Dark Reading: Attacks/Breaches
(ISC)² Unveils 100K in the UK Scheme to Expand the UK Cybersecurity Workforce with 100,000 Free Entry-Level Certification Exams and Education Opportunities

Multi-million-pound commitment will empower everyone from recent graduates to career changers to IT professionals in the UK to begin a successful career in cybersecurity.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
FBI: E-Tailers, Beware Web Injections for Scraping Credit-Card Data, Backdoors

Law enforcement is warning about a wave of Web injection attacks on US online retailers that are successfully stealing credit-card information from online checkout pages.

Hacking on Medium
Nueva variante Sysrv Botnet secuestrando Windows y Linux con Crypto Miners

https://cdn-images-1.medium.com/max/1590/0*9i25KlVekPO0COwQ
PUBLICADO EN 17 MAYO, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ya está disponible Kali Linux 2022.2, con mejoras WSL y con 10 nuevas herramientas

https://cdn-images-1.medium.com/max/1200/0*HDbhukuMgqyP8gFJ.jpg
PUBLICADO EN 17 MAYO, 2022 POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¡Cuidado! Piratas informáticos comienzan a explotar la reciente vulnerabilidad RCE de los…

https://cdn-images-1.medium.com/max/1045/0*F1RWDitdiw5RoKpQ
PUBLICADO EN 17 MAYO, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Es posible perder mi NFT?

https://cdn-images-1.medium.com/max/600/1*FE2kE-wWp6D5wjd69Bidyw.png
Como ya se ha mencionado anteriormente, un NFT es un activo digital que no puede consumirse o sustituirse, es una pieza creativa (imagen…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mindgames — TryHackMe WriteUp

https://cdn-images-1.medium.com/max/1920/1*FatIrObnkF3G8xaeOrmn9g.jpeg
Just a terrible idea…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Pentesting beginner
https://www.reddit.com/r/Pentesting/comments/urx0lt/pentesting_beginner/

What and where is the best place to start learning about pentesting? Good sources, sites and materials are welcome, thanks! submitted by /u/AnonBruhPsyched (https://www.reddit.com/user/AnonBruhPsyched)
[link] (https://www.reddit.com/r/Pentesting/comments/urx0lt/pentesting_beginner/) [comments] (https://www.reddit.com/r/Pentesting/comments/urx0lt/pentesting_beginner/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Lots of cirt.net/rfiinc.txt request in log

What is a rfiinc.txt file? Some places say it’s a request for information, but I’m unsure any pointers?

submitted by /u/fgtethancx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Burp Suite Pro the best web-app pen testing tool?

I've been using Burp Suite for years now but a couple of other applications have caught my eye. I was wondering what others might be utilizing for their web-app pentests/vuln scans. How are Acunetix, Tenable Nessus, Breachlock, etc?

What are your preferred tools for reconnaissance, scanning for directories/pages/files, then tools for exploitation?

Open to any paid tools or free tools I can load into ParrotOS. Thanks.

submitted by /u/live2shitforced2wipe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Grafiki - Threat Hunting Tool About Sysmon And Graphs

