is only for experimental purposes only. I have a VM environment setup with a domain controller and 3 client PCs Server is Windows 2019 Domain clients are Win7 Win 8.1 and Win10

I am using Kali Linux obviously. I remember doing a Nmap scan for open ports on the server and I found a bunch of open ports. What Exploits can you use on their server because I remember going through exploit after exploit and nothing was happening. Once again this is for experimental purposes.

submitted by /u/geegol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to Hack social media such as TikTok.

I mean company wide. Could a Hacker destroy TikTok?

submitted by /u/ThaDigitalMarketer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible to sniff analog audio (3.5mm AUX / RCA) "wirelessly"?

II was joking with a mate who's bluetooth speaker got paired to with someone else's device - "one more reason to stick to wired", but that actually got me thinking.

Although connecting to another device obviously isn't a problem, can the audio signal itself be "sniffed" without intercepting the cable physically? For instance, HDMI signals can be sniffed using a software-defined radio, due to unintentional RF. Here is an article about it -> https://www.rtl-sdr.com/tempestsdr-a-sdr-tool-for-eavesdropping-on-computer-screens-via-unintentionally-radiated-rf/

I tried searching for "3.5mm sniffing wireless", but I kept getting devices for just wireless audio or similar, so thought I'd ask if it's even possible here

submitted by /u/arch-choot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
AppSec Tales IV | Email Change

https://cdn-images-1.medium.com/max/875/0*fIIRYfqTM9cu5sOL.jpeg
Application Security Testing of the Email Change form guidelines.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

RPC null sessions
https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/

___________________________
@hacking_Attack
@Hacking_Video

Hey folks. Quick question, sorry if this is the wrong space. I'm building a small CTF challenge based on a domain controller Windows box (Server 2022). The challengers will need to make use of the enumdomusers remote procedure call to grab a list of valid users and progress further. I'm having trouble configuring the Windows box to accept null sessions. I've seen RPC null sessions so many times from the other side of the CTF, I didn't realise how frustrating it would be to configure it myself. I've made every conceivable change to the group policy applied to the Windows box to allow anonymous access including the below changes. At the moment I just get "NT_STATUS_LOGON_FAILURE" when attempting a null session. https://preview.redd.it/bi4i0xp391w81.png?width=653&format=png&auto=webp&s=8b3f134d1780def11eba5b324208f082ce5547c5 Authenticated RPC sessions are working fine, so I'm thinking it's not a firewall/network issue. Any help much appreciated! As an aside, quite how server owners manage to configure RPC to accept null sessions where it's not default on the OS is beyond me after how long I've spent digging around on this. submitted by /u/NobodyTellsMe (https://www.reddit.com/user/NobodyTellsMe)
[link] (https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/) [comments] (https://www.reddit.com/r/Pentesting/comments/ucytod/rpc_null_sessions/)

___________________________
@hacking_Attack
@Hacking_Video