No but it helpsContinue reading on Medium » (https://thexssrat.medium.com/burp-suite-do-i-need-the-professional-edition-bf8c87ce236e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Burp Suite: Do I need the professional edition?

No but it helpsContinue reading on Medium »
Read more...

hacking: security in practice
How to access GPT3 without university or professional organisation membership

I think it’s probably the best one to talk to about the robots…. unless anyone here’s been studying what they’re doing lately

submitted by /u/imnsomiak
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Share your fav blogs

Browsing Reddit to find crispy and interesting blog posts is really cool but sometimes it is also a good thing to have favorite blogs that you are never disappointed with. And one good thing with knowledge is that we get rich by sharing it. So don’t hesitate to share some of your fav blogs and add a short description

I will give the example: - Thinkloveshare: many different things, develop tools for ctf etc -cryptology.net: High level cryptology articles (sometimes for beginners, sometimes really advanced. Especially about zero knowledge proof) - portswigger research blog: a classic when we talk about web security - bin3xish477: small & interesting pentest article (medium blog) - mrd0x: interesting and innovative web security articles about initial access and phishing - sector35: great blog for all OSINT stuff

submitted by /u/cryptaureau
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for software that would allow running programs in background on windows from android phone

Installing server software on windows is not a problem as this is a controlled environment, not meant to be secretly hacked. Does anyone have a good suggestion? Not looking for remote desktop or anything like that.

submitted by /u/cmcraeslo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Actively Exploited Atlassian Zero-Day Bug Allows Full System Takeover

An remote code execution (RCE) vulnerability in all versions of the popular Confluence collaboration platform can be abused in credential harvesting, cyber espionage, and network backdoor attacks.

Dark Reading: Attacks/Breaches
Microsoft Disables Iran-Linked Lebanese Hacking Group Polonium

The attack on Israeli organizations is the latest in a long line of attempts to compromise supply chains, as the APT looks to leverage that access to target a multitude of potential victims.

Dark Reading: Attacks/Breaches
YourCyanide Ransomware Propagates With PasteBin, Discord, Microsoft Links

The latest iteration of CMD-based ransomware is sophisticated and tricky to detect – and integrates token theft and worming capabilities into its feature set.

Dark Reading: Attacks/Breaches
FDA: Patch Illumina DNA Sequencing Instruments, Stat

A critical security bug could lead to remote device control, altered lab results, and more, putting patients in danger, agency warns.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Iconium Software Releases DataLenz v1.3 for IBM zSystems

DataLenz delivers real-time, machine learning-based breach detection with user behavior modeling for IBM zSystems.

___________________________
@hacking_Attack
@Hacking_Video

SMB-Session-Spoofing - Tool To Create A Fake SMB Session
http://www.kitploit.com/2022/06/smb-session-spoofing-tool-to-create.html

___________________________
@hacking_Attack
@Hacking_Video

Welcome! This is a utility that can be compiled with Visual Studio 2019 (or newer). The goal of this program is to create a fake SMB Session. The primary purpose of this is to serve as a method to lure attackers into accessing a honey-device. This program comes with no warranty or guarantees.
Program Modifications Instructions This program will require you to modify the code slightly. On line 144, the Windows API (https://www.kitploit.com/search/label/Windows%20API) CreateProcessWithLogonW API is called, there are two parameters that have been supplied by default - svc-admin (the Username) and contoso.com (the domain). It is necessary that you change these values to something that matches your production network. CreateProcessWithLogonW(L"DomainAdminUser", L"YourDomain.com", NULL, LOGON_NETCREDENTIALS_ONLY, );
Implementation Instructions After modifying the code and compiling it, you must then install the service. You can do so with the following command: sc create servicename binpath="C:\ProgramData\Services\Inject\service.exe" start="auto"
Verification Steps To verify the program is functioning correctly, you should check and see what sessions exist on the system. This can be done with the following command: C:\ProgramData\Services\Inject> net sessions
Computer User name Client Type Opens Idle time

-------------------------------------------------------------------------------
\\[::1] svc-admin 0 00:00:04
The command completed successfully.

You should check back in about 13 minutes to verify that a new session has been created and the program is working properly. What an Attacker Sees The theory behind this is when an adversary runs SharpHound and collects sessions and analyzes attack paths from owned principals, they can identify that a high privileged user is signed in on Tier-2 infrastructure (https://www.kitploit.com/search/label/Infrastructure) (Workstations), which (it appears) they can then access and dump credentials (https://www.kitploit.com/search/label/Dump%20Credentials) on to gain Domain Admin access. 

___________________________
@hacking_Attack
@Hacking_Video

In the scenario above, an attacker has compromised the user "wadm-tom@contoso.com (mailto:wadm-tom@contoso.com)" who is a Local Administrator on lab-wkst-2.contoso.com. The user svc-admin is logged in on lab-wkst-2.contoso.com, meaning that all the attacker has to do is sign into the Workstation, run Mimikatz and dump credentials. So, how do you monitor for this? How you Should Configure Monitoring Implementation of this tool is important, so is monitoring. If you implement the tool with no monitoring, it is effectively useless; therefore monitoring is a must. The most effective way to monitor this host is to alert on any logon. This program is best utilized on a host with no user activity that is joined to the domain with standard corporate monitoring tools (EDR, AV, Windows Event Log Forwarding, etc). It is highly recommended that you have an email alert, SMS alert, and many others if possible to ensure that incidents involving this machine are triaged as quickly as possible since this has the highest probability for a real adversary to engage with the workstation in question. Credits Thank you to Microsoft (https://www.kitploit.com/search/label/Microsoft) for providing the service template code and for the excellent Windows API Documentation. https://docs.microsoft.com/en-us/windows/win32/services/the-complete-service-sample https://docs.microsoft.com/en-us/windows/win32/services/svc-cpp https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createprocesswithlogonw

Download SMB-Session-Spoofing (https://github.com/Sq00ky/SMB-Session-Spoofing)

___________________________
@hacking_Attack
@Hacking_Video

LoveTok — HackTheBox — Web Exploitation — Challenge — Writeup
https://0x1rootjkqsta.medium.com/lovetok-hackthebox-web-exploitation-challenge-writeup-fe558f9942ed?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello guys I am back to posting another writeup. So usually I don’t post writeups about HackTheBox challenges. But this was one of the…Continue reading on Medium » (https://0x1rootjkqsta.medium.com/lovetok-hackthebox-web-exploitation-challenge-writeup-fe558f9942ed?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video