Hacking on Medium
Walkthrough: Basic Pentesting [PT/BR]

https://cdn-images-1.medium.com/max/700/0*nsvI6sCW5ueErKIt.png
Ei, e aí! Tranquilo? Hoje vou resolver a máquina “Basic Pentest”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Tudo (na verdade o básico) sobre Directory Traversal [PT/BR]
https://medium.com/@anonymindsec/tudo-na-verdade-o-b%C3%A1sico-sobre-directory-traversal-pt-br-83772e89e179?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades…Continue reading on Medium » (https://medium.com/@anonymindsec/tudo-na-verdade-o-b%C3%A1sico-sobre-directory-traversal-pt-br-83772e89e179?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Tudo (na verdade o básico) sobre Directory Traversal [PT/BR]

Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades…Continue reading on Medium »
Read more...

hacking: security in practice
Vulnerability Assessments using Kali Linux on WSL2?

I just got Kali Linux up and running on WSL2 and have had some issues with installing some software like Nessus. I started doing some research and read some older posts that say doing vulnerability assessments / scanning / some pentesting on WSL2 is difficult and you're better off just running Kali Linux on a VM.

Am I better off just using a VM?

submitted by /u/Practical_Bathroom53
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Microsoft has released security updates to address a high severity Windows zero-day vulnerability with publicly available exploit code and abused in attacks. This security flaw is now tracked CVE-2022-34713 and has been jokingly named DogWalk.

https://external-preview.redd.it/gMi2U692xRo8eTr4pFiT8CQwCzll5u0yLnVZrsYecAo.jpg?width=640&crop=smart&auto=webp&s=649c1eb2c2d883c70f2c44f2ef4fcaa8db018c11 submitted by /u/Glad_Living3908
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vera encryption

How long would it take a person with decent software to get into a laptop with vera encryption by brute force?

submitted by /u/StarvingB
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is your favorite go to penetration/hacking distro? What features make it so likeable?

Just wondering what distro would an every day penetration specialist/hacker use. While I'm still in love with Kali Linux I still wonder if other hacker in arms out there prefer something more simple or elaborate. So here is your chance to flex a little muscle....share something without doing too much (eyes wander and top men seize) if you know what that means....share a little what's your favorite distro and tools

submitted by /u/icycloudychrystalclr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Stealing Gas From dYdX, 0.5 ETH A Day
https://medium.com/@hacxyk/stealing-gas-from-dydx-0-5-eth-a-day-712c5fdc43a3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Gas is liquid gold. Back in February 2022, we found a way to abuse a feature called “Gasless Deposits” on dYdX exchange that could allow…Continue reading on Medium » (https://medium.com/@hacxyk/stealing-gas-from-dydx-0-5-eth-a-day-712c5fdc43a3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Stealing Gas From dYdX, 0.5 ETH A Day

Gas is liquid gold. Back in February 2022, we found a way to abuse a feature called “Gasless Deposits” on dYdX exchange that could allow…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Software Development Pipelines Offer Cybercriminals 'Free-Range' Access to Cloud, On-Prem

A Q&A with NCC Group's Viktor Gazdag ahead of a Black Hat USA session on CI/CD pipeline risks reveals a scary, and expanding, campaign vector for software supply chain attacks and RCE.

Advice for 2nd Interview for Red Team Internship
https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/

The qualifications for the internship: Has or is pursuing all of the following -pursuing a relevant bachelor's degree -good communication skills, can work within a team and meet deadlines -basic knowledge of network protocols My first interview wasn't a technical interview. The interviewer just asked me basic questions about myself to get to know me and why I wanted to intern at their company specifically. She informed me that the second interview will be done by three people: two security consultants from their red team and a manager of business solutions. To give some insight as to what the internship will be like, during my first interview I asked my interviewer what to expect to be doing day to day. She told me I would be working alongside the red team on their current project. I would also work on the helpdesk a little. And I would get to work with the business consulting team as well to see how they meet with clients. This is all to try to give me different aspects of what their company does and give me solid hands on experience. She did say primarily though that the internship focuses on working with the red team. My question is what should I expect from the second interview? Are they expecting me to be able to answer technical questions about pentesting? I have some experience doing CTF's. I am by no means a master at them but I have been doing them everyday to try to learn more and improve. Any questions that I should expect to see so I can prepare for them? Any advice would be appreciated! Thank you in advance! submitted by /u/tyllanth (https://www.reddit.com/user/tyllanth)
[link] (https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/) [comments] (https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Walkthrough: RootMe [PT/BR]

https://cdn-images-1.medium.com/max/700/0*7E86qzE4iN8s_GPJ.png
E aí viajantes, beleza? Seguindo o roteiro, hoje resolverei mais uma máquina lá do Try Hack Me! Dessa vez a máquina vai ser a “RootMe”…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video