Redline Stealer
https://medium.com/@rangerwooz/redline-stealer-89623ceff9f5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Redline StealerContinue reading on Medium » (https://medium.com/@rangerwooz/redline-stealer-89623ceff9f5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Server Side Request Forgery (SSRF) Attacks
https://medium.com/@rajeevranjancom/server-side-request-forgery-ssrf-attacks-e8bdc5e17a68?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Server-side request forgery (SSRF) attacks exploit software vulnerabilities that could allow an attacker to trick the server-side…Continue reading on Medium » (https://medium.com/@rajeevranjancom/server-side-request-forgery-ssrf-attacks-e8bdc5e17a68?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Unsubscribe any user’s e-mail notifications via IDOR
https://sagarsajeev.medium.com/unsubscribe-any-users-e-mail-notifications-via-idor-2c2e05b79dac?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IDOR allows attacker to unsubscribe any user from the Websites email service.Continue reading on Medium » (https://sagarsajeev.medium.com/unsubscribe-any-users-e-mail-notifications-via-idor-2c2e05b79dac?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why you should secure your printers for greater data security

Most printers these days can connect wirelessly via Wi-Fi. This opens up a whole new world of hacking opportunities for cybercriminals, as they can target a Wi-Fi network and potentially access the devices connected to it without coming into direct contact with them.

Some printers that accept print jobs via File Transfer Protocol can be used to perform Nmap "bounce" scans, though this does not always necessitate administrative privileges.

Identifying the syslog server on a network and resetting the printer's IP address to that of the server, creating an IP confict and confusing log traffic, preventing security incidents from being logged partially or entirely, was one use I discovered back in the day.

Most network equipment, like routers and switches, can send Syslog messages.

Not only that, but *nix servers also have the ability to generate Syslog data, as do most firewalls, some printers, and even web-servers like Apache.

Windows-based servers don’t support Syslog natively, but a large number of third-party tools make it easy to collect Windows Event Log or IIS data and forward it to a Syslog server.

There are custom ROMs that masquerade as firmware upgrades and otherwise function normally, but install a small backdoor that grants access to the rest of the network (or can be used as a launching point for attacks on other networks). I won't go into detail because these aren't widely known or available. Because many printers support wifi printing, this would work on a network that is otherwise airgapped.

You can persuade the printer that it only prints postcards, much to the frustration of users whose jobs take up a small square on a series of otherwise blank pages.

Regularly updating your printer's firmware is the best way to keep its security features up to date. It can be the difference between protecting your printer and making it an easy target for attackers.

You should also disable wireless printing as much as possible on your printer, as it's often the wireless connection that increases the chances of a hack. If you only use your printer via a hardwire connection, you should permanently disable wireless printing.

While it's easy to assume that printers are pretty basic pieces of technology that need no protection, we know that printers are often the weakest link in a network and the most unsuspecting targets for an attack. So, if you want to lower the chance of a cyberattack on your facilities across the board, it may pay off to ensure that your printer is being taken care of, too.

submitted by /u/Simonvilla1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a PDF file contain a virus?

A pop-up window has downloaded a PDF file. I didn't pay much attention to it, but then I did a clean install of Windows just to be sure. Could it be a virus?

submitted by /u/Vojt33w
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone have any experience with the DSI's Critical Infrastructure Security Summit?

Website

It will have a bunch of notable people in the field and I was wondering if it would be worth the massive price tag to go. I am a junior student looking to make connections, so should I wait until I graduate? I qualify for the student discount as well.

submitted by /u/bbbcsgalcm
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unsubscribe any user’s e-mail notifications via IDOR

IDOR allows attacker to unsubscribe any user from the Websites email service.Continue reading on Medium »
Read more...

Hacking on Medium
Advent of Cyber 3 (2021): Day 22 Write-up [TryHackMe]

https://cdn-images-1.medium.com/max/600/1*gcGgr1BB9f7ra8oozuY5hQ.jpeg
Welcome to Day 22 of Advent of Cyber 3 write-up.

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
An average day in the life of an ethical hacker

Whilst feeling like this post is going to be incredibly like something you’d read on Buzzfeed, I thought it may interest people to know…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Get An Easy Yes

Is it easier to say yes or no?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video