Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How do you deal with false positives when scanning CentOS systems?

A network scan of a CentOS system might reveal that it runs Apache version 2.4.4. The version itself contains many vulnerabilities but because of the way CentOS works, they get patches and not version updates.

So how would I go about knowing if this Apache version it'd running is a vulnerable one? My guess was to test for vulnerabilities but would create a lot of traffic

submitted by /u/pipewire
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How do you deal with false positives when scanning CentOS systems?

A network scan of a CentOS system might reveal that it runs Apache version 2.4.4. The version itself contains many vulnerabilities but because of...

4 viewsedited 10:12

4 views10:22

Hacking Articles Tips Tricks Videos Tutorials

4 views10:22

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Kali Linux 2022.3 Release (New Tools in Kali & Test Lab)

Kali Linux 2022.3 Release (New Tools in Kali & Test Lab)Post Views: 67 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
In light of “Hacker Summer Camp 2022” (BlackHat USA, BSides LV, and DEFCON) occurring right now, they wanted to push out Kali Linux 2022.3 as a nice surprise for everyone to enjoy!

The highlights for Kali’s 2022.3’s release:

* Discord Server – Kali’s new community real-time chat option has launched!
* Test Lab Environment – Quickly create a test bed to learn, practice, and benchmark tools and compare their results
* Opening Kali-Tools Repo – They have opened up the Kali tools repository and are accepting your submissions!
* Kali NetHunter Updates – New releases in their NetHunter store
* Virtual Machines Updates – New VirtualBox image format, weekly images, and build-scripts to build your own
* New Tools In Kali – Would not be a release without some new tools! Kali is on DiscordThey have started up a new discord server, Kali Linux & Friends. This is their new place for the Kali community to get together and chat in real-time all about Kali Linux (as well as other community projects that OffSec has to offer).

This is a community server, all with common interests. They do not have the goal to get as many users as possible, instead, they are growing a place for each other to help one another. They are focusing on quality not quantity. Please bear in mind, if you are looking for help, first search for your problem, ask questions, then wait for the community support from your peers. Remember no one is under obligation to help you, and you are more likely to get assistance if you are polite and show you have put some effort into solving your own issue.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Test Lab Environment“A craftsman is only as good as their tools.”

This is true, even outside of Information Security field, you need to understand your tools to master your craft. You can read their code to understand how they work (or a very detailed REAME at times), help screens and their manuals (if they have one) will give you a starting point on how to use them. But where do you use them especially when they are security tools? What output should the tool give? What is a successful run? How long does the tool take? What is its baseline? How can I get experience with it? All valid questions which need answers.

To try and achieve these answers, most seasoned professionals will practice first (hopefully in a known, controlled environment!). This is where a “Test Bed/Laboratory” comes into play. Theory is different to practical (You may remember this the first time you were tasked of something new to accomplish). You can take the static theory-based output from help screens, READMEs, and manual pages and hands-on enter the data into programs and monitor the dynamic output and practical response. Its one thing to read something, its another to do it. The result often gives people a deeper understanding.

Practice makes ~perfect~ permanent. So practice, practice, practice! Inquisitive minds can then start to experiment with new configurations, options, commands and flags. Then start to chain items together, or compare similar and alternative solutions, then compare the results, to become more educated and build up a benchmark of knowledge. This grows experience.

They are trying to make it a bit easier to build up your test lab. So we have packaged up:

* DVWA – Damn Vulnerable Web Application
* Juice Shop – OWASP Juice Shop
All you have to do is apt install &[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Kali Linux 2022.3 Release (New Tools in Kali & Test Lab) | Black Hat Ethical Hacking

Kali Linux 2022.3 release is here. Enjoy new features including: Test Lab Environment, New Tools, Virtual Machines and Kali NetHunter updates. Also, connect to the newly created Discord Server for Kali's community real-time chat.

9 viewsedited 10:22

About

Blog

Apps

Platform