Hacking on Medium
A Spyware that threatens the world

https://cdn-images-1.medium.com/max/1920/1*6pEj4zrt8s6k2A68uyj7sQ.png
All about Pegasus Spyware

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
detect network connection type

I'm looking for a way to detect wether a device is connecting to a server using conventional ways (wifi/router then cable/satellite) or using a cellular data network (either directly or wifi tethering).

I'm hoping there's a way to detect, similar to traceroute, wether packets hop through a cellular network or cable. I understand most cellular is NAT'd so this is something I'd need to scrape from sent packets from the device.

Appreciate any thought on this, I couldn't find anything searching around.

submitted by /u/settopvoxxit
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/VeCzQuKZXhn973DT2yxNZ1XuYeptUi-nVw6O0V0S-ew.jpg submitted by /u/leoinnoh
[link] [comments]

Mail Server Misconfiguration leads to sending a fax from anyone’s account on HelloFax (Dropbox BBP)…
https://infosecwriteups.com/mail-server-misconfiguration-leads-to-sending-a-fax-from-anyones-account-on-hellofax-dropbox-bbp-aab3d97ab4e7?source=rss------bug_bounty-5

Hi Everyone!,Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/mail-server-misconfiguration-leads-to-sending-a-fax-from-anyones-account-on-hellofax-dropbox-bbp-aab3d97ab4e7?source=rss------bug_bounty-5)

Sensitive Data Exposure: Inspect Element berujung Inject MongoDB atlas Via Realm
https://aminudin.medium.com/sensitive-data-exposure-inspect-element-berujung-inject-mongodb-atlas-via-realm-af9c2401c48d?source=rss------bug_bounty-5

Sensitive Data Exposure vulnerabilities can occur when a web application does not adequately protect sensitive information from being…Continue reading on Medium » (https://aminudin.medium.com/sensitive-data-exposure-inspect-element-berujung-inject-mongodb-atlas-via-realm-af9c2401c48d?source=rss------bug_bounty-5)

Hacking on Medium
Kenobi WriteUp

https://cdn-images-1.medium.com/max/600/1*DdOVpgLd0rYEmciBTpsNhQ.png
Maquina Linux de TryHackMe de dificultad fácil en la que podremos ver como explotamos una mala configuración de SMB enumerando los…

Continue reading on Medium »

Hacking on Medium
How I Find and Exploit Graphql and Got Triaged

https://cdn-images-1.medium.com/max/1047/1*KpIDrWYvbRn35mTp_nvjiQ.png
Halo semuanya, disini saya akan coba share bagaimana saya melakukan eksploitasi file graphql yang terdapat pada sebuah website. Disini…

Continue reading on Medium »

Hacking on Medium
network_scanner-linux

https://cdn-images-1.medium.com/max/929/1*vFYjYz_EYlyGCsF0qIfGaw.png
Hi, again! In this blog I am going to explain my “network_scanner-linux” tool.

Continue reading on Medium »

Hacking on Medium
This is how much the average Conti hacking group member earns a month

The average Conti ransomware group member earns a salary of $1,800 per month, a figure you might consider low considering the success of…

Continue reading on Medium »

Hacking on Medium
Mr. Robot hacking scene explained.

https://cdn-images-1.medium.com/max/952/1*jl_lSU4oa-D_z0i-VHRmjg.png
I am currently watching Mr. Robot and I can say the hacking is the most realistic I seen in any movie or show. One of my favorite hacking…

Continue reading on Medium »

Sensitive Data Exposure: Inspect Element berujung Inject MongoDB atlas Via Realm

Sensitive Data Exposure vulnerabilities can occur when a web application does not adequately protect sensitive information from being…Continue reading on Medium »
Read more...

I am a seasoned “SysAdmin” pushing to get into Offensive Security with the DOD. Please help.
https://www.reddit.com/r/Pentesting/comments/w8fc6h/i_am_a_seasoned_sysadmin_pushing_to_get_into/

<!-- SC_OFF -->I am heavily leaned on to fix every IT related issue in the building. From help desk to networks to admins setting passwords to something they didn’t mean to. From Alpha 1200’s to ESXI. I have dug into so much hardware and software I wonder why I don’t make $200k. My passion has always been on the offensive side of things. Basically, blue team is not an option for me. I rather stay where I am at if blue team is where I “need” to go first because slow days do happen. What I am doing currently is completing my bachelors in cybersec. I am a recent CEH ANSI, and I sit for the CEH practical tomorrow. In 2 months I sit for pentest+. In 5 months I sit for CISSP, and my bachelors is finished by the time I pass. I plan to take the pentesting and ethical hacking graduate certificate track with SANS after my bachelors, which is 18-24 months long. I am also subscribed to tryhackme and finish rooms in between college requirements. My shortcomings: The networks I work on are not accessible via the internet. There are very few threats other than the end-user causing me to have an extremely bad day. I don’t know what attacks look like outside of the lab environment. I get visibly pissed when I see people that have a job not doing it and having to pick up after them. Certified Azure fundamentals; but doesn’t work in a cloud environment. So with all this being said, I am excited about my path and the future, but what can I do right now to get out of my current position, and also have some semblance of sanity without taking a lower paying junior position in OffSec? Cyber defense or a SOC just is not an option. I have been in my current position for 5 years and also have a DoD clearance for 15+ years. TLDR: How do I get out of my sysadmin role into offensive security as a knowledgeable all around admin, recent CEH ANSI, and soon to be CEH Master because end-users make my life hell? <!-- SC_ON --> submitted by /u/quick_send_help (https://www.reddit.com/user/quick_send_help)
[link] (https://www.reddit.com/r/Pentesting/comments/w8fc6h/i_am_a_seasoned_sysadmin_pushing_to_get_into/) [comments] (https://www.reddit.com/r/Pentesting/comments/w8fc6h/i_am_a_seasoned_sysadmin_pushing_to_get_into/)