hacking: security in practice
Could someone spoof my IP and commit fraud?

So, I just had the most terrifying experience. Two FBI agents came to my apartment and said that someone was using my IP (and asked if it was me) to commit fraud with Economic Impact Disaster Loans (EIDL). Whether you believe me or not, it was definitely not me.

How easy would it be for someone to take my IP, spoof it (hopefully this is the right terminology) and use it commit financial fraud? I know I didn't do anything, but my anxiety is through the roof. I've definitely visited some shady streaming sites (I need my shows), but my malware/virus scanners aren't detecting anything weird on my computer.

submitted by /u/Rainy_Day_Archivist
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Trying to gain Internet access at work - Fully blocked

submitted by /u/Temporary-Bit-5448
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does BEEF attack a browser or browser session?

Say use clicks on link. If it then redirects to Gmail obviously it will arose suspicions, but if the Gmail page only pops up when the user opens the browser themselves, they would be much more likely to open it.

submitted by /u/bee4534
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What software do hackers use?

Hello subreddits! I had a question: what programming language do hackers use (c +, phyton and so on.)

​

This question has probably been asked here 1000 times. sry;D

submitted by /u/iapplemac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
BirDuster - A Multi Threaded Python Script Designed To Brute Force Directories And Files Names On Webservers

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXDsAeqap8mk8vDVDaPxCPEWKXYDHmU4RWURRLtQhXX8z2Smf3UcMJbM_tA1Dqn3wtfTXaVF9czzHgwjj55scvPVWr5-iigaLmcJQiIB5PmunfACsGFweoEUwnvVlBmAqLa1VE5AzdF5SnUndkGFrMG5E7_rz06VPpLXJaXe883t8I8Yyx3JU5gLC8/w640-h416/BirDuster.png
BirDusteris a Python based knockoff of the original DirBuster.

BirDusteris a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within.
Installation

Use PIP: pip3 install --user BirDuster

Clone source:

git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install --user -r requirements.txt
python3 BirDuster.py --help

Usage

BirDusterhas the following flags and options (which you can see with the -hflag):

* -h/--help: Show help and exit.
* -v,-vv,-vvv/--verbosity: Verbosity level.
* -p/--port: Port to use while dirbusting. Default 80/443.
* -P/--pfile: If you want to test several ports just write them to a file with newlines.
* -t/--threads: Amount of concurrent threads. Default is 15.
* -o/--output: Output CSV of responses. Default is domain_output.csv.
* -l/--dlist: Directory list file. Default is dir_list.txt.
* -w/--writereponse: Will write HTTP/S responses to files. Default is False.
* -i/--ignorecertificate: Ignore SSL certificate errors. Default is False.
* -u/--useragent: User-Agent to use. Default is random user-agent.
* --ssl: Use SSL or not. -iflag will automatically turn on SSL.
* --timeout: Change default socket timeout. Default is 3 seconds.

usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [--ssl]
[--timeout TIMEOUT]
domain

positional arguments:
domain domain or host to buster
Download BirDuster
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

[case study#1] IDOR vulnerability allows access to user’s personal data

What is IDOR?Continue reading on Medium »
Read more...

[case study#1] IDOR vulnerability allows access to user’s personal data
https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is IDOR?Continue reading on Medium » (https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
50% of Orgs Rely on Email to Manage Security

Even with dedicated identity management tools at their disposal, many companies — smaller ones especially — are sticking with email and spreadsheets for handling permissions.

Dark Reading: Attacks/Breaches
RF Technologies Releases Safe Place Staff Protection for Healthcare Settings

RFT is expanding the Safe Place hospital market security system to include staff protection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

MDR Sentinel expands TorchLight’s leading managed detection and response (MDR) services with turnkey SIEM and SOAR capabilities from Microsoft; TorchLight also announces it attains elite Microsoft Gold Partner Status

___________________________
@hacking_Attack
@Hacking_Video

GitHub - socket-toolkit (Basic and in early stages of development, pull requests are encouraged!)
https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/haydendevs (https://www.reddit.com/user/haydendevs)
[link] (https://github.com/haydenzeller/socket-toolkit) [comments] (https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TLDR — How to Get Out of Work by Hijacking the Gmail App at Work

https://cdn-images-1.medium.com/max/2600/0*H1xdO5KcmNa--YQ2
Or tell your boss you’ll implement a fix for the StrandHogg vulnerability once Google does it themselves

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse Social Media Account Lookup

Hey, I was just wondering if anyone knows of an effective reverse account lookup for social media. I have looked around and most sites have paywalls or are scams. I don't mind paying for a services, but I wasn't to be sure to be paying for the best option.

Sorry if there is already a post about this. I looked at this the following post but most of the sites listed here are no longer up. https://www.reddit.com/r/catfish/comments/ibalyt/are_there_any_search_engines_that_search_social/

Thanks in advance!

submitted by /u/primitiveproponent
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video