hacking: security in practice
Weird guy gave me an USB stick.

How can I safely see what's inside of it? Thank you guys

submitted by /u/flakesareshiny
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Vaas - Verdict-as-a-Service SDKs: Analyze Files For Malicious Content

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQD3rO3apg0u4HSI2vdDXETMkLY14Yv9R9RWQOB1FqFnGobwNpIWo8IW5wqq2_Drrtq6Fx8DFHkBxzN2OhveeNSkXQFgJwG6sxtAsRBKxRYP8Cz7J3Nq7TG-oRVM_DA3ahRxZ7EsJFoAlugABjV5vNxCu5v0kri3rWWjCgb-3iHKxKySJxxRDibBXG/w640-h360/vaas_1_gscan.gif Verdict-as-a-Service (VaaS) is a service that provides a platform for scanning files for malware and other threats. It allows easy integration in your application. With a few lines of code, you can start scanning files for malware. ATTENTION: All SDKs are currently prototypes and under heavy construction! Integration of Malware DetectionEasily integrate malware detection into any kind of application, service or platform.

Create a command line scanner to find malware with a few lines of code: Example https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQD3rO3apg0u4HSI2vdDXETMkLY14Yv9R9RWQOB1FqFnGobwNpIWo8IW5wqq2_Drrtq6Fx8DFHkBxzN2OhveeNSkXQFgJwG6sxtAsRBKxRYP8Cz7J3Nq7TG-oRVM_DA3ahRxZ7EsJFoAlugABjV5vNxCu5v0kri3rWWjCgb-3iHKxKySJxxRDibBXG/w640-h360/vaas_1_gscan.gif Create a KDE Dolphin plugin to scan for malicious content with a few lines of code: Example https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggaYhnU7BE6c9wOkhLt0bOjgqOKFk-86hBnpJidAFZrSkeWUM9A2lybRdzvO-YZEWlddB8LZ86mLfRbtkNVtfSipyd3TCxGfgOJB3K_5RO221o6K2qAqFuXefMilOw6knpMsgFvgG_hNwMY50P30yElnM21S2odz5AGseen6kEqqMQ2OknX1UsyR1w/w640-h360/vaas_2_dolphin_plugin.gif Create a WordPress plugin that scans all file uploads for malware with a few lines of code: Example https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE_l56nI1o2Mu-_2VoHglW9_Hcl-MIPZbC8QM8_c11zoN0n8T_4qAUZV6lPawM-ApcznMZreaGc36OBBA_oFl_6aIYgIVPY8en0-6qnWqt4DsK11oafLH9Qi12T3FFRvnlQ8Qft_X5DGVMI5NRwYTOfqbL3ilVhICK4gMCSURA-OyQSzn0XuIsZw_g/w640-h294/vaas_3_wordpress.gif Create a Discord bot that scans and deletes malicious files uploaded on your Discord server with few lines of code: Example https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp0pxAcawmp31KrZxs99r3l_uQ3lIiyOf_-6WfenN9ezx9oFLgUi8f8gY9x6_fqL_D9OpFxMz8MKbVR7fnGYErUvZs8PtX6NMd7cqXWHDxzNMc09X2_611n9yLlqt9nJvZH5qMqF-7RJL3wbbsemc9dorXlu0tmNCwIHA9SjzKVhw_ke8Mupo2Qe8b/w640-h188/vaas_4_discord_bot.gif I'm interested in VaaSYou need credentials to use the service in your application. If you are interested in using VaaS, please contact us. SDKsAt the moment SDKs for Rust, Java, Typescript and PHP are available.
Functionality Rust Java PHP TypeScript Check SHA256
✅

✅

✅

✅
Check SHA256 list
✅

❌

❌

✅
Check file
✅

✅

✅

✅
Check file list
✅

❌

❌

✅ DocumentationDocumentation for the SDKs is available in the corresponding SDK folder.

* Rust SDK, Examples
* Java SDK
* PHP SDK, Examples
* TypeScript SDK Planned SDKsThe following SDKs are planned but not yet available: Swift and Perl. If you need SDKs for other languages, please create an issue or contribute an SDK with a pull request. Download Vaas

___________________________
@hacking_Attack
@Hacking_Video

CLV Wallet Bug Bounty Campaign
https://medium.com/@clv_org/clv-wallet-bug-bounty-campaign-6bcbf11845f8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Reward Pool of 100,000 CLV!Continue reading on Medium » (https://medium.com/@clv_org/clv-wallet-bug-bounty-campaign-6bcbf11845f8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

In hot pursuit of ‘cryware’: Defending hot wallets from attacks
https://www.reddit.com/r/redteamsec/comments/urq4d1/in_hot_pursuit_of_cryware_defending_hot_wallets/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/CrywareAttacks) [comments] (https://www.reddit.com/r/redteamsec/comments/urq4d1/in_hot_pursuit_of_cryware_defending_hot_wallets/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Mobile Networks Have Become a Front in the Battle for Ukraine

Since 2014's annexation of Crimea, Ukrainian mobile operators have taken multiple, proactive steps to defend networks in the country and ensure their resilience.

Dark Reading: Attacks/Breaches
Bitdefender Launches Identity Theft Protection Service for U.S. Consumers

New offering provides credit and financial monitoring along with identity protection and restoration.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ericom’s New ZTEdge Web Application Isolation Addresses Security Concerns Associated With Third-Party Contractor Application Access

Enables organizations to provide simple, secure access to the private and public cloud or Web-based corporate apps that workers using unmanaged devices need for their work.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
YouMail Launches YouMail Protective Services for Carriers and Enterprises

Protect enterprises from the harm of unwanted voice-based phishing perpetrated by bad actors.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Cloud Aims to Share Its Vetted Open Source Ecosystem

The online giant analyzes, patches, and maintains its own versions of open source software, and now the company plans to give others access to its libraries and components as a subscription.

Dark Reading: Attacks/Breaches
Qualys Adds Custom Assessment and Remediation to Its Cloud Platform

Provides security architects with access to custom scripts that can be natively integrated with other Qualys solutions.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Barracuda Expands Cloud-Native SASE Platform to Protect Hybrid Cloud Deployments

Expansion includes new capabilities for hybrid deployment models and industrial Internet of things (IIoT) environments.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Local Government's Guide to Minimizing the Risk of a Cyberattack

Most local leaders lack cybersecurity resources so they don't know where their weaknesses are and which areas threat actors are most likely to target, with little focus or understanding of risk.

Nighthawk 0.2 - Catch Us If you Can - @MDSecLabs
https://www.reddit.com/r/redteamsec/comments/urr1gj/nighthawk_02_catch_us_if_you_can_mdseclabs/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mdsec.co.uk/2022/05/nighthawk-0-2-catch-us-if-you-can/) [comments] (https://www.reddit.com/r/redteamsec/comments/urr1gj/nighthawk_02_catch_us_if_you_can_mdseclabs/)

___________________________
@hacking_Attack
@Hacking_Video