Hey there, I am Samrat Gupta aka Sm4rty, a Security Researcher and a Bug Bounty Hunter. In this Blog I will be sharing my recent finding…Continue reading on Medium » (https://sm4rty.medium.com/rce-via-dependency-confusion-e0ed2a127013?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Mastering the New CISO Playbook

How can you safeguard your organization amid global conflict and uncertainty?

Dark Reading: Attacks/Breaches
Onapsis Announces New Offering to Jumpstart Security for SAP Customers

Company delivers new vulnerability management offering to help resource-constrained organizations combat increasing attacks on mission-critical SAP applications .

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
5-Buck DCRat Malware Foretells a Worrying Cyber Future

The Dark Crystal remote access Trojan (aka DCRat) breaks a few stereotypes, with coding done by a solo developer, using an obscure Web language and offering it at a frighteningly low price.

Dark Reading: Attacks/Breaches
Arctic Wolf Launches Arctic Wolf Labs Focused on Security Operations Research and Intelligence Reporting

New research-focused division focused on advancing innovation in the field of security operations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybercriminals Are Increasingly Exploiting Vulnerabilities in Windows Print Spooler

Kaspersky researchers discovered that cybercriminals made approximately 65,000 attacks between July 2021 and April 2022.

___________________________
@hacking_Attack
@Hacking_Video

How to best get started with pentesting both learning and with tooling and setting up a suite
https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/

I’ve done like one or two of the easier hackthebox machines and feel like I was definitely a bit over my head. I also have heard that it is best practice to not run any of the tools directly on your OS. I’m curious what the standard practices are. Should I make a kali bootable usb, or a VM, or something else? Also, I want to learn pentesting for both offensive and defensive purposes. I’d like to host my own webapp but want to be aware of potential attack vectors. I know this is a lot but I figured there might be some professionals in this sub with some advice. submitted by /u/regular_guy_anon (https://www.reddit.com/user/regular_guy_anon)
[link] (https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/) [comments] (https://www.reddit.com/r/Pentesting/comments/umka8w/how_to_best_get_started_with_pentesting_both/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
When a responsible disclosure goes south

https://cdn-images-1.medium.com/max/600/0*z4zIsSjXjGC8F4Ir.jpg
Screwing up a disclosure

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Governance Hacking: Swallowing Your Own Poison Pill

https://cdn-images-1.medium.com/max/1280/1*suZrQxCxpWOViO-xJHB-_Q.jpeg
Beanstalk lost 76M in digital assets because of a governance flaw, and your DAO can too.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ra Write-Up | Português-Brasil

https://cdn-images-1.medium.com/max/604/1*Bj3veqrxdlpgAUYMFDlLVw.png
Mais uma vez lidando com Pentest em Active Directory. Se lembrar de cada parte em um Pentest em AD, tentando trazer para a realidade, nada…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
RCE via Dependency Confusion

https://cdn-images-1.medium.com/max/1923/1*GxN5JF7wG_6lamkrt8209w.png
Hey there, I am Samrat Gupta aka Sm4rty, a Security Researcher and a Bug Bounty Hunter. In this Blog I will be sharing my recent finding…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Rash Of Cyber Attacks In 2020

https://cdn-images-1.medium.com/max/1920/1*V3eMOIR0XGCJG1AXhUb0NA.jpeg
Cyber security attacks are nothing new. As long as networks have existed, there have been network-based attacks. As long as secure…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
might be wrong sub but power draw if usb killer?

I'm designing a DIY project and trying to make it resistant to the usb killer, shorts, etc. I only plan on having one type of device plugged into the port which should only draw around 10ma from the usb port. Would the usb killer be able to charge from so little power if I were to limit the power supplied to the usb power rails?

submitted by /u/temmiesayshoi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this game hackable?

Hey I was wondering if this game is hackable? I think it’s on a private server but was curious if anyone knows if there would be a way to get currency on it for free/ hack the mini games to get more payout or something

everskies.com

submitted by /u/moonboo987
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Found strange website when I miss spelt...

I remember it the past some websites from 4chan maybe this is a new one :D

pfs.io miss spelt from ipfs.io.

submitted by /u/Toni1012
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video