Worried about a possible interview for the first time
https://www.reddit.com/r/Pentesting/comments/v8eiv7/worried_about_a_possible_interview_for_the_first/

I know this probably doesn't sound new to most of you, but I'm legit scared. I'm 19 at my first year of college and I'm into CTFs since the end of 2020. In my country we have a thing called CyberChallenge, which is a programme that trains people under 24 into all the categories and challenges mainly known in CTFs. It is like a university course, just about CTFs, so I developed a good experience in those fields, even though there's still much to learn. Anyway, getting to the point, there's this company in my city that is pretty known in Italy since the founders are from a pretty famous and serious hacking team. They mainly work in penetration testing, but they also have a blue teaming branch. I have a friend that worked for them and told me it's great and that as with my experience I should try and ask for an interview for an internship after sending them my resume. So I got all excited about that, thinking that i might have the experience/knowledge to work for them, but then while I was laying down my resume, I froze. I just thought about the fact that i never worked anywhere and have low to no experience in what they do. Never did pentesting before, I'm just pretty good at CTFs. I didn't know what to write there, so I just wrote down my experience as a CTF player and the milestone obtained at CyberChallenge. I'm hella scared that they won't even look at me, even though I know I can learn super quick and that when committed in something I can really give my 1000%. So my question is, if you ever found yourself in a similar situation, how did you make it work out? Do you think they'll give me a chance for an internship where they'll teach me how they work and what they do so I can be a valuable resource to them? Thank you in advance for your attention everyone! Tl;Dr: I want to ask for an internship at a local penetration testing company but I don't think they'll want me as I don't have experience in what they do. Any experience shared or idea given would be really appreciated! submitted by /u/mattiaricciard (https://www.reddit.com/user/mattiaricciard)
[link] (https://www.reddit.com/r/Pentesting/comments/v8eiv7/worried_about_a_possible_interview_for_the_first/) [comments] (https://www.reddit.com/r/Pentesting/comments/v8eiv7/worried_about_a_possible_interview_for_the_first/)

___________________________
@hacking_Attack
@Hacking_Video

Should I study penetration testing further?
https://www.reddit.com/r/Pentesting/comments/v8esai/should_i_study_penetration_testing_further/

Hi! I have been studying penetration testing for 2 months. I really like to study everything related to cybersecurity. I plan to connect my life with this, but I'm concerned, because in my country there are very few vacancies in the field of penetration testing. Should I continue doing this, or is it better to study programming, which offers more jobs? submitted by /u/1inx1 (https://www.reddit.com/user/1inx1)
[link] (https://www.reddit.com/r/Pentesting/comments/v8esai/should_i_study_penetration_testing_further/) [comments] (https://www.reddit.com/r/Pentesting/comments/v8esai/should_i_study_penetration_testing_further/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hrkgame & gamivo keys

If you need keys for windows, vmware and antiviruses i can reccomend these two websites.

hrkgame.com

gamivo.com

submitted by /u/meIsPri11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Programmable Logic Controllers Hacking

https://external-preview.redd.it/5rymJedFSmFVpEMcCC-xVnM69yKj7JuWkYu97B141BE.jpg?width=640&crop=smart&auto=webp&s=b742dcf08ce47955052bccfe4747a3c4557f37c0 submitted by /u/sanket-darji
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Aurora Pays $6M Bug Bounty to Ethical Security Hacker through Immunefi

submitted by /u/immunebytes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Researchers Achieve ‘Absurdly Fast’ Algorithm for Network Flow

https://external-preview.redd.it/WG-RcXXG_4PMv70x-gl69ND4kCRHqNtm-dnrBq2iQOY.jpg?width=640&crop=smart&auto=webp&s=d5d84b68901949e2b15aa49d9b3eb10536967ff5 submitted by /u/RubenPanza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Sub3Suite : A Free, Open Source, Cross Platform Intelligence Gathering Tool

Sub3 Suite is a research-grade suite of tools for Subdomain Enumeration, OSINT Information gathering & Attack Surface Mapping. Supports both manual and automated analysis on variety of target types with many available features & tools.

Launching

Download Sub3 Suite for your required platform (Windows or Linux) from releases.

on Windows

After download: Extract the zip file to location of your choice. To run just open the sub3suite.exeapplication and done!

