Hacking on Medium
Redes de Computadores

https://cdn-images-1.medium.com/max/650/1*BEfXbBS9wBE7LKJ0Z270GQ.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS on Microsoft’s Power Apps

https://cdn-images-1.medium.com/max/880/1*eRqRNVtu_fZNyAf_6HcXcQ.png
— DISCLAIMER : FOR EDUCATIONAL PURPOSE ONLY —

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Detectan un programa malicioso que se propaga a través de falsas actualizaciones de Windows 10

https://cdn-images-1.medium.com/max/1687/0*yiSekYWwyRbdBP5r
PUBLICADO EN 4 MAYO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How i found a vulnerability that leads to access any users’ sensitive data and got $500

Hello everyone!Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Q&A: How China Is Exporting Tech-Based Authoritarianism Across the World

The US has to adapt its own policies to counter the push, warns former DocuSign CEO and Under Secretary of State Keith Krach.

Dark Reading: Attacks/Breaches
Microsoft Releases Defender for SMBs

Microsoft's stand-alone version of Defender for SMBs promises to help SecOps teams automate detection, response, and recovery.

Dark Reading: Attacks/Breaches
China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack

Operation CuckooBees uncovered the state-sponsored group's sophisticated new tactics in a years-long campaign that hit more than 30 tech and manufacturing companies.

How i found a vulnerability that leads to access any users’ sensitive data and got $500
https://medium.com/@robert0/how-did-i-find-a-vulnerability-that-leads-to-access-any-users-sensitive-data-and-got-500-5cce1c21d86a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone!Continue reading on Medium » (https://medium.com/@robert0/how-did-i-find-a-vulnerability-that-leads-to-access-any-users-sensitive-data-and-got-500-5cce1c21d86a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Device range detection

Can you detect a device’s range using bluetooth?

submitted by /u/Roflolmaoguy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack ATMS?

Rewatched terminator 2 and young John Connor inserts a machine that seems to simulate a card and then narrows down the pin allowing him to punch in that pin and pull money. Was that actually possible back then? Is it possible now?

submitted by /u/tangfox01
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is it possible to crack steam codes and if not what are some good things to begin to learn to crack?

so i used to crack fortnite accounts and other stuff like vpns but im not sure if it's possible to crack steam things whether that would be game codes or accounts so is it possible and if it is can you explain and if not what are some good things to crack and what tools will i need?

submitted by /u/Urnanbob
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone know how to use The CSMTokenGrabber?

https://github.com/CSM-BlueRed/CSMTokengrabb

submitted by /u/Mandrew002
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cliam - Multi Cloud IAM Permissions Enumeration Tool
http://www.kitploit.com/2022/05/cliam-multi-cloud-iam-permissions.html

___________________________
@hacking_Attack
@Hacking_Video

Multi cloud iam permissions enumeration (https://www.kitploit.com/search/label/Enumeration) tool. Currently covers: AWS GCP [TODO] Azure [TODO] Oracle
Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. Only permissions that does not require a specific resource are tested. enumerate which can be used to enumerate specific permissions (recommended) Some service providers have service groups that can check for permissions for a specific subset of services/resources. Installation Download the latest release (https://github.com/securisec/cliam/releases). DEV tags are current, but not stable. In order to build the binary locally, cd into the cli directory and run make dev Usage Cliam works with credentials (https://www.kitploit.com/search/label/Credentials) obtained from the services well known envars or from passing the commonly required flags from the cli. It is highly recommond that command completions are set as most of the enumerate options have to be specific. To generate completions, use cliam completion [shell] and set according to your shells completion directory. ❯❯ cliam --help Cloud Enumerate is a tool to enumerate cloud credentials for their permissions. Usage: cliam [command] Available Commands: aws Enumerate AWS credentials for their permissions. completion Generate the autocompletion script for the specified shell gcp Enumerate GCP service accounts for their permissions. help Help about any command Flags: -h, --help help for cliam Additional help topics: cliam azure Enumerate Azure credentials for their permissions. Use "cliam [command] --help" for more information about a command. AWS Uses the AWS rest api to make a signed request using the passed in credentials. This greatly adds speed, but makes it a bit more challenging to keep up with adding new permissions. The issue of scale is that AWS uses 3 - 4 variety of requests at the service level Supports obtaining credentials from AWS profile, flags, or default AWS environment variables like AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and optionally AWS_SESSION_TOKEN. cliam aws --help Enumerate AWS credentials for their permissions. Usage: cliam aws [command] Available Commands: common Enumerate permissions for common AWS resources. compute Enumerate permissions for common compute AWS resources. databases Enumerate permissions for common AWS database resources. enumerate Enumerate permissions for specified AWS resources. serverless Enumerate permissions for common serverless AWS resources. storage Enumerate permissions for common storage AWS resources. Flags: --access-key-id string AWS Access Key ID -h, --help help for aws --profile string AWS Profile. When profile is set, access-key-id, secret-access-key, and session-token are ignored. --region string AWS Region (default "us-east-1") --secret-access-key string AWS Secret Access Key --session-token string AWS Session Token Global Flags: --max-threads int Maximum number of threads to use. (default 5) --request-timeout int Timeout for each request in seconds. (default 10) Known resources Cliam for AWS also supports enumerating certain permissions which requires a known value. For instance, when using awscli, we can get a function using aws lambda get-function --function-name . This maps directly to cliam where we can use: cliam aws enumerate lamda --known-value function-name= This will enumerate all permissions for lambda which takes function-name as a valid argument. This will work with other AWS resources as well. (more coverage coming soon) Examples Bruteforce all serverless resources from an AWS profile ❯❯ cliam aws

___________________________
@hacking_Attack
@Hacking_Video