nsive Security Tool: Mobile Security Framework (MobSF)
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Redhunt Labs has set out four best practices for preventing and mitigating leaked secrets, including setting restrictions on access keys, centrally managing secrets in a restricted environment or config file, setting up alerts for leaked secrets, and continuously monitoring source code for information leakage issues.
Trending: Write up: Find hidden and encrypted secrets from any website Source: portswigger.net Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/malicious-chrome-extensions-feature-90x90.jpg Google Chrome extensions can be fingerprinted to track you online24 hours ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android_malware-700x394-1-90x90.jpg New MaliBot Android banking malware spreads as a crypto miner4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Cisco_Systems_Bug-90x90.jpg Cisco Secure Email bug can let attackers bypass authentication5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/android-malware-90x90.jpg Android malware on the Google Play Store gets 2 million downloads6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Linux-90x90.jpg New Linux rootkit, Syslogk uses magic packets to trigger backdoor1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/Header-Python-Packages-Blog-Final-Image-90x90.jpg PyPI package ‘keep’ mistakenly included a password stealer1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/venom_superhero_movie_tom11_hardy-wallpaper-1920x1080-980x551-1-90x90.jpg This new Linux malware is ‘almost impossible’ to detect2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ran-download-33-1-e1639685560151-90x90.jpeg Black Basta Ransomware Teams Up with Malware Stalwart Qbot2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/InstallerFileTakeOver-Zero-Day-Security-Vulnerability-All-Windows-OS-Versions-90x90.jpg New ‘DogWalk’ Windows zero-day bug gets free unofficial patches2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/ipad_update_1200x675-90x90.jpg Security Fixes Won’t Require Full iOS Update in iOS 16, Will Be Installed Automatically2 weeks ago
The post Internet scans find 1.6 million secrets leaked by websites first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
New method to force machine account to authenticate somewhere using Microsoft's Distributed File System (MS-DFSNM) protocol on \PIPE\netdfs.

https://external-preview.redd.it/j8ICZku9_kDS9iNRqTQsxFCYh8GLC8xxHTHKdTMMcrk.png?width=640&crop=smart&auto=webp&s=72130e19cabf10efdcc389d8ea1d83c2351c1e46 submitted by /u/Podalirius_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Log4j Vulnerability and Cloud Guard AppSec Machine Learning based Approach for Preemptive Prevention

submitted by /u/xkristineeeeese
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to remote access a smart phone on my wifi

I have been using remote software with google desktop but it only allows for remote access to a computer and not a phone. Can I remote access a smartphone on my wifi network (both phones are mine) I have MAC address the password. But I want to feel like I’m in watch dogs.

submitted by /u/EnvironmentalAd3385
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Vulnhub .ova to ISO image file converter
https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/

I’m setting up a cyber lab on ESXi, but I can’t really find any ISO images. I tried importing .ova files from Vulnhub but always get an error. Next I’m going to try to convert the .ova files to an ISO image. Is there any recommended software for this? submitted by /u/DigitalQuinn1 (https://www.reddit.com/user/DigitalQuinn1)
[link] (https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/) [comments] (https://www.reddit.com/r/Pentesting/comments/vh8wwt/vulnhub_ova_to_iso_image_file_converter/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tails 4.18 OS — Live System

https://cdn-images-1.medium.com/max/600/1*b31hiO4ynbDLRrXWEFF4aQ.png
Tails 4.18 OS — Live System: Leave no trace on the computer

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Social Engineering | All in one tool for Phishing by Zphisher | Best tool for Phishing

https://cdn-images-1.medium.com/max/640/0*IExC6QXL0gYDG2aH.png
Social Engineering | All in one tool for Phishing by Zphisher | Best tool for Phishing

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Top 10: #1 — Injection

https://cdn-images-1.medium.com/max/600/1*1fOyXpTbDTDzc3baL-roiw.png
The only Top 10 list that actually f*cking matters.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Identify Your Phone Got Hacked and How to Avoid It?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Java Application -Server Side Template Injection

Description:Continue reading on Medium »
Read more...

hacking: security in practice
I made a script to brick any windows PC

Here is the link to the script

https://github.com/SomeoneAlt-86/pc-killer

So the way it works is lowering the system memory to very low so that windows is unable to boot once restarted.

submitted by /u/Ambitious-Cod-7354
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Msprobe - Finding All Things On-Prem Microsoft For Password Spraying And Enumeration
http://www.kitploit.com/2022/06/msprobe-finding-all-things-on-prem.html

___________________________
@hacking_Attack
@Hacking_Video

Finding all things on-prem Microsoft (https://www.kitploit.com/search/label/Microsoft) for password spraying and enumeration. The tool will used a list of common subdomains (https://www.kitploit.com/search/label/Subdomains) associated with your target apex domain to attempt to discover (https://www.kitploit.com/search/label/Discover) valid instances of on-prem Microsoft solutions. Screenshots of the tool in action are below:
Installing Install the project using pipx (https://pypa.github.io/pipx/installation/) pipx install git+https://github.com/puzzlepeaches/msprobe.git
Usage The tool has four different modules that assist with the discovery (https://www.kitploit.com/search/label/Discovery) of on-prem Microsoft products: Exchange RD Web ADFS Skype for Business The help menu and supported modules are shown below: Usage: msprobe [OPTIONS] COMMAND [ARGS]...

Find Microsoft Exchange, RD Web, ADFS, and Skype instances

Options:
--help Show this message and exit.

Commands:
adfs Find Microsoft ADFS servers
exch Find Microsoft Exchange servers
full Find all Microsoft supported by msprobe
rdp Find Microsoft RD Web servers
skype Find Microsoft Skype servers
Examples Find ADFS servers associated with apex domain: msprobe adfs acme.com
Find RD Web servers associated with apex domain with verbose output: msprobe rdp acme.com -v
Find all Microsoft products hostsed on-prem for a domain: msprobe full acme.com
Coming Soon Full wiki for each module Fixes for lxml based parsing (https://www.kitploit.com/search/label/Parsing) in RD Web module Acknowledgements @p0dalirius (https://twitter.com/intent/follow?screen_name=podalirius_) for RDWArecon (https://github.com/p0dalirius/RDWArecon) @b17zr (https://twitter.com/b17zr) for the ntlm_challenger.py script @ReverendThing (https://github.com/ReverendThing) for his project Carnivore (https://github.com/ReverendThing/Carnivore) and it's included subdomains @busterbcook (https://twitter.com/busterbcook) and their tool msmailprobe (https://github.com/busterb/msmailprobe) heavily influenced the creation of this project

Download Msprobe (https://github.com/puzzlepeaches/msprobe)

___________________________
@hacking_Attack
@Hacking_Video

Java Application -Server Side Template Injection
https://medium.com/@Dhamuharker/java-application-server-side-template-injection-f2aa4d2bb41?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video