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTkX6i7WAPEb_waHtgeN77aVwDcvBUd6vIjvuE-JyfCveLYnMSk4xxyu8asOhkXylKGwzKfCNxf-wiI7JTKrGyrWH2zleJ-WA_QCpGJKNt-D7MfxGjWp0aVtsjt4qG6frt0bYtPDLI319nwVw8-6yPHIg70AzDrEblcr9OdCVzzQ45zXJx8Esm2Yt6/w640-h470/Grafiki_7_example1.png Grafiki is a Django project about Sysmon and graphs, for the time being.
In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it.
This is a proof of concept, the code was not debugged jet but maybe could be useful for someone, I will improve it.
This project started such as EVTX parser to SQL database and this maybe it is the core of the project. Goals* Parse Sysmon events from EVTX files and from URL to relational database.
* Parse Elastic Sysmon events to relational database.
* Easy Elastic filters creation.
* Create graphs from database using Vis.js.
* Offer filters to easy work with graphs.
* Show events sequentially.
* More Current Status: Pre-alphaThe project is not mature enough, although it works, test plan is not defined jet.
Any opinion, bug found, improve request ... will be welcome. Docs* User manual [To-Do] License: GPL-3.0Author* Luis F. Monge @Lukky86 Acknowledgments* Roberto Rodríguez (HELK & Mordor Projects) Cyb3rWard0g
* Samir Bousseaden (EVTX Samples) SBousseaden Installationgit clone https://github.com/lucky-luk3/Grafiki.git
cd Grafiki
chmod +x setup.sh
sudo ./setup.sh
--- wait ---
cd grafiki
python3 manage.py runserverIn your browser go to http://127.0.0.1:8000/Hunt, learn and enjoy! To-Do* Add events 2,6,8,15,23.
* In memory PostgreSQL database .
* Integration with Elastalert. InformationThis application can process two types of files.

* Sysmon EVTX files from disk or from a URL.
* Sysmon Filebeat event files from disk or from URL. Also, this application has two types of processing:
* Normal process
* Simple process In normal process, each process generates one node in graph view, threats are represented in the graph and also it is represented a computer node with all his related processes .
In simple process, processes are grouped by name and threats are not represented in event 8 for example.
It's important keep this in mind because even simple view sometimes could be useful, other times could be confusing, for example when you has events from more than one computer. Data schemahttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMvH85fkEaCddjtEueFMp7YkbqVhXD5jDdDNRToRICH5nIlOSducKmQzUBKpPMP5XOpLOLzTdABACvjBRf9VSZM1iBrzbp_if7UJs1weFTPgnjxfPn0WsM3-W5dRqHgGcNJeIn8z0tQ-wMREJ0LuIlzuTgDlfh2SIrQZn4-Bf8JcFnsJf_6KAt-Fm5/w640-h190/Grafiki_2_database.png File ListIn this page, you can upload evtx files or elastic event files and process it. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXzZ_e3sihg9WiuHY6Qr7JRFRMel-jx7mo7lvHINJAbS3jMIzssJ9Zc33tM5FVbX2pdKcwmnpMJxExwi8Xwdyr3eqf8tFKpS0ZOe_c_MoEF9vj9ImXrW9UtrGgaTppOu8RH8FS2Mu8vYJAqGCED2k-L6pwN7zkt7KKFX8wETjIeRRT39_AYm9MRbxG/w640-h370/Grafiki_3_file-list.png ExamplesThis page is useful for create a library of online samples files.
When you create an example, you put the url to the file and when you process it, the application download event file and process it. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMRrFl2Ovr4_dh5UnDNyg07E53dkfxWsErq5JNxLdWmgmToEu3awTBsUuZS2MqOHNcH_IuxYBmUdn1lgdjIXKg4Mxd4ipNDirSvg0IZ_0RcPrUo5tljHH65SIZFMhIQK7RDVH8XnvgyFtfYyBaKbohXJ-6au43GTAd5nF5tw3A_6wAhUt5R68JR5ek/w640-h448/Grafiki_4_example-list.png ElasticIn this page, you can create searches to you Elastic instance and create a graph of the result. You can create filters about:

* Hostname of host ma[...]

