Hacking on Medium
HackTheBox — Meta write-up

https://cdn-images-1.medium.com/max/1400/1*8aqwmfm-0x8vd5xv25JpvQ.png
Meta is a medium-level difficulty linux box. It is retired now but I solved it when it was active. Even though it is labeled as medium…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El nuevo marco de privacidad para dispositivos IoT brinda a los usuarios control sobre el…

https://cdn-images-1.medium.com/max/1588/0*GZdnZBPhkMiwDL0U
PUBLICADO EN 9 JUNIO, 2022 EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is NordVPN still good?

I just experienced my first DDOS, I was wondering if Nord is still good. How well it will keep me, my pc, and my ps4 protected.

submitted by /u/RedNeck_Dairy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does the MT7610U USB chip support monitor mode and packet injection?

Also can it be in monitor mode and still stay connected to wifi?

​

I can't find information online.

submitted by /u/SimoKuassimo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bug Hunting Automation

I'm worried about the problem of automation. Will vulnerabilities scanners based on neural networks replace human bug hunters? How good are current tools(e.g burpsuite pro's scanner) and how good do you think they could become in the future? I want to get into bug bounty hunting, but I'm very discouraged about automation tools.

submitted by /u/neirufiyu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there any desktop applications that work like devtools?

Specifically something that would work like the console. Thank you

submitted by /u/BrickPlanets
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Metasploit 6.2.0 improves credential theft, SMB support features, more

https://external-preview.redd.it/jU5mj4PhcDVNEXwJkJlti2TMJiq2VaKYyn3_od6c74s.jpg?width=640&crop=smart&auto=webp&s=a7601a94d598615311725cd1bb5835988a8b02af submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A hunter’s methodology V5.0
https://thexssrat.medium.com/a-hunters-methodology-v5-0-4f52c7744d32?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let’s go, these bugs are not going to squash themselves!Continue reading on Medium » (https://thexssrat.medium.com/a-hunters-methodology-v5-0-4f52c7744d32?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
In Security, Less Is More

Cut away everything that costs more attention, storage, or time than its impact is worth.

Dark Reading: Attacks/Breaches
Exposed Travis CI API Leaves All Free-Tier Users Open to Attack

Public Travis CI logs loaded with GitHub, AWS, Docker Hub account tokens, and other sensitive data could be leveraged for lateral cloud attacks.

Dark Reading: Attacks/Breaches
Kaiser Permanente Breach Exposes Data on 70K Patients

Employee email compromise potentially exposed patients' medical information, including lab test results and dates of services.

Dark Reading: Attacks/Breaches
CISA Recommends Organizations Update to the Latest Version of Google Chrome

Google last week reported seven vulnerabilities in the browser, four of which it rated as high severity.

SharpEventPersist - Persistence By Writing/Reading Shellcode From Event Log
http://www.kitploit.com/2022/06/sharpeventpersist-persistence-by.html

___________________________
@hacking_Attack
@Hacking_Video

Persistence by writing/reading shellcode from Event Log.
Usage The SharpEventPersist tool takes 4 case-sensitive parameters: -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management (https://www.kitploit.com/search/label/Management) Service". The shellcode is converted to hex (https://www.kitploit.com/search/label/Hex) and written to the "Key Management Service", event level is set to "Information" and source is "Persistence".
Run the SharpEventLoader tool to fetch shellcode from event log and execute it. Ideally this should be converted to a DLL (https://www.kitploit.com/search/label/DLL) and sideloaded on program start/boot.
Remember to change the Event Log name and instanceId in the loader, if not running with default values. Default values will leave the following artifact: A new key will be written to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Key Management Service named "Persistance". This new "Persistance" key will not have a provider GUID or TypesSupported which the default key "KmsRequests" have. This can be used to build detections.

Download SharpEventPersist (https://github.com/improsec/SharpEventPersist)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tenable CTF 2022 — Strange Packets (Forensics)

Download the pcap file and open it in wireshark. download it if you do not have it installed.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video