hacking: security in practice
I was attacked by .qqjj ransomware, I feel raped

I had downloaded the superDisplay apk on an old tablet that had been in storage for a while and had my main gmail open. Days after using it, the misfortune began.

​

It started with mining processes in my task manager, then moved to popups with common program names but as if they were designed in paint; finally, the pc restarted itself and officially all my files were encrypted.

​

In my ignorance, I thought it would go that far.... The next morning my instagram account was full of bots and stories posted about btc and the like. I immediately changed my gmail password but it was too late, they disconnected me.

​

It felt horrible but I took it easy, luckily I'm poorer than that hindu. I think when they saw that my epic games library was full of the games they give away they felt sorry for me XD, good thing they didn't get into my paypal because unfortunately for them, I only have $0,25.

​

When I reinstalled a new OS, I remembered that I had the email added to the microsoft authenticator (along with my ig, github, linkedin and other accounts) plus a secondary email which I use for the digital wallet I use in my country. From there I managed to access and change absolutely everything and add more security steps for each important account :). I still feel vulnerable, I hope it ends here.

​

As we say in my city: "La mejor forma de aprender es a los coñazos".

​

PS: can you recommend me a good free antivirus and some other software? that doesn't consume a lot of resources :( my pc is a potato.

submitted by /u/Qnaice
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Server Side Template Injections Portswiggers Labs Walkthrough Part III

https://cdn-images-1.medium.com/max/1366/1*5d_0P3CtzlMhCXMbUViNDw.png
Hi, My name is Hashar Mujahid, Today we are going to solve some more SSTI labs from Portswiggers. If you want to learn what Server Side…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TRYHACKME: Easy Peasy (writeup)

https://cdn-images-1.medium.com/max/646/1*X_AmpFA3gUou96zWn2cctQ.png
Level: Easy

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Talkative — HackTheBox

https://cdn-images-1.medium.com/max/1400/1*FXz4t7c6K0zjqEuDxRW8tg.png
Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding YAML Deserialization

https://cdn-images-1.medium.com/max/1600/0*Hj-M20pImAeWzJnu
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Server Side Template Injections Portswiggers Labs Walkthrough Part III

Hi, My name is Hashar Mujahid, Today we are going to solve some more SSTI labs from Portswiggers. If you want to learn what Server Side…Continue reading on InfoSec Write-ups »
Read more...

Server Side Template Injections Portswiggers Labs Walkthrough Part III
https://infosecwriteups.com/server-side-template-injections-portswiggers-labs-walkthrough-part-iii-bc6983412a3d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, My name is Hashar Mujahid, Today we are going to solve some more SSTI labs from Portswiggers. If you want to learn what Server Side…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/server-side-template-injections-portswiggers-labs-walkthrough-part-iii-bc6983412a3d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MacroPack - will simplify antimalware solutions bypass and automatize the process from vb source to final Office document or other maldoc payload type. This tool can be used for red teaming, pentests, demos, and social engineering assessments.

https://external-preview.redd.it/XBGvKd2L4z_W1548iqGagPaeXMmp5pgRXH--7acm3gg.jpg?width=640&crop=smart&auto=webp&s=2c15d389bdc2ceb84641054602ed8d753bb5fd69 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing: Não morda essa isca!

https://cdn-images-1.medium.com/max/1640/1*GJb8wz6cAWDmspGS_cS3Lg.png
Neste artigo vou caminhar com você na tentativa de responder as seguintes perguntas: O que é? Por que ainda é tão recorrente? Quais são os…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Certificates as a self employed pentester needed?
https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/

<!-- SC_OFF -->I‘m planning to become a self employed pentester soon. I work as a pentester since 5 months already and have a degree in cybersecurity. How important is it to have certifications when I want to become an independent pentester? At my work I also do all the pentests alone and it doesn‘t seem to be a problem to find customers for my company. <!-- SC_ON --> submitted by /u/Kamelbaum1 (https://www.reddit.com/user/Kamelbaum1)
[link] (https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/) [comments] (https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/)

hacking: security in practice
Rubber ducky untraceable reverse tcp

I have an older USB rubber ducky and I’ve been messing around with some of the reverse tcp scripts using meterpreter and stuff. Is it possible to link into these remotely through like a proxy network or something?

submitted by /u/bltburglar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

DoS and DDoS attacks
https://medium.com/@rajeevranjancom/dos-and-ddos-attacks-4cfe5926826c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video