___________________________
@hacking_Attack
@Hacking_Video

chine.
* Sysmon event ID
* SourceIP
* DestinationIP
* DestinationIP Type (Internal or External)
* UserAccount
* Process Name All this filters can be inclusive or exclusive and can be contain group of values separated by commas.
You can create more than one filter and all of created filters uses "AND" such logical operator between each other.
In this page you can include Powershell Scripting Logging events in the results. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiNGXTebUV17YSs0EDJeVhNsaILWBQluGEEEYnVDd39Dx46SH85jm3qjuChUVQXEWTph8ygrpkaFT8FFPG2XOgHSZei_k1zVPJN39U1aoqyE2MkDu4l4kl1zLwoPIhPkiZLTAALj4GTK4CS4VQcM-6PVogRno-xJDyRQn9De_0wlRf-1UQnXb7fWvd/w640-h260/Grafiki_5_elastic.png GraphGraph page is the core of this application and the researching interface of it.
In the other pages you select your data and this pages send you to graph page, if you go directly to graph page, nothing will be there or the last data searched for you.
In this page are two tabs, one for sysmon and other for Powershell events.
There are two types of elements, nodes and edges. Nodes represent entities such process, file or registry key and edges represent actions such as create, delete or connect. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjxS37naBP0zH50AYh6gqR6A_VlAMOHifWoWgHic7SGc_s5-gpL8D2F3RlUjziSRp76bCYC_RIeYX8RIw6USEcrUanPRmmrFX_gKz5_fM8yuWqfwsDKll8P_kYt9U5Cnf-3rvgMv44M1PNphqqM7WGBSiKUoHLGgslMzF9MxJJMKIRQt_2bYTI6xXT/w640-h464/Grafiki_6_gif20sec.gif SysmonWe are in the core.
This part use the information in the database to create graphs about the events analyzed. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfGZQPjNk4vLmgmFrYkNapEtOlYTodz-aBOCma9hPvXiaOgIxQkm3zUv1dbeMGTVh4lRZreSBz0vtu0IHLXLljZ6QBag33iwV2h5ijyFTpMxAcBMp22dZU7AAiC1YIVSdWhHD7vN6_jyHhTR0qRsh-HNwJblNDG9Gg0mu0067QpicUB8zH_Kg9O9ua/w640-h470/Grafiki_7_example1.png You can navigate in the graph, watching about process creation, named pipes connected ... but there is usually too much information to work comfortably.
Inside the tab are a hidden section about graph filters. Filtershttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyu2edlHIYj8WTOQKNVj4n4P4iBFCQimAQv_ZwGcH7eTZc3qf7VTYhE6QDK-cH9ItuqC-q8oB0fDGsVeE0plI4q6U4CEIDg-huhgRwTQtbttRI0IWrZF72Wm4P8bCdxuVmLRRte3LrWZ5592ZSGZdXyQav-Ot7IDqT-cJh1Ei5F49cwGT_JfJlzNhN/w640-h346/Grafiki_8_filters.png In this area you can work with the graph filtering data.
You can filter nodes by this entities:

* Computer
* Process
* Threat
* Connection (IP)
* File
* Pipe
* Registry Key
* DNS Query
* DNS Resolution

You can filter process nodes also by:

* Process integrity
* Process session
* User

Also, you can filter edges by this actions:

* Create
* Finish
* Access
* Change
* Delete
* Rename
* Connect
* Owned (belongs to)
* Load AnimationsOne great feature is create animations about the data in the graph, this is very useful for example in Parent PID Spoofing or when some user in a computer execute commands remotely. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRZSHaNA34uCsmhfjup3C1uVXNiFRIAbNc88W6mM93kTzvsLBZgtPbaJ557V4qBAGPFys5H7FFK00wcQCgOz9jY-5Cypt2vCWItrNocscNYXMSGRkuO1Kxhmiff1k-2mPJgFPu7RTroNrQgaZZgdyvWhodPkdvrX9Wti7cqvbFjMbDEEoegiJ4SIjp/w640-h464/Grafiki_9_20secani.gif Delete groupsWhen graph has too much information, is possible delete one node, one edge, a group of nodes or a group of nodes recursively.
Delete group of notes works selecting one node and the application will delete all de nodes that his parent is the selected node.
Delete group recursively works also selecting a node but application will go through nodes deleting until finish this tree branch. If branch has a lot of information, this will take a long time. Graph SettingsOn bottom of the screen it's possible to change physics of the graph.
When graph has a lot of information could be useful disable physics in order to stabilize the graph.
You can play whit physics, it's funny. [...]

