Hacking on Medium
GitHub dice que el ataque reciente que involucró tokens OAuth robados fue “altamente dirigido”

https://cdn-images-1.medium.com/max/953/0*J9ef97fGzfp76vDM
PUBLICADO EN 3 MAYO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I got a lousyT-Shirt from the Dutch Goverment.

Hello everyone,  my name is Max. I’m a Computer Science student and ethical hacker from Germany. Today I want to tell you how I hacked the…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Unpatched DNS-Poisoning Bug Affects Millions of Devices, Stumps Researchers

The security vulnerability puts wide swaths of industrial networks and IoT devices at risk of compromise, researchers warn.

Dark Reading: Attacks/Breaches
REvil Revival: Are Ransomware Gangs Ever Really Gone?

The infamous ransomware group appears to be back from the dead — maybe — and using the old brand, but experts question whether a reconstituted gang will have much success.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SolarWinds Attackers Gear Up for Typosquatting Attacks

The same infrastructure traced back to Russian-speaking threat group Nobelium is being used to set up misspelled domain names, presaging impersonation attacks bent on credential harvesting, analysts say.

Dark Reading: Attacks/Breaches
API Security Company Traceable AI Lands $60 Million Series B

Latest round led by IVP values the company at $450 million.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Syxsense Enterprise Unifies Endpoint Security and IT Management for Real-Time Vulnerability Monitoring and Remediation

IT Teams can now manage, detect, and secure all endpoints with 100% visibility across desktop, laptop, server, and mobile devices.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to find out who is doing a RAT attack on you?

I want to lure a person I know is doing RAT attacks to RAT my Virtual Machine so I can find out his info for a police report. What software should I use to trace back where the RAT connection is being established from?
My first assumption would be Wireshark, but if anyone has more experience with the topic (cyber crime reversing) please leave your suggestions here. The attacker is using a software called "Quasar"

submitted by /u/Chiken983
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learning HTML and CSS with Javascript

I am pretty new to the hacking community. For now, I am learning Linux, Networking, and overall computer knowledge. I will start working at a marketing/ web dev company. They will teach me HTML, CSS and maybe some JS as well. My main goal is to become a pen tester or some defensive security role. Do you think learning web dev is going to be helpful for me?

submitted by /u/thelayneseeker577
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

LeakedHandlesFinder - Leaked Windows Processes Handles Identification Tool
http://www.kitploit.com/2022/05/leakedhandlesfinder-leaked-windows.html

___________________________
@hacking_Attack
@Hacking_Video

Leaked Windows (https://www.kitploit.com/search/label/Windows) processes handles identification tool. Useful for identify new LPE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) during a pentest (https://www.kitploit.com/search/label/Pentest) or simply as a new research (https://www.kitploit.com/search/label/Research) process. Currently supports exploiting (https://www.kitploit.com/search/label/Exploiting) (autopwn) procesess leaked handles spawning a new arbitrary process (cmd.exe default).
LHF identifies in realtime inherited handles and gives the researcher explotability tips

___________________________
@hacking_Attack
@Hacking_Video

Presented at rootedcon 2022 https://www.rootedcon.com/ponentes-rooted2022/. Presentation -> Presentation/Exploiting Leaked Handles for LPE.pdf

Download LeakedHandlesFinder (https://github.com/lab52io/LeakedHandlesFinder)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Cyber Security Almost Got Me Expelled

Back in the days of 2010s UK Secondary School, I decided to take a systems control class (Electronics) as the other options were cooking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PortSwigger Web Security Academy: SQL injection attack, querying the database type and version on…

https://cdn-images-1.medium.com/max/2000/0*dpf81PAXRKT7gkMi
Hello friends and today HaXeZ is looking at the 5th SQL Injection lab on Portswigger Web Security Academy.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video