Hacking Articles Tips Tricks Videos Tutorials

XSS Blind Stored at Asset Domain Android Apps TikTok

Hi everyone

5 viewsedited 03:54

I got hacked by a malicious file, what's the best way to open it...

hacking: security in practice
I got hacked by a malicious file, what's the best way to open it and learn about it?

Context: Here's how the hack went. I clicked it and immediately knew I messed up. It closed only one program (the account that got hacked) and then logged me out of it.

Basically I got a file from somebody I trusted which unfortunately hacked my account. Well, that's okay. I got the account back, and instead of deleting the file, I want to know exactly what it does. Is there a good program to use that'll isolate the file in maybe an environment that's safe to open it in or is there a good program that'll just tell me what it does or the scripts involved?

If it's a keylogger that's bad, but if it's just a one time dealio that's okay. Basically I want to find out if it's safe to simply delete the file.

Any recommendations otherwise? Should I completely wipe my hard drive? Should I set up a new drive for my system? Do malicious files usually download to all drives or just the system drives?

submitted by /u/Cryterionlol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Context: Here's how the hack went. I clicked it and immediately knew I messed up. It closed only one program (the account that got hacked) and...

5 viewsedited 04:58

Prevent transfer data to USB being monitored or tracked .

hacking: security in practice
Prevent transfer data to USB being monitored or tracked .

How can I transfer data to USB without being monitored or tracked ?

submitted by /u/Fresh_Ad_1688
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

# How can I transfer data to USB without being monitored or tracked ?

5 viewsedited 04:58

How many VMs do you need for pentesting?

How many VMs do you need for pentesting?
https://www.reddit.com/r/Pentesting/comments/vddmbo/how_many_vms_do_you_need_for_pentesting/

I have seen that you only beed a Linux vm and a Windows vm. This doubt is with purpose to know how much ram do I need in my PC. 16 gb ram 24 gb 32 gb?? And if I need let say 32gb ram for what purpose. Certain types of penetrations need more than two VM? Let me know your opinions. :) submitted by /u/PleasantBluejay7419 (https://www.reddit.com/user/PleasantBluejay7419)
[link] (https://www.reddit.com/r/Pentesting/comments/vddmbo/how_many_vms_do_you_need_for_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/vddmbo/how_many_vms_do_you_need_for_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

I have seen that you only beed a Linux vm and a Windows vm. This doubt is with purpose to know how much ram do I need in my PC. 16 gb ram 24...

4 viewsedited 05:58

What tools do you actually need to know in order to be a good at...

What tools do you actually need to know in order to be a good at pentesting?
https://www.reddit.com/r/Pentesting/comments/vdejrc/what_tools_do_you_actually_need_to_know_in_order/

I’m going through THM rooms at a fast pace, and I started to wonder what tools do you actually need to know for real life action. I’m familiar with Burp, Nmap, Wireshark, Metasploit, Hashcat and some others. What else do you use and which ones do you use the most? submitted by /u/MrMeta3 (https://www.reddit.com/user/MrMeta3)
[link] (https://www.reddit.com/r/Pentesting/comments/vdejrc/what_tools_do_you_actually_need_to_know_in_order/) [comments] (https://www.reddit.com/r/Pentesting/comments/vdejrc/what_tools_do_you_actually_need_to_know_in_order/)

___________________________
@hacking_Attack
@Hacking_Video

I’m going through THM rooms at a fast pace, and I started to wonder what tools do you actually need to know for real life action. I’m familiar...

5 viewsedited 05:59

CSRF leads to account takeover in Yahoo!
https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-958321990740?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How I managed to hack the accounts of arbitrary users of a yahoo! application in only 30 minutes.

5 viewsedited 06:10

7 views06:10

How I managed to hack the accounts of arbitrary users of a yahoo! application in only 30 minutes.Continue reading on Medium » (https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-958321990740?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I managed to hack the accounts of arbitrary users of a yahoo! application in only 30 minutes.

