Hacking Articles Tips Tricks Videos Tutorials

This is post from my new blog in which I will be sharing notes about things I am learning. It will be centered around security/application…Continue reading on Medium » (https://medium.com/@debski.jakub/introduction-to-web-apis-9d82ee5cbd8f?source=rss------bug_bounty-5)

9 views19:01

Introduction to web APIs

This is post from my new blog in which I will be sharing notes about things I am learning. It will be centered around security/application…Continue reading on Medium »
Read more...

11 views19:30

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Anyone know of some sort of physical camera that can capture the entire screen of your monitor?

Wanted to try and implement this to see if this can be used to detect a change in the screen for hacking in games and / or to monitor if anyone has messaged me on my work laptop.

I know I could set up a camera with tripod but I swear I saw some hardware that sits on the corner of your monitor and is able to basically capture data be it a screenshot or just RGB.

I'd like to avoid setting up a camera with tripod in front.

Edit : this is mainly for my work laptop, so I can’t use any software.

submitted by /u/tobysnake
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Anyone know of some sort of physical camera that can capture the...

Wanted to try and implement this to see if this can be used to detect a change in the screen for hacking in games and / or to monitor if anyone...

8 viewsedited 21:54

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
subdomain takeovers

Subdomain takeovers are an easy attack if you manage to find a DNS misconfiguration. You can takeover someone's subdomain if it's pointing to a domain that's unregistered or to a web service (like netlify) that doesn't have the subdomain actually setup.

Other approaches include looking for websites which include .js JavaScript files from domains which are no longer registered. Quite a few WordPress plugin attacks use this approach.

I wrote a tool to help identify subdomain takeover opportunities and it's has nearly 60 signatures now. You can feed it domains from a service like project discovery, or have it fetch domains for you from aws or cloudflare etc.

https://github.com/punk-security/dnsReaper

submitted by /u/punksecurity_simon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

subdomain takeovers

Subdomain takeovers are an easy attack if you manage to find a DNS misconfiguration. You can takeover someone's subdomain if it's pointing to a...

6 viewsedited 21:54

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure

The state-sponsored group particularly targets organizations working on behalf of the Uyghurs, Tibet, and Taiwan, looking to gather intel that could lead to human-rights abuses, researchers say.

4 views22:24

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
'Operation Sugarush' Mounts Concerning Spy Effort on Shipping, Healthcare Industries

A suspected Iranian threat actor known as UNC3890 is gathering intel that could be used for kinetic strikes against global shipping targets.

4 views22:24

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
When Countries Are Attacked: Making the Case for More Private-Public Cooperation

The increased sophistication of cyberattacks makes them more widely damaging and difficult to prevent.

5 views22:25

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
'DarkTortilla' Malware Wraps in Sophistication for High-Volume RAT Infections

The stealthy crypter, active since 2015, has been used to deliver a wide range of information stealers and RATs at a rapid, widespread clip.

5 views22:25

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Google Chrome Zero-Day Found Exploited in the Wild

The high-severity security vulnerability (CVE-2022-2856) is due to improper user-input validation.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Google Chrome Zero-Day Found Exploited in the Wild

The high-severity security vulnerability (CVE-2022-2856) is due to improper user-input validation.

5 viewsedited 22:27

Hacking Articles Tips Tricks Videos Tutorials

Livestream video for Developing POC for CVE-2022-26923
https://www.reddit.com/r/redteamsec/comments/wr1np7/livestream_video_for_developing_poc_for/

Thanks to the participants, it was really fun even though a lot of mistakes were made haha. Full, uncut video is uploaded to my YouTube: https://youtu.be/z86tfhMU_vU submitted by /u/lsecqt (https://www.reddit.com/user/lsecqt)
[link] (https://www.reddit.com/r/redteamsec/comments/wr1np7/livestream_video_for_developing_poc_for/) [comments] (https://www.reddit.com/r/redteamsec/comments/wr1np7/livestream_video_for_developing_poc_for/)

___________________________
@hacking_Attack
@Hacking_Video

Livestream video for Developing POC for CVE-2022-26923

Thanks to the participants, it was really fun even though a lot of mistakes were made haha. Full, uncut video is uploaded to my YouTube:...

5 viewsedited 22:38

Hacking Articles Tips Tricks Videos Tutorials

5 views22:46

Hacking Articles Tips Tricks Videos Tutorials