Hacking on Medium
Empire: Breakout (Easy) Write-up — VulnHub

https://cdn-images-1.medium.com/max/962/1*tKj8pbUvyQaDqp1D5w0uPQ.png
Breakout is a fun little machine created by Icex64 and Empire Cybersecurity. Download it here…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cybercrime Group TA4563 Targets DeFi Market With Evolving Evilnum Backdoor

The cyber campaign, aimed at siphoning funds, uses an improved version of the malware, which can adjust infection paths based on recognized antivirus software.

hacking: security in practice
lateral movement in non corporate network

Say the location is a flat, anywhere from 3 to 8 computers connected to consumer router. All hard wired.

By gaining access to one machine, how would someone laterally move and infect other machines.

There is no domain controller or other infrastructure which would be in a corporate network which were trained on looking for. If it's just out of the box laptops on wifi, what's your next move ?

submitted by /u/ScambaitSniper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Attackers can surveil, disrupt vehicles outfitted with popular GPS tracker, CISA warns

https://www.cyberscoop.com/vulnerabilities-gps-tracker-cisa-warns/

submitted by /u/M0066
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any way to block Microsoft Remote Desktop directly from my router?

Probably this subreddit isn't the most appropriate for asking this, but as the title says, I'm just looking a way to block this connection (maybe a firewall it in my router?) if possible. Could anyone help me?

submitted by /u/danielsuperxxx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ultimate Tips And Tricks To Find More Cross-Site Scripting Vulnerabilities

@bxmbnContinue reading on Medium »
Read more...

Installing Kali Linux as Portable Live USB for Pentesting.
https://medium.com/@0xManan/installing-kali-linux-as-portable-live-usb-for-pentesting-ecb3ca18b1af?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Amazing People,Continue reading on Medium » (https://medium.com/@0xManan/installing-kali-linux-as-portable-live-usb-for-pentesting-ecb3ca18b1af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I Test For Web Cache Vulnerabilities + Tips And Tricks
https://bxmbn.medium.com/how-i-test-for-web-cache-vulnerabilities-tips-and-tricks-9b138da08ff9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

@bxmbnContinue reading on Medium » (https://bxmbn.medium.com/how-i-test-for-web-cache-vulnerabilities-tips-and-tricks-9b138da08ff9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Reflected Cross Site Scripting (AkamaiGhost) Bypass
https://justakazh.medium.com/reflected-cross-site-scripting-akamaighost-bypass-883935bff843?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

DisclaimerContinue reading on Medium » (https://justakazh.medium.com/reflected-cross-site-scripting-akamaighost-bypass-883935bff843?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Ultimate Tips And Tricks To Find More Cross-Site Scripting Vulnerabilities
https://bxmbn.medium.com/ultimate-tips-and-tricks-to-find-more-cross-site-scripting-vulnerabilities-d2913765e2d5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

@bxmbnContinue reading on Medium » (https://bxmbn.medium.com/ultimate-tips-and-tricks-to-find-more-cross-site-scripting-vulnerabilities-d2913765e2d5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Advice on how to start with my internship.
https://www.reddit.com/r/Pentesting/comments/w4q8en/advice_on_how_to_start_with_my_internship/

Hi guys. I hope everybody is doing well. I am a student in cyber security (not really focused on the red team side) and in my last year, I have to complete a graduate internship. So I got an internship offer from a company. The company doesn't have a detailed description of the internship. And expect that I take some initiative in this regard. The central question of the internship is: "How do you test the resilience of a company X to a ransomware attack?”. They asked me to come up with a first draw on how I am planning to do this. This is of course a nice opportunity to learn. But, I find to have a hard time starting on this, part is due to my limited knowledge in pen testing (that's why I want to take this offer to become better at it) I would like to have some input/tips from your guys. Thanks in advance, I really appreciate it. I also posted this to a different subreddit. submitted by /u/H908pdj410 (https://www.reddit.com/user/H908pdj410)
[link] (https://www.reddit.com/r/Pentesting/comments/w4q8en/advice_on_how_to_start_with_my_internship/) [comments] (https://www.reddit.com/r/Pentesting/comments/w4q8en/advice_on_how_to_start_with_my_internship/)

___________________________
@hacking_Attack
@Hacking_Video

need help with CRTP , The Jenkins module
https://www.reddit.com/r/Pentesting/comments/w4r3gm/need_help_with_crtp_the_jenkins_module/

So for the lab objective i am supposed to log in to jenkins with creds builduser:builduser but they don't actually work in the lab, i tried a bunch of other default creds but i can't get it, am i supposed to grab a list of usernames and passwords and bruteforce ? how do i do that if burp suite is not installed on the windows machine ? am i supposed to transfer burp suite over or what ? submitted by /u/watermelonSoundsNice (https://www.reddit.com/user/watermelonSoundsNice)
[link] (https://www.reddit.com/r/Pentesting/comments/w4r3gm/need_help_with_crtp_the_jenkins_module/) [comments] (https://www.reddit.com/r/Pentesting/comments/w4r3gm/need_help_with_crtp_the_jenkins_module/)

___________________________
@hacking_Attack
@Hacking_Video