Information leakage in EXIF data of images(EXIF Data Exposure)

Summary :Continue reading on Medium »
Read more...

hacking: security in practice
MITM to change website-content on own virtual machine

Hey hacker-buddies,

i´ have recently watched some "hackers trolling scammers" videos on youtube and found this one: https://www.youtube.com/watch?v=daHVD9a_rJU

The Youtuber says he spend a weekend coding some MITM stuff and now every time he logs into the american-bank demo from his own virtual machine, he has the values and parameters he wants to.

I think this is an awesome way on spending the scammers time because they think you are a perfect target without you giving out some private information or real banking details.

What i am curious about is how he made this. I know there are possibilities with mitmproxy or burpsuite but i only found some explanations on how to srape a site, change something and load it. In the video it looks way more automated (when site is called, load this and that), he even jumps from page to page and it shows the "injected" information.

Does any of you awesome people have some tipps/links for me to understand this procedure a bit better?

Stay safe and happy hacking

submitted by /u/B4st1n3um4nn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Do you know about some free (best be open-source) and portable alternative to Hash Suite for Windows?

I want to have a portable hash brute-force matcher for Windows I could just have on my USB drive.

The hash suite is pretty good, however it's expensive. It also supports NTLM which I need the most and it supports resuming attacks later.

However, the free version is limited to 6 characters.

submitted by /u/lukmly013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vpn

Do you guys know a good vpn for android ?

submitted by /u/Mohriarty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–25262
https://medium.com/@reconshell.com/cve-2022-25262-d98af4ba38e0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022–25262Continue reading on Medium » (https://medium.com/@reconshell.com/cve-2022-25262-d98af4ba38e0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Business Logic Errors - Art of Testing Cards
https://shahjerry33.medium.com/business-logic-errors-art-of-testing-cards-4907cfb46a57?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/business-logic-errors-art-of-testing-cards-4907cfb46a57?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2022–25262

https://cdn-images-1.medium.com/max/2000/1*MNkpjGQ1OYsMdAKxANteUA.png
CVE-2022–25262

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cyber Security and Networking and their job opportunities

https://cdn-images-1.medium.com/max/1080/1*OEkQ3-dV4qAKtx_Hihvp7g.jpeg
Cybersecurity is a profit-making growing field which focuses on protecting organizations from digital attacks and keeping their…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sino-Russian Cyberhacking — Targeting Changes

https://cdn-images-1.medium.com/max/2048/1*EdWqVUGzDxLGVpgSt8inqA.jpeg
It seems the Ukraine War is having effects on Russia’s eastern frontier. Another case of unforeseen consequences?

Continue reading on The Dock on the Bay »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Dangers of an Electric Scooter Hack

When it comes to hacking it is very much open field in terms of devices which depend on electronic connectivity. Something which has been raised recently as a great concern, is the possibility of an electric scooter being hacked during use. We have already seen a number of accents involving these scooters and a Washington DC scooter accident attorney has recently been looking into the possibility of a malfunction caused by a hack. We know that hacking these kinds of devices is possible, and if scooter companies don’t pay enough attention to their security measures, here are the dangers which we will see.

Suddenly Stopping

One of the main dangers which we will see if one of these vehicles is hacked, or even falls prey to an attempted hack, is that they will suddenly stop. Now if a user is stationary this of course won’t cause any real issue, but if they are on the move then this could easily result in an accident or collision with another motor vehicle. Researchers from electric scooter company Zimperium has found that even the attempt of a Denial of Service attack could result in a scooter coming to a sharp stop.

Targeted Attacks

In terms of why someone would target these scooters randomly, the answer is that other than mischief, this is not something which is likely to happen. What we are bound to see however are targeted attacks on a particular individual who is using a scooter.

Taking Control

Whilst a Denial of Service hack may cause a great risk to the user of the scooter, the bigger risk is if malware is then installed on the scooter’s software. If this were to be the case then we could in fact see someone take control of the scooter, which of course is going to have even more damaging consequences. This is the worst case scenario but those companies which offer scooter rental have to consider these potential risks.

Need for Security and Updates

Sadly when it comes to cybersecurity most of the work which software developers are doing is reactive, but when it comes to the clear risks which a scooter hack poses, they have to be on the front foot. What this is going to mean for companies is that they have a high level security team in place or that they rely on a software developer which delivers the very highest level of cybersecurity. Not only this however, regular updates are also going to be required in order to defend best against ever-evolving hackers.

Now for most people this is not something that they should worry about when they look to rent a scooter, but what is important is that the scooter companies themselves are actually aware of the dangers which are present if a cyberattack takes place. It is imperative that they are always one step ahead of the game in this regard.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
How To Improve The Cyber Security Of A Law Firm

It is not surprising to see that cyber criminals often attack law firms. This is due to the client information available for them. So much intellectual property, proprietary data, and confidential data means hackers could use it for countless reasons.

Take into account the fact that around 30% of law firms experience cyber attacks. And this number is constantly growing. Even so, just around 35% of the law firms have some sort of incident response plan. This is why you should seriously consider the following tips from an experienced workers compensation attorney who had to deal with cyber attacks in the past.

Strengthen Your Passwords And Utilize Multi-Factor Authentication

One of the simplest and fastest things you could do is to use very complex passwords. This is true for absolutely all the services you use that require authentication. To keep things simple, your passwords should include lowercase letters, uppercase letters, numbers, and some keyboard symbols. Unfortunately, most people today use passwords that are really easy to guess. And they are used for many accounts, which means the hacker only needs one.

Never choose convenience over the much important security. And use MFA (multi-factor authentication). As this is enabled, it is much more difficult for the hacker to gain access to your private data.

Always Back Up Critical Data

There are several types of attacks that the law firm can be faced with, like ransomware or website hacking. In all cases, data can end up being lost. This would create huge problems for the law firm. Just think about having the details of all your cases lost simply because of a hack. It can even happen because of technology failing, like a hard disk crash. This is why it is so important to have a backup in place.

Store all sensitive data on external drives or in a location that is completely secured and not connected to the internet. Automated backup services or cloud-based backups are also a possibility, as long as handled by professional cyber security companies.

Regularly Update Software

If your software is not regularly updated and patched, there is always the possibility that someone will hack it. Security patches are very important because they solve vulnerabilities. Basically, the developer identifies ways in which their software can be hacked. Then, those vulnerabilities are fixed through a patch. Most data breaches are due to unpatched vulnerabilities.

Use VPNs

Last but not least, the virtual private network (VPN) offers a great deal of security as you no longer have to worry about the vulnerabilities of any internet network. It is particularly useful when you travel a lot and you have to use several unsecured WiFi networks. The VPN will hide your location and the details of your computer. This makes it very hard for the hacker to access your sensitive information. To keep it simple, you should always use VPNs when:

* You use public WiFi
* You utilize the network of your law firm from a remote location
* You travel
* You need internet privacy

___________________________
@hacking_Attack
@Hacking_Video