hacking: security in practice
BELARUS 🇧🇾Telecom pwned for #OpRussia and #DarkLulz (and yeah, I looked… they are BREACHED. Glory to #Ukraine ✊🏻🇺🇦) #LulzSec

https://external-preview.redd.it/6PdXXYwqSkndWWozRvXP1f_D16dkuOa0CGrxrJYSdZQ.jpg?width=108&crop=smart&auto=webp&s=d5fd465d3cc9c0903318e0bec5fb4380673e3194 submitted by /u/lulzsecoperations
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing 403 Forbidden

Hey guys. I am facing a problem, the server does allow PUT method, but Apache Tomcat on version 7.0.14 gives me 403 Forbidden after using burpsuite and trying to use PUT method on it. Any ideas how to bypass that?

submitted by /u/mirahacker
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ransomware Volume Nearly Doubles 2021 Totals in a Single Quarter

Like a hydra, every time one ransomware gang drops out (REvil or Conti), plenty more step up to fill the void (Black Basta).

Dark Reading: Attacks/Breaches
A WAF Is Not a Free Lunch: Teaching the Shift-Left Security Mindset

Developers need to think like WAF operators for security. Start with secure coding and think of Web application firewalls not as a prophylactic but as part of the secure coding test process.

Dark Reading: Attacks/Breaches
Can Zero-Knowledge Cryptography Solve Our Password Problems?

Creating temporary keys that are not stored in central repositories and time out automatically could improve security for even small businesses.

Dark Reading: Attacks/Breaches
Atlassian Confluence Exploits Peak at 100K Daily

Swarms of breach attempts against the Atlassian Confluence vulnerability are likely to continue for years, researchers say, averaging 20,000 attempts daily as of this week.

Dark Reading: Attacks/Breaches
China-Backed APT Pwns Building-Automation Systems with ProxyLogon

The previously unknown state-sponsored group is compromising industrial targets with the ShadowPad malware before burrowing deeper into networks.

Microsoft Sentinel Automation Tips & Tricks – Part 1: Automation rules
https://www.reddit.com/r/redteamsec/comments/vmsqsf/microsoft_sentinel_automation_tips_tricks_part_1/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/SentinelTipsPart1) [comments] (https://www.reddit.com/r/redteamsec/comments/vmsqsf/microsoft_sentinel_automation_tips_tricks_part_1/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pwning ManageEngine — From PoC to Exploit

https://cdn-images-1.medium.com/max/656/1*1GK1OzUh6KCLKAV-vxPXfg.png
A deep dive into CVE-2020–11531 and CVE-2020–11532

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Phantom Credentials of SCCM: Why the NAA Won’t Die

https://cdn-images-1.medium.com/max/835/1*DOLGV-U4cNChPNkHB2ELTw.png
TL;DR — Stop Using Network Access Accounts!

Continue reading on Posts By SpecterOps Team Members »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS cheatsheet payloads

https://cdn-images-1.medium.com/max/996/1*dDIUk8vqMuQziDTOkhytFg.jpeg
XSS PAYLOADS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Harmony attacker transfers stolen Ether worth $44 million

https://cdn-images-1.medium.com/max/640/1*uoi6m1CdFzbzccvJZG8_tA.jpeg
The FBI and two blockchain tracing and analysis firms are partners with Harmony, as per the project’s developers.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video