Dark Reading: Attacks/Breaches
Hunting for Threats Using Network Traffic Flows

SeclarityIO's NetworkSage platform analyzes network traffic data to identify attacks before they become real problems.

Zap-Scripts - Zed Attack Proxy Scripts For Finding CVEs And Secrets
http://www.kitploit.com/2022/06/zap-scripts-zed-attack-proxy-scripts.html

___________________________
@hacking_Attack
@Hacking_Video

Zed Attack Proxy Scripts (https://www.kitploit.com/search/label/Scripts) for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory (https://www.kitploit.com/search/label/Directory) of the project, the add-on will be placed in the directory build/zapAddOn/bin/.
Usage The easiest way to use this repo in ZAP is to add the directory to the scripts directory in ZAP (under Options -> Scripts). however, you can also build the add on and install it (under File -> Load Addon (https://www.kitploit.com/search/label/Addon) File...). License This software is distributed (https://www.kitploit.com/search/label/Distributed) under the MIT License. Credits The scripts under the active directory are mostly ported from the amazing nuclei-templates (https://github.com/projectdiscovery/nuclei-templates) repository, so huge shoutout to projectdiscovery (https://github.com/projectdiscovery) and the community. secret-finder.js uses regex (https://www.kitploit.com/search/label/Regex) patterns from the awesome gitleaks (https://github.com/zricethezav/gitleaks) project. takeover-finder.js uses patterns from the awesome nuclei-templates (https://github.com/projectdiscovery/nuclei-templates) repository. LEGAL NOTICE THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS. Get Involved Please, send us pull requests!

Download Zap-Scripts (https://github.com/sepehrdaddev/zap-scripts)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I found a GoldMine but got No Gold

https://cdn-images-1.medium.com/max/720/1*2CzUvjt3v_mCUaJTRSrNCA.png
Background:

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Follina: Zero-Day en Office con macros deshabilitadas (actualizado 31/05)

https://cdn-images-1.medium.com/max/1593/0*KRSIJMxlcI9KCXS8
PUBLICADO EN 1 JUNIO, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Zap-Scripts - Zed Attack Proxy Scripts For Finding CVEs And Secrets

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6O4MyYOqUqFTS2rpBr0I9ZLKPPQdTo8uAfiOopgC6ZdH-EGwFR3YGQ8rGudMkcbeBUSetDLmGRvScNGdHTW4raeIM6rLoiHSblxxe0pFFHYiW5WxKKe4aTRMSmBhECoJzhq6ExCguzgThGpMH0oy0orSeckkZtUgVbO3wcvqBwho3mdGv4Eq7DQ49/w400-h343/Zed%20Attack.png
Zed Attack Proxy Scripts for finding CVEs and Secrets.

Building

This project uses Gradle to build the ZAP add-on, simply run:

./gradlew build

in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/.
Usage

The easiest way to use this repo in ZAP is to add the directory to the scripts directory in ZAP (under Options -> Scripts).

however, you can also build the add on and install it (under File -> Load Addon File...).

License

This software is distributed under the MIT License.

Credits

*
The scripts under the activedirectory are mostly ported from the amazing nuclei-templates repository, so huge shoutout to projectdiscovery and the community.

*
secret-finder.jsuses regex patterns from the awesome gitleaks project.

*
takeover-finder.jsuses patterns from the awesome nuclei-templates repository.
LEGAL NOTICE

THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS.

Get Involved

Please, send us pull requests!
Download Zap-Scripts

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to track an IP adress?

Hi! I am trying to find my friend's address so I can send them a gift.

This probably sounds weird or like spam but I cannot ask them.

So does anyone know how to trace an IP address to get an address?

submitted by /u/Spicy_Pepper4925
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advice on how to take down a scam site that's affecting people

I hope I'm not breaking any rules and I apologize in advance but I stumbled upon a Mexican site that's posing as a very big Mexican Apple retailer and stealing from people a lot of money (starting from $500). Is there a safe and easy way to grab their IP/shut them down, anything? They've been operating for more than 2 years apparently.

submitted by /u/Analogkid1984
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Managing Extended Software Supply Chain Risks

Supply chain woes have dominated headlines, but there's another type of supply chain that's also increasingly at risk: the cloud supply chain.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Darktrace's Brianna Leddy on How Ransomware Groups Adapt to New Defenses

In this Tech Talk, Darktrace's Brianna Leddy and Dark Reading's Terry Sweeney discuss ways ransomware groups adapt their activities as enterprise security teams evolve their defenses and controls.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to use Twitter to market your business

https://cdn-images-1.medium.com/max/640/1*AdFxGg2pDqNERfD6OJskIw.jpeg
Use Twitter to build relationships.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Realistic Mission 14

https://cdn-images-1.medium.com/max/600/0*-paUT8fFQVkxZutm.jpg
Alright so this mission unfortunately is broken, I played around for a bit on the website and couldn’t find anything easy to exploit.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video