NOTE:

* Install the MSVC-redistributable package sub3suite/vcredist_x64.exeor sub3suite/vcredist_x86.exeif the program fails to run on first try.
* Install the OpenSSL libraries using OpenSSL package sub3suite/Win32 OpenSSL v1.1.1n Light.msior sub3suite/Win64 OpenSSL v1.1.1n Light.msiin your system incase of SSL errors when using sub3suite.

on Linux

After download: Extract archive with command tar -xvf sub3suite-, then cd sub3suiteand run sub3suite ./sub3suite.

Startup wizard

When Sub3 Suite launches, the startup wizard is displayed. This lets you choose what s3s project to open.

Selecting a project

You can choose from the following options to create or open a project:

Temporary project– This option is useful for quick tasks where your work doesn’t need to be saved. All data is held in memory, and is lost when s3s exits.

New project on disk– This creates a new project that will store its data in a s3s project file. This file will hold all of the data and configuration for the project. You can also specify a name for the project.

Open existing project– This reopens an existing project from a Sub3 project file. A list of recently opened projects is shown for quick selection.

Note:

You can rename a project later via project config.

Tools Suite

Use the links below for further help on Sub3 Suite Engines:

1. OSINT Engine.
2. RAW Engine.
3. BRUTE Engine.
4. ACTIVE Engine.
5. DNS Engine.
6. SSL Engine.
7. URL Engine.

Use the links below for further help on Sub3 Suite Enumerators:

1. IP Enumerator.
2. ASN Enumerator.
3. CIDR Enumerator.
4. NS Enumerator.
5. MX Enumerator.
6. SSL Enumerator.
7. EMAIL Enumerator.

Installation & Usage

* Download from releases.
* Unzip.
* Run.

NOTE on windows:

1. Install the MSVC-redistributable package sub3suite/vcredist_x64.exeor sub3suite/vcredist_x86.exeif the program fails to run on first try.
2. Install the OpenSSL libraries using OpenSSL package sub3suite/Win32 OpenSSL v1.1.1n Light.msior sub3suite/Win64 OpenSSL v1.1.1n Light.msiin your system incase of SSL errors when using sub3suite.

NOTE on Linux:

After download: Extract archive with command tar -xvf sub3suite-, then cd sub3suiteand run sub3suite ./sub3suite.
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Spock SLAF : A Shared Library Application Firewall “SLAF”

Spock SLAF is a Shared Library Application Firewall “SLAF”. It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks like buffer overflow, path traversal, XSS and SQL injection. So to detect anomalies, Spock uses Deterministic Finite Automaton with rank scores to compute risks and create alerts for each context.

My beginning purpose in this project is to protect any binary that has communication with TLS using OpenSSL resources.

Features

* Action to Block, log and detect security anomalies like SQL injection, XSS, path traversal from SSL_read() function(get input buffers).
* Capacity to run in any programme that uses the OpenSSL library.
* If detect anomaly in TLS context, Spock saves the IP address of the attacker, date time and attack “payload” register in log file.

Etymology

The motivation for this tool was released during a mitigation project in the past seven years an old. Following my freelancer task, an old client has disclosed a problem around deprecated proprietary binary with many vulnerabilities like Heap buffer overflows, remote buffer overflow and path traversal. The big problem of binary context is the application turn abandonware with no patch fixes, but the enterprise needs to run production loads. So my solution was to insert seccomp() to restrict syscalls in the process(you know, block calls like system()/execv()). I replaced libc’s malloc() with “DieHard”, an error-resistant memory allocator. On the other hand, another initiative was little hooking in OpenSSL’s SSL_read() function to restrict some evil payloads, another option.

Another option is to use libreSSL and up a monitor to listen if it has a compatibility bug. The lousy point of LibreSSL is the performance; you can see that if you use a tool like gprof to get a benchmark between OpenSSL and LibreSSL. So OpenSSL is cool but not safest like LibreSSL or lib Sodium. Looking at the performance context, if you get arithmetic functions to big int of OpenSSL, some resources like Big int operations BN_new() do not have a good performance like libGMP. So relax. Performance is not always the best path for security. Security validations and extra buffer and proper bounds checks have an expected cost, without this, you can see a lot of problems for example looking to spectre/meltdown in the past.

Following additional facts, external rules of server using BSD’s firewall(aka packet filter), using custom rules to allow only by IP and OS fingerprint. So that freelancer task stuck in my mind, now you can see my new solution following a global approach to protect TLS communication in the server context.

The first step compile to deploy

Clone the repository:

$ git clone https://github.com/CoolerVoid/spock_slaf

Enter in the folder:

$ cd CoolerVoid/spock_slaf

Compile the content:

$ make clean; make

Now you can see the shared library “spock_slaf.so.1” in “bin” directory.

