Gas is liquid gold. Back in February 2022, we found a way to abuse a feature called “Gasless Deposits” on dYdX exchange that could allow…Continue reading on Medium » (https://medium.com/@hacxyk/stealing-gas-from-dydx-0-5-eth-a-day-712c5fdc43a3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Stealing Gas From dYdX, 0.5 ETH A Day

Gas is liquid gold. Back in February 2022, we found a way to abuse a feature called “Gasless Deposits” on dYdX exchange that could allow…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Software Development Pipelines Offer Cybercriminals 'Free-Range' Access to Cloud, On-Prem

A Q&A with NCC Group's Viktor Gazdag ahead of a Black Hat USA session on CI/CD pipeline risks reveals a scary, and expanding, campaign vector for software supply chain attacks and RCE.

Advice for 2nd Interview for Red Team Internship
https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/

The qualifications for the internship: Has or is pursuing all of the following -pursuing a relevant bachelor's degree -good communication skills, can work within a team and meet deadlines -basic knowledge of network protocols My first interview wasn't a technical interview. The interviewer just asked me basic questions about myself to get to know me and why I wanted to intern at their company specifically. She informed me that the second interview will be done by three people: two security consultants from their red team and a manager of business solutions. To give some insight as to what the internship will be like, during my first interview I asked my interviewer what to expect to be doing day to day. She told me I would be working alongside the red team on their current project. I would also work on the helpdesk a little. And I would get to work with the business consulting team as well to see how they meet with clients. This is all to try to give me different aspects of what their company does and give me solid hands on experience. She did say primarily though that the internship focuses on working with the red team. My question is what should I expect from the second interview? Are they expecting me to be able to answer technical questions about pentesting? I have some experience doing CTF's. I am by no means a master at them but I have been doing them everyday to try to learn more and improve. Any questions that I should expect to see so I can prepare for them? Any advice would be appreciated! Thank you in advance! submitted by /u/tyllanth (https://www.reddit.com/user/tyllanth)
[link] (https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/) [comments] (https://www.reddit.com/r/redteamsec/comments/wkp01t/advice_for_2nd_interview_for_red_team_internship/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Walkthrough: RootMe [PT/BR]

https://cdn-images-1.medium.com/max/700/0*7E86qzE4iN8s_GPJ.png
E aí viajantes, beleza? Seguindo o roteiro, hoje resolverei mais uma máquina lá do Try Hack Me! Dessa vez a máquina vai ser a “RootMe”…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Walkthrough: Simple CTF [PT/BR]

https://cdn-images-1.medium.com/max/700/0*p1srD28uioiYxlxw.png
Hey, e aí! Tranquilo? Hoje vamos resolver a máquina “Simple CTF”. Essa máquina é de nível fácil mas que precisamos conhecer algumas…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tudo (na verdade o básico) sobre Directory Traversal [PT/BR]

https://cdn-images-1.medium.com/max/1200/1*6fIXgv8dWgvx310StmKJWQ.png
Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Malicious Apps Discovered over Google Play Store

https://cdn-images-1.medium.com/max/640/0*KwtNlVh2fqzJdTt5.jpg
We already know that malicious attackers do several things to work their way out of any situation while hiding themselves in disguise…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKER DOUBLE SUMMER 2022 GUIDES — Part Sixteen: SIGS, EVENTS & PARTIES IN LAS VEGAS

https://cdn-images-1.medium.com/max/976/1*ByOAX3btJSf3eKckcMstIQ.jpeg
Welcome to the DCG 201 guide to Hacker Double Summer! This is part of a series where we are going to cover all the various hacker…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What scam is going on here? I blocked so now I can’t get the whole conversation. But he new my location and profession which is nowhere on my profile…what’s happening?

https://b.thumbs.redditmedia.com/JCzXCHG7cAtcsf3RZOjqdFB1vw62o_H0p5Ms9eH3Yqw.jpg submitted by /u/uniqueusername5001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

A guide on Cloud Penetration Testing
https://www.reddit.com/r/Pentesting/comments/wkqpk4/a_guide_on_cloud_penetration_testing/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/Bossy_Mic (https://www.reddit.com/user/Bossy_Mic)
[link] (https://www.getastra.com/blog/security-audit/cloud-penetration-testing/) [comments] (https://www.reddit.com/r/Pentesting/comments/wkqpk4/a_guide_on_cloud_penetration_testing/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Curve Finance Attack Incident Analysis

https://cdn-images-1.medium.com/max/1266/1*ht-VfOz-MMuAQJspS3A2gg.png
The incident occurred on August 10, Numen Cyber Labs through on-chain transaction analysis and Twitter messages found that the famous…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video