Dark Reading: Attacks/Breaches
Huntress Acquires Curricula for $22M to Disrupt Security Training Market, Elevate Cyber Readiness for SMB Employees

The Curricula platform uses behavioral science with a simplified approach to train and educate users — and marks another step forward in Huntress’ mission to secure the 99%.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSCP Syllabus 2022

https://cdn-images-1.medium.com/max/1200/1*D3o79VQ9Aa-7e0Y-SrEdvA.png
What is OSCP?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Lame (HTB) writeup

https://cdn-images-1.medium.com/max/688/1*g-gdLwCdqWl0wgPkuBYQtA.png
Initial Enumeration

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 10 android hacking application’s

1. WiFi Kill

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The In-depth Look into SQL Vulnerabilities

https://cdn-images-1.medium.com/max/600/0*eHAo-NNMAtij3Ykx.png
What is SQL Injection , lets come to that point but before that lets come to the point of what is SQL is it a database or just a query …

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BYPASS BYPASS WAF WITH SORONG6ETAR TAMPER SCRIPT

https://cdn-images-1.medium.com/max/1290/1*15OJeS4g9lWTrTZKIFkWKw.png
Heyy comback with me Rexha.. this time i will share tamper script for bypass Web Application Firewall (WAF). Feature :

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerabilidad de autenticación en el servicio de Kubernetes de AWS

https://cdn-images-1.medium.com/max/1656/0*prj_hAo1Vd0TSH_J
PUBLICADO EN 18 JULIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A Deep Dive Into ALPHV/BlackCat Ransomware

https://external-preview.redd.it/HfakifJn0_tUPEZ-_BxSVi2RCpIIhr02iPuJWGbaA8w.jpg?width=640&crop=smart&auto=webp&s=afe208df64aed3cc79cf59b1ae0e5cb4824bd929 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/ZjLfBGJ_hlIjoNnEcxK3sL758hcy1UNB0QMh-B_aEFc.jpg Hey all, I should provide some context before asking my question. So I am currently researching and trying to find a vulnerability in an IoT device, it's pretty secure and sandboxed quite well. The only potential attack vector i have found is a JavaScript Injection vulnerability which I have explored and messed around with tons, but nothing crazy outside of getting more information on the device. However, I have deployed this JS payload (which is supposed to spawn a reverse shell, i generated this payload from using JSshell, however it really only opens a TCP connection and not a shell environment):

​

Jsshell payload used

And after listening on the host and port 4848, I get the incoming connection:

​

Incoming connection from IoT device > me

This looks good, except I would like to spawn a shell through JS, not just the TCP connection, is there anything I can do to leverage this into a shell environment using JS? Lots of research points me toward using Node.js however Node runs server side and tends to only open a shell on the server and not the client (the IoT device), and obviously in this case I would like a shell on the client and not the server. Any help/Ideas is greatly appreciated!

submitted by /u/dxrk-kali
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Popular vehicle GPS tracker gives hackers admin privileges over SMS

https://external-preview.redd.it/-f-vVzQkPmZwLNORqcl8vyalSAFQkcgg_yDPpw9wy6k.jpg?width=640&crop=smart&auto=webp&s=cd7c33001eebe33a8d29f12781bba5b684bf9583 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video