Second step inject to protect

Second step is inject shared library in your binary that uses OpenSSL following communication context(server).

So now we can use LD_PRELOAD trick:

$ LD_PRELOAD=/home/cooler/spock_slaf/bin/spock_slaf.so.1 bin/rest_server
note: change /home/cooler/spock_slaf/bin/ to your full path name
Download

___________________________
@hacking_Attack
@Hacking_Video

Offensive-Azure - Collection Of Offensive Tools Targeting Microsoft Azure
http://www.kitploit.com/2022/06/offensive-azure-collection-of-offensive.html

___________________________
@hacking_Attack
@Hacking_Video

Collection of offensive tools targeting Microsoft (https://www.kitploit.com/search/label/Microsoft) Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./Device_Code/device_code_easy_mode.py Generates a code to be entered by the target user Can be used for general token generation (https://www.kitploit.com/search/label/Token%20Generation) or during a phishing/social engineering campaign. ./Access_Tokens/token_juggle.py Takes in a refresh token in various ways and retrieves a new refresh token and an access token (https://www.kitploit.com/search/label/Access%20Token) for the resource specified ./Access_Tokens/read_token.py Takes in an access token and parses the included claims information, checks for expiration, attempts to validate signature ./Outsider_Recon/outsider_recon.py Takes in a domain and enumerates as much information as possible about the tenant without requiring authentication ./User_Enum/user_enum.py Takes in a username or list of usernames (https://www.kitploit.com/search/label/Usernames) and attempts to enumerate valid accounts using one of three methods Can also be used to perform a password spray ./Azure_AD/get_tenant.py Takes in an access token or refresh token, outputs tenant ID and tenant Name Creates text output file as well as BloodHound (https://www.kitploit.com/search/label/BloodHound) compatible aztenant file ./Azure_AD/get_users.py Takes in an access token or refresh token, outputs all users in Azure AD and all available user properties in Microsoft Graph Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azusers file ./Azure_AD/get_groups.py Takes in an access token or refresh token, outputs all groups in Azure AD and all available group properties in Microsoft Graph Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file ./Azure_AD/get_group_members.py Takes in an access token or refresh token, outputs all group memberships in Azure AD and all available group member properties in Microsoft Graph Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file ./Azure_AD/get_subscriptions.py Takes in an ARM token or refresh token, outputs all subscriptions in Azure and all available subscription properties in Azure Resource Manager Creates three data files, a condensed json file, a raw json file, and a BloodHound compatible azgroups file ./Azure_AD/get_resource_groups.py Takes in an ARM token or refresh token, outputs all resource groups in Azure and all available resource group properties in Azure Resource Manager Creates two data files, a raw json file, and a BloodHound compatible azgroups file ./Azure_AD/get_vms.py Takes in an ARM token or refresh token, outputs all virtual machines in Azure and all available VM properties in Azure Resource Manager Creates two data files, a raw json file, and a BloodHound compatible azgroups file
Installation Offensive Azure can be installed in a number of ways or not at all. You are welcome to clone the repository and execute the specific scripts you want. A requirements.txt file is included for each module to make this as easy as possible. Poetry The project is built to work with poetry. To use, follow the next few steps: git clone https://github.com/blacklanternsecurity/offensive-azure.git
cd ./offensive-azure
poetry install
Pip The packaged version of the repo is also kept on pypi so you can use pip to install as well. We recommend you use pipenv to keep your environment as clean as possible. pipenv shell
pip install offensive_azure

___________________________
@hacking_Attack
@Hacking_Video

Usage It is up to you for how you wish to use this toolkit. Each module can be ran independently, or you can install it as a package and use it in that way. Each module is exported to a script named the same as the module file. For example: Poetry poetry install
poetry run outsider_recon your-domain.com
Pip pipenv shell
pip install offensive_azure
outsider_recon your-domain.com


Download Offensive-Azure (https://github.com/blacklanternsecurity/offensive-azure)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Poor Communication Opens the Door to Ransomware and Extortion

Organizations can no longer rely on traditional responses to ransomware.

Subdomain Enumeration with python
https://medium.com/@arshiadev/subdomain-enumeration-with-python-20f3124b5940?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Python gives us an easy way to automate tasks during a penetration test. Any tasks that you have to perform regularly are worth automating…Continue reading on Medium » (https://medium.com/@arshiadev/subdomain-enumeration-with-python-20f3124b5940?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video