hacking: security in practice
Cloudflare outage on June 21, 2022

The conspiracy theories that will come from this

submitted by /u/capj400
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A python tool to translate a shellcode from assembly to python2 commands when doing pwn in CTF

https://external-preview.redd.it/koTmFdbLbOyvGnbyBCyp_En524QGWmdwXi1FgubFT68.jpg?width=108&crop=smart&auto=webp&s=381ad2a593cf874eaab7578fe94b9545e3722d7a submitted by /u/Podalirius_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to detect the containers’ escape capabilities with Falco

Capabilities provide a way to limit the level of access a container can have, splitting the power of the root user into more granular units. However, they are often misconfigured, granting excessive privileges to processes and threads.

I have seen some examples to exploit this really interesting abuse:

* https://tbhaxor.com/exploiting-linux-capabilities-part-2/
* https://www.hackingarticles.in/linux-privilege-escalation-using-capabilities/

In this case, I want to share a more blue team approach, the detection of CAP_SYS_ADMIN abuse when performing container escaping:

* https://sysdig.com/blog/container-escape-capabilities-falco-detection/

submitted by /u/MiguelHzBz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to turn a normal USB into a hacking USB?

Do i need a rubber ducky? or is there a way to get the same out come from a normal usb?

submitted by /u/CatLoveeeer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
learning how to hack

Hey, this summer I plan to learn cyber security and hacking, as a result of spending time with my older friends who got roles in cyber defense and cyber attacks. I would like to hear recommendations for tutorials/articles about those professions and learn them (if it's necessary to know I do have experience in programming (python, java, c++, javascript, c#, and Linux)). Thanks.

submitted by /u/Big-mushr00m
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers Can Turn Satellites Into Weapons

https://external-preview.redd.it/ncO3lUfPLSNLGvXXX0IfZsf6WXXHfJOGnL8TfZtE2cY.jpg?width=320&crop=smart&auto=webp&s=84dee5d5d7af2672441715772c178999243fbd95 submitted by /u/Arditbicaj
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Burpsuite
https://www.reddit.com/r/Pentesting/comments/vhhm69/burpsuite/

Hey I’m trying to fuzz using intruder and positions.. I remember doing a lab a few years ago on port swigger where I enumerated letter by letter and from the response gathered the entire password , but can no longer find the page or an tut. submitted by /u/Few_Lack_4505 (https://www.reddit.com/user/Few_Lack_4505)
[link] (https://www.reddit.com/r/Pentesting/comments/vhhm69/burpsuite/) [comments] (https://www.reddit.com/r/Pentesting/comments/vhhm69/burpsuite/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
BRATA Android Malware Evolves Into an APT

The BRATA Android banking Trojan is evolving into a persistent threat with a new phishing technique and event-logging capabilities.

Dark Reading: Attacks/Breaches
Evolving Beyond the Password: It's Time to Up the Ante

While there's an immediate need to improve MFA adoption, it's also critical to move to more advanced and secure passwordless frameworks, including biometrics. (Part 1 of 2)

Dark Reading: Attacks/Breaches
Why Financial Institutions Must Double Down on Open Source Investments

Open source is here to stay, and it's imperative that CIOs have a mature, open source engagement strategy, across consumption, contribution, and funding as a pillar of digital transformation.

$1,500 XSS — what to consider during the bug bounty
https://medium.com/@citril/1-500-xss-what-to-consider-during-the-bug-bounty-8749b8911369?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello folks, long time no see! I recently got my bounty from one of private programs on HackerOne and wanted to talked about it, share my…Continue reading on Medium » (https://medium.com/@citril/1-500-xss-what-to-consider-during-the-bug-bounty-8749b8911369?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Write-up: Username enumeration via subtly different responses @ PortSwigger Academy

https://cdn-images-1.medium.com/max/844/0*qSl0ON2hlxaoxFBe.png
This write-up for the lab Username enumeration via subtly different responses is part of my walkthrough series for PortSwigger’s Web…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Infosec Weekly #2 — Docker, Google Dorks, Bug Bounty and other interesting Infosec stuff.

https://cdn-images-1.medium.com/max/1920/1*6pHJoBrTPWjJMS6lUCg66w.png
Hey 👋

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video