hacking: security in practice
Pondering this same question regarding attacker domain... Has anything changed in nine years? Do bad actors all use compromised servers for logging?

submitted by /u/MintChocolateEnema
[link] [comments]

hacking: security in practice
Anyone want to join a CTF team?

Hello,

I started a group to do CTFs (CTFTime) and help each other "level up." Hacking is more fun with a group. We take anyone who has a willingness to learn. Preferably knows English enough to speak technically. There was a thread on this before but they stopped taking members.

My goal with this is to create a community of people who help each other get good enough to become a serious contender at CTFs. However, some may not want to go all the way competitively and I will respect that.

Edit: This got some traction and our group size is quite large. I can't keep up with comments so if I missed anyone DM me. Probably going to cap invites in 24 hours to keep the group size reasonable.

submitted by /u/Perfect-Chemical
[link] [comments]

hacking: security in practice
Is Kali Linux's "macchanger" reliable?

When trying to MAC Spoof using the macchanger tool, is this process reliable or could it be unmasked?

Similar to for instance when using a VPN and the provider gets contacted in order to provide details about the IP requesting the service, is there a way to unmask the original MAC address when spoofed with the macchanger tool?

In case of not being reliable, are there any better alternatives to this tool?

submitted by /u/psychologicalprowler
[link] [comments]

Advanced Persistent Threat (APT) Malware Samples and Research Papers Collection
https://www.reddit.com/r/redteamsec/comments/ust6bn/advanced_persistent_threat_apt_malware_samples/

submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://cybersochacklabproject.blogspot.com/2022/05/advanced-persistent-threat-apt-malware.html) [comments] (https://www.reddit.com/r/redteamsec/comments/ust6bn/advanced_persistent_threat_apt_malware_samples/)

A pragmatic guide to building your bug bounty program

Part 1: Getting set up, and maintaining your programContinue reading on Airwallex Engineering »
Read more...

A pragmatic guide to building your bug bounty program
https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-4cf0409f5f09?source=rss------bug_bounty-5

Part 1: Getting set up, and maintaining your programContinue reading on Airwallex Engineering » (https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-4cf0409f5f09?source=rss------bug_bounty-5)

Hacking on Medium
Instagram Growth Hacking

https://cdn-images-1.medium.com/max/700/1*-nb2KcU4fqagkt4UJI2ZOQ.png
“New UNDERGROUND PLAYBOOK Showsthe UNKOWN Growth Hacking Secrets

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Signature Based & Behavior Based Detection

https://cdn-images-1.medium.com/max/2600/0*tKxFGxAEpkSMH1jj
Detecting malware is a crucial step in keeping individuals/organizations and their devices/data safe. To monitor networks organizations…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is your workflow like when reversing and exploiting complex programs or hard ctfs?

Hello everyone!

​

How do you approach the problem of reverse engineering complex(and or big) programs and solving hard CTFs? Do you have a checklist you follow? Which steps (in order) do you take? Do you take notes as you go along?

​

Do you impose additional constraints upon yourself(i.e: I have to finish this task by this date etc)? If so why?

What's in your "tool box"(i.e ida, gdb etc etc)? What important tips(besides the obvious solve as many ctfs as possible) would you give to someone like myself who is trying to get better at reversing and exploitation?

submitted by /u/zingochan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can't we fix the PDF issue?

I keep reading about emails with malicious pdf attached. While I do understand that people should be literated enough to know not to open them, it seems rather stupid to me that a single click and boom your pc is infected. Why is it so easy? Why in the first place a PDF can run a script? Can't PDF readers prevent it from communicating to the world? AFAIK it's not an exploit on the reader itself, it's just how PDFs work. Then why can't we patch the standard? PDF2 of PDFsecure? I am sure I am making it too easy, that's why I asked. Thanks!!

submitted by /u/FrAxl93
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Here's the video I made about the Win2k machine

https://external-preview.redd.it/rv7lUViEK_xX20zkQ7DV6WqieoHGBGQ1pHBJfKjaSUU.jpg?width=320&crop=smart&auto=webp&s=dbe73a202ae2795bb7d36b1fb9420db9e5824f75 submitted by /u/fsturmat
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I Exploited 4 Vulnerabilities In A Website
https://medium.com/@the_harvester/how-i-exploited-4-vulnerabilities-in-a-website-3be6b28259cc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This blog is only for informational purpose only so that emerging bug hunters could follow similar methodology and responsibly disclose…Continue reading on Medium » (https://medium.com/@the_harvester/how-i-exploited-4-vulnerabilities-in-a-website-3be6b28259cc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Exploited 4 Vulnerabilities In A Website

This blog is only for informational purpose only so that emerging bug hunters could follow similar methodology and responsibly disclose…Continue reading on Medium »
Read more...