hacking: security in practice
Can't choose disk file on virtualbox

On Windows 10 when I open virtualbox and choose the disk file it doesnt recognize kali linux and if I try to search it and add it then it gives me an error, which I posted below. I went into the settings of the virtual machine and almost all of them are disabled (I can't click or enable them).

I'm not sure if the virtualization is enabled since I cant check the bios of the pc (maybe there is another way), and this might be the problem. In task manager I checked and it says virtualisation is enabled, but maybe I heard it only works through bios.

​

Could not get the storage format of the medium 'C:\Program Files\Kali Linux\kali-linux-2022.2-virtualbox-amd64.ova' (VERR_NOT_SUPPORTED).

Result Code:

VBOX_E_IPRT_ERROR (0x80BB0005)

Component:

MediumWrap

Interface:

IMedium {ad47ad09-787b-44ab-b343-a082a3f2dfb1}

Callee:

IVirtualBox {d0a0163f-e254-4e5b-a1f2-011cf991c38d}

Callee RC:

VBOX_E_OBJECT_NOT_FOUND (0x80BB0001)

submitted by /u/zignet3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The Surreal Case of a C.I.A. Hacker’s Revenge

https://external-preview.redd.it/ArjakZcbA3AQPTNkR00o2iGa1nEqWI8-b8QvbXIT8eE.jpg?width=640&crop=smart&auto=webp&s=87258239a7aa8e500c0270b33cbcf7f7bb570c5b submitted by /u/Zee2A
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

resources for issue definition
https://www.reddit.com/r/Pentesting/comments/v6xcz9/resources_for_issue_definition/

I'm trying to write up my first report and I've my attack path sorted. Having difficulty converting my findings to issues. I've found https://portswigger.net/kb/issues. Have you any other resources like these to assist pairing the findings to issues? submitted by /u/MrFoxes (https://www.reddit.com/user/MrFoxes)
[link] (https://www.reddit.com/r/Pentesting/comments/v6xcz9/resources_for_issue_definition/) [comments] (https://www.reddit.com/r/Pentesting/comments/v6xcz9/resources_for_issue_definition/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
7 NFT Scams That Could Be Targeting Your Brand

Brands should be vigilant to ensure sites and listings promoting NFTs for sale are legitimate and not being used as an instrument by fraudsters to swindle customers.

Dark Reading: Attacks/Breaches
Enterprise Security Around the Dinner Table

Enterprise cybersecurity awareness training has evolved to include informal lessons for employees’ family members, and it has many benefits.

Dark Reading: Attacks/Breaches
RSAC Opens With Message of Transformation

Cybersecurity needs to shift its thinking ahead of the next disruption, RSA's CEO said during the opening 2022 conference keynote.

Dark Reading: Attacks/Breaches
How the C-Suite Puts Shoulders Into Zero Trust in 2022

A full 77% of tech executives say they'll increase spending in zero-trust architecture in the coming year.

Intigriti — XSS Challenge — March 2022 — Bug Bounty Hunting — Writeup

Hello guys I am back again. This challenge was pretty interesting and one of my fav. Let’s start talking instead of wasting our time.Continue reading on Medium »
Read more...

Hacking on Medium
Hack the Box: Lame — Writeup (Without Metasploit)

https://cdn-images-1.medium.com/max/1225/1*B183huBEXJBuJR_ol_-w7Q.png
Lame is an Easy-rated retired Hack the Box machine. It is vulnerable to CVE-2007–2447, which takes advantage of the MS-RPC functionality…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
NXSMS APT Grubu Hakkında

https://cdn-images-1.medium.com/max/961/0*MqzLmBxJKM2RIUEn
NXSMS veya OPERAIER adlı APT grubuna ait analizlerin ve grubun kullandıkları tekniklerin anlatıldığı webinarda grubun 2016 dan beri aktif…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to bypass antiviruses by using Shelter

https://cdn-images-1.medium.com/max/713/1*1kTrPG8Sb5xC1INXJM2Qfw.jpeg
Shellter is another antivirus Evasion tool, which infects the PE dynamically and is also used to inject shellcode into any 32-bit native…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cracking Password Protected zip files using john the ripper

https://cdn-images-1.medium.com/max/640/0*y228V-7JFOxWRNAS
Hey guys, today we are going to take a look at cracking the password-protected zip files using john the ripper

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Intigriti — XSS Challenge — March 2022 — Bug Bounty Hunting — Writeup
https://0x1rootjkqsta.medium.com/intigriti-xss-challenge-march-2022-bug-bounty-hunting-writeup-7e8766f1b1dd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello guys I am back again. This challenge was pretty interesting and one of my fav. Let’s start talking instead of wasting our time.Continue reading on Medium » (https://0x1rootjkqsta.medium.com/intigriti-xss-challenge-march-2022-bug-bounty-hunting-writeup-7e8766f1b1dd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Pentesting app with JSF and primeFaces
https://www.reddit.com/r/Pentesting/comments/v74xuw/pentesting_app_with_jsf_and_primefaces/

Does anybody knows how to test an app developed with JSF and PrimeFaces or what to look for? Besides java deserealization submitted by /u/theeam (https://www.reddit.com/user/theeam)
[link] (https://www.reddit.com/r/Pentesting/comments/v74xuw/pentesting_app_with_jsf_and_primefaces/) [comments] (https://www.reddit.com/r/Pentesting/comments/v74xuw/pentesting_app_with_jsf_and_primefaces/)

___________________________
@hacking_Attack
@Hacking_Video

How smartlook take bug and didn’t paid as they said we will’’ & Also Have Bug Bounty Programme!

Stored-XSS Admin Takeover From Low User app.smartlook.comContinue reading on Medium »
Read more...