/). Search for a random string domain name (e.g. "fvcm98duf") and check the less popular TLDs, like .xyz, as they will probably cost around 3$ per year.

After you purchase a domain name, you can use certbot (Let's Encrypt) to get a trusted certificate in 5 minutes or less:

1. Append an A record to your Domain's DNS settings so that it points to your server ip,
2. Follow certbots official instructions.

Tip: Don't install and run certbot on your own, you might get unexpected errors. Stick with the instructions. Changelog2022-06-19- Added the exec prompt command (you can now execute custom JS scripts against a session). 2022-06-23- I added two simple, dirty scripts as templates for testing the exec prompt command. I also fixed the cmd prompt's backward history access and made some improvements. FutureThe idea is to make it sharper, more reliable and expand its capabilities. Currently, i'm working on improving file captures. Download Toxssin

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Advent of Cyber 3 (2021): Day 18 Write-up [TryHackMe]

https://cdn-images-1.medium.com/max/600/1*SRe9N2evKwzQdmtn1pcUvQ.png
Welcome to Day 18 of Advent of Cyber 3 write-up.

Continue reading on DevOps.dev »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Advent of Cyber 3 (2021): Day 19 Write-up [TryHackMe]

https://cdn-images-1.medium.com/max/600/1*gb2A_Oq9x_AfTHw-9ULWug.jpeg
Welcome to Day 19 of Advent of Cyber 3 write-up.

Continue reading on DevOps.dev »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The number of companies caught up in recent hacks keeps growing

https://cdn-images-1.medium.com/max/800/0*G-AW_Uuz7bh-Dp7I.png
“Authy, LastPass, and DoorDash became a victim of a cyber attack, recently”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bandit Level (1–10) : OverTheWire

https://cdn-images-1.medium.com/max/1236/1*9s25lEeu-QFYGQaxBfIKaw.png
CTF Practice : Solution and explanation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Redline Stealer
https://medium.com/@rangerwooz/redline-stealer-89623ceff9f5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Redline StealerContinue reading on Medium » (https://medium.com/@rangerwooz/redline-stealer-89623ceff9f5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Server Side Request Forgery (SSRF) Attacks
https://medium.com/@rajeevranjancom/server-side-request-forgery-ssrf-attacks-e8bdc5e17a68?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Server-side request forgery (SSRF) attacks exploit software vulnerabilities that could allow an attacker to trick the server-side…Continue reading on Medium » (https://medium.com/@rajeevranjancom/server-side-request-forgery-ssrf-attacks-e8bdc5e17a68?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Unsubscribe any user’s e-mail notifications via IDOR
https://sagarsajeev.medium.com/unsubscribe-any-users-e-mail-notifications-via-idor-2c2e05b79dac?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IDOR allows attacker to unsubscribe any user from the Websites email service.Continue reading on Medium » (https://sagarsajeev.medium.com/unsubscribe-any-users-e-mail-notifications-via-idor-2c2e05b79dac?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why you should secure your printers for greater data security

Most printers these days can connect wirelessly via Wi-Fi. This opens up a whole new world of hacking opportunities for cybercriminals, as they can target a Wi-Fi network and potentially access the devices connected to it without coming into direct contact with them.

Some printers that accept print jobs via File Transfer Protocol can be used to perform Nmap "bounce" scans, though this does not always necessitate administrative privileges.

Identifying the syslog server on a network and resetting the printer's IP address to that of the server, creating an IP confict and confusing log traffic, preventing security incidents from being logged partially or entirely, was one use I discovered back in the day.

Most network equipment, like routers and switches, can send Syslog messages.

Not only that, but *nix servers also have the ability to generate Syslog data, as do most firewalls, some printers, and even web-servers like Apache.

Windows-based servers don’t support Syslog natively, but a large number of third-party tools make it easy to collect Windows Event Log or IIS data and forward it to a Syslog server.

There are custom ROMs that masquerade as firmware upgrades and otherwise function normally, but install a small backdoor that grants access to the rest of the network (or can be used as a launching point for attacks on other networks). I won't go into detail because these aren't widely known or available. Because many printers support wifi printing, this would work on a network that is otherwise airgapped.

You can persuade the printer that it only prints postcards, much to the frustration of users whose jobs take up a small square on a series of otherwise blank pages.

Regularly updating your printer's firmware is the best way to keep its security features up to date. It can be the difference between protecting your printer and making it an easy target for attackers.

You should also disable wireless printing as much as possible on your printer, as it's often the wireless connection that increases the chances of a hack. If you only use your printer via a hardwire connection, you should permanently disable wireless printing.

While it's easy to assume that printers are pretty basic pieces of technology that need no protection, we know that printers are often the weakest link in a network and the most unsuspecting targets for an attack. So, if you want to lower the chance of a cyberattack on your facilities across the board, it may pay off to ensure that your printer is being taken care of, too.

submitted by /u/Simonvilla1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a PDF file contain a virus?

A pop-up window has downloaded a PDF file. I didn't pay much attention to it, but then I did a clean install of Windows just to be sure. Could it be a virus?

submitted by /u/Vojt33w
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video