hacking: security in practice
Dissecting the last version of Conti Ransomware using a step-by-step approach

https://external-preview.redd.it/Pd0AAZO7E2TFYSFx14wiF1TPhgFj3yzSyGTkeQWbK58.jpg?width=640&crop=smart&auto=webp&s=87d839809daac82e66c6e32c3469ba875711f355 submitted by /u/CyberMasterV
[link] [comments]

KitPloit - PenTest Tools!
Cyph - Cryptographically Secure Messaging And Social Networking Service

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEheDH4WDGVXN6p-RM3Pj3qcKfFGIihoKhecLmv4HxhRm_oQ3fhEvKdWv-ey6b2SRQ8E78WNnvdpd4ULNCBB9Rgo_1q_QuWd6_X2ZdMfyWP9jj5XjaG5lBwF1sqaCFBYL-es9krmJ6Za3Ck7V1YDgjrd5L-USf6JiJzryozA2KUk8Ci_BBmAviNCQ2Z-/w640-h640/Cyph-Mobile-Mockup.png
Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use.

Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat and DEF CON — uniquely allows Cyph to solve the major security and usability limitations of conventional solutions.
Commands available to run locally (Node.js and Docker required):

*
npm run serve: Serves a local instance at http://localhost:42002

*
npm run verify: Verifies that the signed production build is reproducible against the local copy of the code
Running any of these commands for the first time will build the Docker image locally, which may take a while.
Cyph is run by founders Ryan Lester and Josh Boehm, former SpaceX engineers and best friends of over 20 years who had spent many all-nighters working closely together on various software projects. Cyph was initially started through the Mach37 Cyber Accelerator, and is currently backed by the Goel Fund and Center for Innovative Technology.

Cyph was a natural project for us to start together, as we’ve always shared an interest in cypherpunk efforts to enhance individual freedom and privacy.

We spent our teens getting into programming; tinkering with Tor, Linux, and OTR encryption; and mining Bitcoin before it was cool. As adults (who regularly handled ITAR-sensitive information at SpaceX), the difficulty of communicating privately online had become a palpable thorn in our side — existing solutions were cumbersome to use, missing basic features, and not really all that secure in practice. The revelations brought to light by Edward Snowden ultimately inspired us to take this upon ourselves.

We knew there could be a better way, so we created Cyph.
Download Cyph

Dark Reading: Attacks/Breaches
CISA to Federal Agencies: Patch VMWare Products Now or Take Them Offline

Last month attackers quickly reverse-engineered VMWare patches to launch RCE attacks. CISA warns it's going to happen again.

Dark Reading: Attacks/Breaches
MITRE Creates Framework for Supply Chain Security

System of Trust includes data-driven metrics for evaluating the integrity of software, services, and suppliers.

Hacking on Medium
Malware “fileless” almacenado en el Event Log de Windows

https://cdn-images-1.medium.com/max/1661/0*QDNnisAKeoLPf_67
PUBLICADO EN 18 MAYO, 2022POR EHACKING

Continue reading on Medium »

https://preview.redd.it/aui6w4m3ja091.jpg?width=640&crop=smart&auto=webp&s=daaf8b52e2be2cd083a0a797f624311c3cb9266b submitted by /u/Johnbob7777777
[link] [comments]

hacking: security in practice
Pondering this same question regarding attacker domain... Has anything changed in nine years? Do bad actors all use compromised servers for logging?

submitted by /u/MintChocolateEnema
[link] [comments]

hacking: security in practice
Anyone want to join a CTF team?

Hello,

I started a group to do CTFs (CTFTime) and help each other "level up." Hacking is more fun with a group. We take anyone who has a willingness to learn. Preferably knows English enough to speak technically. There was a thread on this before but they stopped taking members.

My goal with this is to create a community of people who help each other get good enough to become a serious contender at CTFs. However, some may not want to go all the way competitively and I will respect that.

Edit: This got some traction and our group size is quite large. I can't keep up with comments so if I missed anyone DM me. Probably going to cap invites in 24 hours to keep the group size reasonable.

submitted by /u/Perfect-Chemical
[link] [comments]

hacking: security in practice
Is Kali Linux's "macchanger" reliable?

When trying to MAC Spoof using the macchanger tool, is this process reliable or could it be unmasked?

Similar to for instance when using a VPN and the provider gets contacted in order to provide details about the IP requesting the service, is there a way to unmask the original MAC address when spoofed with the macchanger tool?

In case of not being reliable, are there any better alternatives to this tool?

submitted by /u/psychologicalprowler
[link] [comments]

Advanced Persistent Threat (APT) Malware Samples and Research Papers Collection
https://www.reddit.com/r/redteamsec/comments/ust6bn/advanced_persistent_threat_apt_malware_samples/

submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://cybersochacklabproject.blogspot.com/2022/05/advanced-persistent-threat-apt-malware.html) [comments] (https://www.reddit.com/r/redteamsec/comments/ust6bn/advanced_persistent_threat_apt_malware_samples/)

A pragmatic guide to building your bug bounty program

Part 1: Getting set up, and maintaining your programContinue reading on Airwallex Engineering »
Read more...

A pragmatic guide to building your bug bounty program
https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-4cf0409f5f09?source=rss------bug_bounty-5

Part 1: Getting set up, and maintaining your programContinue reading on Airwallex Engineering » (https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-4cf0409f5f09?source=rss------bug_bounty-5)

Hacking on Medium
Instagram Growth Hacking

https://cdn-images-1.medium.com/max/700/1*-nb2KcU4fqagkt4UJI2ZOQ.png
“New UNDERGROUND PLAYBOOK Showsthe UNKOWN Growth Hacking Secrets

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Signature Based & Behavior Based Detection

https://cdn-images-1.medium.com/max/2600/0*tKxFGxAEpkSMH1jj
Detecting malware is a crucial step in keeping individuals/organizations and their devices/data safe. To monitor networks organizations…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video