___________________________
@hacking_Attack
@Hacking_Video

Powershell loggingIn the Powershell tab is possible analyze powershell commands.
Commands are showed in an accordion and inside each row, if command contain a base64 command, it will be decoded and parsed.
You can search in all events for encoded o decoded part of the command. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjucTNgF_QmZp4P5_3VhPxKV2wWNv8pvOHOiflN28cTExf-tmtPQ4aVXKwaWnOO9IvnopB6JSWWRCK3D3jM1-vNCkPIjye8YGLRJNmZtO2p7pDHtk3beyPLs5z2GUoKRM9MPDcjGw4iQ9vqpJBF5KYhTC2T5ZQeGlt8tIsWNYsN-Lq3a_qvkwJWVbQ/w640-h406/Grafiki_10_powershell.png ExamplesCreate process treehttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwcXl0JeSy0OWETDzh5P-nO5lsF2mvgIauhHrwa8JuOl-YQV33hoQNR_03yfyJem0rUoQJu3nO5koXTQ6hLaWOVvOx5JbNz6_g7cpDpo5v5xwvzYpHuEuC_4Xk59MWqE0J5S9zw26hXa8bmmmp2MKc1TT8qcqYoSnwc-Y065vrp2X053JHIvlFc_kV/w640-h560/Grafiki_11_create-proccess.jpeg Create remote threadhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUe5KzgHbj3kGK7mxesltr-kXEh9v7wiVCiT2Lz7JU-DC9Ybx5W-629wXpUGqWbiZhBDf52W_1Vg2DrDW4JqPEFH0fV5V7M-OeriwET0QY0UoIutZRm1wOVeE6opaI5Afwh9nJ5JyX5YTggqr_u_X49o2Yp-lVqqQtI1RBqbpXuhpfyoBTOGFq3QmF/w640-h556/Grafiki_12_create-remote-thread.jpeg Named pipes connectionshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXMEGA7NCgREGiKWmZNTvv9TmlfAkKbXyNbLDP6KXjrlxcA1FKK0WBhVQrrgLdKplWuThJy4J3AUOKiMn-SgQyAbwNm6sPyJtAyp2A31WvfIiqZLwbI5jJ_aJmJvTkdgJlImVRfu_bw5giIyF5Rg3GRFJFFzVwBoAiD0jZgVQG5p1oZJSkBhmopXCg/w640-h432/Grafiki_13_connect-pipe.jpeg Computer network connectionshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3iTAQwhHmxbNkz0v3dbfqhdj0ZZDFE04qRk5phaQ6bEAYnk5lQevQnqYcyvjG25gEVlPm1AKFnmErPxgNeQJxDXkociNmV8RuCtB-t3aeZBfOpUvnfHjhOabM5rl1EXADRkSmcbvUs4hF1hz5sO_KCM2YBO9veYaZisjNfUjAbgrZbDcdK5P_OuJR/w640-h420/Grafiki_14_computer-connections.jpeg Empire WMIC add userhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzZ7hGRpTkbefocexhloE1s91Owg_tgq4WiESb-36Y6Gzxpwg1EoZaaZSVld7JmRz6BjM-FhF6Wx6ZMdnjTvStkzproE94jnuz6uawH8n2TUJsk-m3noNmvFCV7iD8KKw-EzAjq-Kfy5UA_AwuwrKkxd56IgJm4nBWeNqmo_n2k0GqFyvJpV8nJH3x/w640-h480/Grafiki_15_empire_wmic_add_user.jpeg Download Grafiki

___________________________
@hacking_Attack
@Hacking_Video

BackendTwo — HackTheBox — Writeup
https://0x1rootjkqsta.medium.com/backendtwo-hackthebox-writeup-52263d20d6e2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video