Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
How to get started in Cybersecurity in 2022 (Part-2)

https://cdn-images-1.medium.com/max/1280/0*DJZnHTghRYDBaunh.jpeg
This is a roadmap for beginners interested in learning about cybersecurity who don’t have proper knowledge of the field and have no one to…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

How to get started in Cybersecurity in 2022 (Part-2)

This is a roadmap for beginners interested in learning about cybersecurity who don’t have proper knowledge of the field and have no one to…

9 viewsedited 10:49

8 views10:49

Hacking on Medium
My Idea of a Safe and Peaceful Cyber Space

https://cdn-images-1.medium.com/max/848/1*QozhSLuwVYwC4hvqN-ys8w.png
Over the last 30 years, the international security environment has been characterized by several security deficits.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

My Idea of a Safe and Peaceful Cyber Space

Over the last 30 years, the international security environment has been characterized by several security deficits.

8 viewsedited 10:49

This media is not supported in your browser

VIEW IN TELEGRAM

8 views10:49

GIF

Hacking on Medium
8 Important Questions To Ask Your Cybersecurity Integrator Before Signing

https://cdn-images-1.medium.com/max/600/1*-bW-hL78apQK4uD0ZsAMEw.gif
When it comes to protecting your business from cybersecurity threats, you can’t be too careful. That’s why it’s so important to partner…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

8 Important Questions To Ask Your Cybersecurity Integrator Before Signing

When it comes to protecting your business from cybersecurity threats, you can’t be too careful. That’s why it’s so important to partner…

8 viewsedited 10:49

8 views10:49

Hacking on Medium
HOW NOT TO GET HACKED

https://cdn-images-1.medium.com/max/720/0*UCnLKn6iuCOHG8oa.png
Recently, I have been seeing so many people getting hacked/phished easily on Instagram and other social media platforms. Hence, I decided…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Recently, I have been seeing so many people getting hacked/phished easily on Instagram and other social media platforms. Hence, I decided…

HOW NOT TO GET HACKED

9 viewsedited 10:49

7 views12:14

Black Hat Ethical Hacking

Black Hat Ethical Hacking
PyPI package ‘keep’ mistakenly included a password stealer

PyPI package ‘keep’ mistakenly included a password stealerPost Views: 54
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 4 Minutes
PyPI packages ‘keep,’ ‘pyanxdns,’ ‘api-res-py’ were found to be containing a backdoor due to the presence of malicious ‘request’ dependency within some versions.
For example, while most versions of ‘keep’ project use the legitimate Python module requests for making HTTP requests, ‘keep’ v.1.2 contains ‘request’ (without s) which is malware.

BleepingComputer reached out to the authors of each of these packages to understand if this was caused by a mere typographical error, self-sabotage, or by maintainer accounts getting hijacked. PyPI package ‘keep’ uses malicious ‘request’Some versions of PyPI packages, ‘keep,’ ‘pyanxdns,’ and ‘api-res-py’ were caught using a malicious dependency, ‘request,’

Back in May, GitHub user duxinglin1 noticed the vulnerable versions contained the misspelled ‘request’ dependency, as opposed to the legitimate requests library.

As such, the following CVEs have been assigned this week with regards to the vulnerable versions:

* CVE-2022-30877 – ‘keep’ version 1.2 contains the backdoor ‘request’, contrary to what the advisory implies.
* CVE-2022-30882 – ‘pyanxdns’ version 0.2 impacted
* CVE-2022-31313 – ‘api-res-py’ version 0.1 impacted

Although ‘pyanxdns’ and ‘api-res-py’ might be small scale projects, the ‘keep’ package, in particular, gets downloaded over 8,000 times in a week on average—with its version 1.2 using the malicious dependency:
https://www.bleepstatic.com/images/news/u/1164866/2022/jun-2022/pypi-request-keep-backdoor/pypi-keep-page.jpeg
___________________________
@hacking_Attack
@Hacking_Video

PyPI package ‘keep’ mistakenly included a password stealer | Black Hat Ethical Hacking

PyPI packages 'keep,' 'pyanxdns,' 'api-res-py' were found to be containing a backdoor due to the presence of malicious 'request' dependency within some versions.

10 viewsedited 12:14

Black Hat Ethical Hacking

Black Hat Ethical Hacking
PyPI package ‘keep’ mistakenly included a password stealer

___________________________
@hacking_Attack
@Hacking_Video

PyPI package ‘keep’ mistakenly included a password stealer | Black Hat Ethical Hacking

PyPI packages 'keep,' 'pyanxdns,' 'api-res-py' were found to be containing a backdoor due to the presence of malicious 'request' dependency within some versions.

9 viewsedited 12:14

Pool on the roof - {{%B %d, %Y}}

hacking: security in practice
Pool on the roof - {{%B %d, %Y}}

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF...

9 viewsedited 12:38

SSH beyond login and port forwarding?

hacking: security in practice
SSH beyond login and port forwarding?

One of my NAS devices allows SSH logins with a username/password belonging to the manufacturer. I have the credentials. My attempts to login have been a complete failure.

Can you suggest anything beyond a normal login or port forwarding?

Interactive login and SCP succeed but I immediately get "ERROR: Connection refused" from some internal application. Port forwarding doesn't drop but its disabled in the config file and can't be used.

submitted by /u/caravandog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

One of my NAS devices allows SSH logins with a username/password belonging to the manufacturer. I have the credentials. My attempts to login have...

9 viewsedited 12:39