Exploit Collector
SAP Fiori Launchpad Cross Site Scripting

___________________________
@hacking_Attack
@Hacking_Video

https://external-preview.redd.it/exgFQQJLERtChmvQKVRfS0aWZ4uaJ04hCsEKq-UhFCo.jpg?width=640&crop=smart&auto=webp&s=a5639a84cda1987c09c1ec7c23375b6c1ea3fde4 ​

https://preview.redd.it/u2jqefv8ey691.jpg?width=1277&format=pjpg&auto=webp&s=3c179e7da974db3d71b59482863e87e8942e909b

High-profile vulnerabilities in PLC and HMI devices by AutomationDirect (CVE-2022-2003 - CVE-2022-2006) as seen on https://netlas.io

The United States is the most affected.

#vulnerability_map

submitted by /u/netlas_io
[link] [comments]

hacking: security in practice
Reverse Engineering an old Mario & Luigi game for fun

https://external-preview.redd.it/Pem9malDTG6UKrsDt4OpGeVfEsjwoCiaNh_CcaZ9UyM.jpg?width=640&crop=smart&auto=webp&s=1deb06f41362e0c6e478ea8af5a554d367940e47 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is malware more often a worm or a virus?

these days

submitted by /u/Significant_Acadia72
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead

Experts tell teams to prepare for more regulation, platform consolidation, management scrutiny, and attackers with the ability to claim human casualties.

Dark Reading: Attacks/Breaches
RIG Exploit Kit Replaces Raccoon Stealer Trojan With Dridex

After the Raccoon Stealer Trojan disappeared, the RIG Exploit Kit seamlessly adopted Dridex for credential theft.

Dark Reading: Attacks/Breaches
China-Linked ToddyCat APT Pioneers Novel Spyware

ToddyCat's Samurai and Ninja tools are designed to give attackers persistent and deep access on compromised networks, security vendor says.

Dark Reading: Attacks/Breaches
VPNs Persist Despite Zero-Trust Fervor

Most organizations still rely on virtual private networks for secure remote access.

Dark Reading: Attacks/Breaches
7 Ways to Avoid Worst-Case Cyber Scenarios

In the wake of devastating attacks, here are some of the best techniques and policies a company can implement to protect its data.

Hacking on Medium
Year of the Pig TryHackme WriteUp

https://cdn-images-1.medium.com/max/1920/1*y6uJlCEsjgekvuFsJHI2iw.png
some pigs do fly….. Tryhakcme writeup for “year of the pig”

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Net Sec Challenge Try Hack Me Jr. Penetration Tester Path

https://cdn-images-1.medium.com/max/1900/1*ormeTNOzLDo3U5pBVrp4dA.png
Net Sec Challenge is a VIP room on TryHackMe that can help you test your network security skills using Nmap, Telnet, and Hydra.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cómo convertir una lata de Coca-Cola en un dispositivo de espionaje

https://cdn-images-1.medium.com/max/1697/0*CyM8kTYVCuwYReLS
PUBLICADO EN 21 JUNIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mitigar el ransomware en un primer mundo remoto

https://cdn-images-1.medium.com/max/1274/0*9jPM0sPXZ3yKjU8v
PUBLICADO EN 21 JUNIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Naabu - A Fast Port Scanner Written In Go With A Focus On Reliability And Simplicity
http://www.kitploit.com/2022/06/naabu-fast-port-scanner-written-in-go.html

___________________________
@hacking_Attack
@Hacking_Video

Naabu is a port scanning (https://www.kitploit.com/search/label/Port%20Scanning) tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT scans on the host/list of hosts and lists all ports that return a reply.
Features Fast And Simple SYN/CONNECT probe based scanning Passive Port Enumeration (https://www.kitploit.com/search/label/Port%20Enumeration) using Shodan Internetdb API (https://internetdb.shodan.io/) Optimized for ease of use and lightweight on resources Automatic IP deduplication for port scan NMAP integration for service discovery Multiple input support - STDIN/HOST/IP/CIDR Multiple output format support - JSON/TXT/STDOUT Usage naabu -h This will display help for the tool. Here are all the switches it supports. open ports using shodan internetdb api OPTIMIZATION: -retries int number of retries for the port scan (default 3) -timeout int millisecond to wait before timing out (default 1000) -warm-up-time int time in seconds between scan phases (default 2) -ping ping probes for verification of host -verify validate the ports again with TCP verification DEBUG: -debug display debugging information -verbose, -v display verbose output -no-color, -nc disable colors in CLI output -silent display only results in output -version display version of naabu -stats display stats of the running scan -si, -stats-interval int number of seconds to wait between showing a statistics update (default 5)">Usage:
./naabu [flags]

INPUT:
-host string[] hosts to scan ports for (comma-separated)
-list, -l string list of hosts to scan ports (file)
-exclude-hosts, -eh string hosts to exclude from the scan (comma-separated)
-exclude-file, -ef string list of hosts to exclude from scan (file)

PORT:
-port, -p string ports to scan (80,443, 100-200
-top-ports, -tp string top ports to scan (default 100)
-exclude-ports, -ep string ports to exclude from scan (comma-separated)
-ports-file, -pf string list of ports to exclude from scan (file)
-exclude-cdn, -ec skip full port scans for CDN's (only checks for 80,443)

RATE-LIMIT:
-c int general internal worker threads (default 25)
-rate int packets to send per second (d efault 1000)

OUTPUT:
-o, -output string file to write output to (optional)
-json write output in JSON lines format
-csv write output in csv format

CONFIGURATION:
-scan-all-ips, -sa scan all the IP's associated with DNS record
-scan-type, -s string type of port scan (SYN/CONNECT) (default "s")
-source-ip string source ip
-interface-list, -il list available interfaces and public ip
-interface, -i string network Interface to use for port scan
-nmap invoke nmap scan on targets (nmap must be installed) - Deprecated
-nmap-cli string nmap command to run on found results (-nmap-cli 'nmap -sV')
-r string list of custom resolver dns resolution (comma separated or from file)
-proxy string socks5 proxy
-resume resume scan using resume.cfg
-stream stream mode (disab les resume, nmap, verify, retries, shuffling, etc)
-passive display passive open ports using shodan internetdb api

OPTIMIZATION:
-retries int number of retries for the port scan (default 3)
-timeout int millisecond to wait before timing out (default 1000)
-warm-up-time int time in seconds between scan phases (default 2)
-ping ping probes for verification of host
-verify validate the ports again with TCP verification

DEBUG:

___________________________
@hacking_Attack
@Hacking_Video