Dark Reading: Attacks/Breaches
Netskope Acquires WootCloud, Extending Zero Trust Capabilities to Enterprise IoT

Contextual Intelligence derived with machine learning helps customers identify, assess and remediate threats from IoT devices on their networks, achieving full visibility and control.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Feds Seize Domains Dealing Stolen Personal Data

WeLeakInfo.to and two related domains let users search data stolen in more than 10,000 different breaches.

Dark Reading: Attacks/Breaches
12K Misconfigured Elasticsearch Buckets Ravaged by Extortionists

The cloud instances were left open to the public Internet with no authentication, allowing attackers to wipe the data.

Dark Reading: Attacks/Breaches
Darktrace's David Masson on What Attacks on Critical Infrastructure Look Like

In this Tech Talk, Darktrace's David Masson and Dark Reading's Terry Sweeney discuss the rise of destructive attacks against critical infrastructure.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Netenrich Debuts Resolution Intelligence Secure Digital Operations Platform at RSA 2022

New operational analytics and AI/ML platform drives contextual intelligence and prioritized actions to anticipate risky behaviors, disrupt threats and insure business resilience.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
NetSPI's New Breach and Attack Simulation Enhancements Help Organizations Achieve Behavior-Based Threat Detection

Organizations leverage the platform-driven, human-delivered service to measure and continuously improve the efficacy of detective controls and MSSP coverage.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
FluBot Android Malware Operation Disrupted, Infrastructure Seized

Security researchers have described the malware as among the fastest-spreading mobile threats in recent years.

Dark Reading: Attacks/Breaches
Hunting for Threats Using Network Traffic Flows

SeclarityIO's NetworkSage platform analyzes network traffic data to identify attacks before they become real problems.

Zap-Scripts - Zed Attack Proxy Scripts For Finding CVEs And Secrets
http://www.kitploit.com/2022/06/zap-scripts-zed-attack-proxy-scripts.html

___________________________
@hacking_Attack
@Hacking_Video

Zed Attack Proxy Scripts (https://www.kitploit.com/search/label/Scripts) for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory (https://www.kitploit.com/search/label/Directory) of the project, the add-on will be placed in the directory build/zapAddOn/bin/.
Usage The easiest way to use this repo in ZAP is to add the directory to the scripts directory in ZAP (under Options -> Scripts). however, you can also build the add on and install it (under File -> Load Addon (https://www.kitploit.com/search/label/Addon) File...). License This software is distributed (https://www.kitploit.com/search/label/Distributed) under the MIT License. Credits The scripts under the active directory are mostly ported from the amazing nuclei-templates (https://github.com/projectdiscovery/nuclei-templates) repository, so huge shoutout to projectdiscovery (https://github.com/projectdiscovery) and the community. secret-finder.js uses regex (https://www.kitploit.com/search/label/Regex) patterns from the awesome gitleaks (https://github.com/zricethezav/gitleaks) project. takeover-finder.js uses patterns from the awesome nuclei-templates (https://github.com/projectdiscovery/nuclei-templates) repository. LEGAL NOTICE THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS. Get Involved Please, send us pull requests!

Download Zap-Scripts (https://github.com/sepehrdaddev/zap-scripts)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I found a GoldMine but got No Gold

https://cdn-images-1.medium.com/max/720/1*2CzUvjt3v_mCUaJTRSrNCA.png
Background:

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Follina: Zero-Day en Office con macros deshabilitadas (actualizado 31/05)

https://cdn-images-1.medium.com/max/1593/0*KRSIJMxlcI9KCXS8
PUBLICADO EN 1 JUNIO, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Zap-Scripts - Zed Attack Proxy Scripts For Finding CVEs And Secrets

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6O4MyYOqUqFTS2rpBr0I9ZLKPPQdTo8uAfiOopgC6ZdH-EGwFR3YGQ8rGudMkcbeBUSetDLmGRvScNGdHTW4raeIM6rLoiHSblxxe0pFFHYiW5WxKKe4aTRMSmBhECoJzhq6ExCguzgThGpMH0oy0orSeckkZtUgVbO3wcvqBwho3mdGv4Eq7DQ49/w400-h343/Zed%20Attack.png
Zed Attack Proxy Scripts for finding CVEs and Secrets.

Building

This project uses Gradle to build the ZAP add-on, simply run:

./gradlew build

in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/.
Usage

The easiest way to use this repo in ZAP is to add the directory to the scripts directory in ZAP (under Options -> Scripts).

however, you can also build the add on and install it (under File -> Load Addon File...).

License

This software is distributed under the MIT License.

Credits

*
The scripts under the activedirectory are mostly ported from the amazing nuclei-templates repository, so huge shoutout to projectdiscovery and the community.

*
secret-finder.jsuses regex patterns from the awesome gitleaks project.

*
takeover-finder.jsuses patterns from the awesome nuclei-templates repository.
LEGAL NOTICE

THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS.

Get Involved

Please, send us pull requests!
Download Zap-Scripts

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to track an IP adress?

Hi! I am trying to find my friend's address so I can send them a gift.

This probably sounds weird or like spam but I cannot ask them.

So does anyone know how to trace an IP address to get an address?

submitted by /u/Spicy_Pepper4925
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video