8 viewsedited 06:10

8 views06:50

Photo

Hacking on Medium
Save over $1,000 on your groceries with 1 line of code

https://cdn-images-1.medium.com/max/911/1*crBEZB_3wdVvGo8IEKXQ8Q.png
Rewards programs (AKA Loyalty Programs) are a fascinating, yet simple concept.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Save over $1,000 on your groceries with 1 line of code

Rewards programs (AKA Loyalty Programs) are a fascinating, yet simple concept. Companies will let you sign-up for free with an email, track…

8 viewsedited 06:50

6 views06:50

Photo

Hacking on Medium
Hacking Idea — Part One

https://cdn-images-1.medium.com/max/600/1*098td-ptnTkS0QtI8u3fqg.jpeg
Do not try to bypass antivirus just try to change your mindset as hacker.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Do not try to bypass antivirus just try to change your mindset as hacker.

Hacking Idea — Part One

6 viewsedited 06:50

CSRF leads to account takeover in Yahoo!
https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-aa96c678d2aa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.

5 viewsedited 07:55

4 views07:55

How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.Continue reading on Medium » (https://retr02332.medium.com/csrf-leads-to-account-takeover-in-yahoo-aa96c678d2aa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I managed to hack the accounts of arbitrary users of a Yahoo! application in only 30 minutes.

4 viewsedited 07:55

Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi
https://smartcontractaudit.medium.com/aurora-stalls-a-sizable-defi-hack-pays-6m-bug-bounty-through-immunefi-a7f4173df3d2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi

It could have been the next market-moving DeFi hack, but thanks to bug bounty!

4 viewsedited 07:56

4 views07:56

It could have been the next market-moving DeFi hack, but thanks to bug bounty!Continue reading on Medium » (https://smartcontractaudit.medium.com/aurora-stalls-a-sizable-defi-hack-pays-6m-bug-bounty-through-immunefi-a7f4173df3d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Aurora Stalls A Sizable DeFi Hack, Pays $6M Bug Bounty through Immunefi

It could have been the next market-moving DeFi hack, but thanks to bug bounty!

4 viewsedited 07:56

4 views08:14

Black Hat Ethical Hacking

Photo

Black Hat Ethical Hacking
Cisco Secure Email bug can let attackers bypass authentication

Cisco Secure Email bug can let attackers bypass authenticationPost Views: 1
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.
The security flaw (tracked as CVE-2022-20798) was found in the external authentication functionality of virtual and hardware Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager appliances.

CVE-2022-20798 is due to improper authentication checks on affected devices using Lightweight Directory Access Protocol (LDAP) for external authentication.

“An attacker could exploit this vulnerability by entering a specific input on the login page of the affected device,” Cisco explained.

“A successful exploit could allow the attacker to gain unauthorized access to the web-based management interface of the affected device.”

An advisory published on Wednesday says the bug was discovered during the resolution of a Cisco TAC (Technical Assistance Center) support case.

Cisco’s Product Security Incident Response Team (PSIRT) said it’s not aware of any publicly available exploits for this security bug or malicious use of the vulnerability in the wild.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Doesn’t affect default configurationsThis bug only affects appliances configured to use external authentication and LDAP as the authentication protocol.

Luckily, according to Cisco, the external authentication feature is disabled by default, meaning only devices with non-default configurations are impacted.

To check if external auth is enabled on your appliance, log into the web-based management interface, go to System Administration > Users, and look for a green check box next to “Enable External Authentication.”
See Also: This new Linux malware is ‘almost impossible’ to detect Cisco also says this vulnerability does not affect its Cisco Secure Web Appliance product, previously known as Cisco Web Security Appliance (WSA).

Admins who cannot immediately install CVE-2022-20798 security updates can also apply a workaround that requires disabling anonymous binds on the external authentication server.

Another Secure Email gateway flaw patched in February could allow remote attackers to crash unpatched appliances using maliciously crafted email messages.
See Also: Recon Tool: Domain Analyzer Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Today, Cisco also announced it wouldn’t fix a critical zero-day bug affecting end-of-life RV110W, RV130, RV130W, and RV215W SMB routers, allowing attackers to execute arbitrary commands with root-level privileges.
See Also: The Difference between Vulnerability Assessment and Pentesting
Source: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads1 day [...]

___________________________
@hacking_Attack
@Hacking_Video

Cisco Secure Email bug can let attackers bypass authentication | Black Hat Ethical Hacking

Cisco notified customers this week to patch a critical vulnerability that could allow attackers to bypass authentication and login into the web management interface of Cisco email gateway appliances with non-default configurations.

4 viewsedited 08:14