Hacking on Medium
What is The Root Cause of Ransomware Attacks?

https://cdn-images-1.medium.com/max/2240/1*5WUhJAAHwf3EpKIaFl08jw.png
Do you know what is the root cause of the majority of ransomware attacks? It is the error in the configurations in the systems and devices…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Burner phones

Excuse my ignorance but why are burner phones trashed? I understand the concept of it. It’s usually a flip phone that is used a few times times to communicate a few times before disposed because they are inexpensive and virtually unhackable. Why wouldn’t they just take the SIM out and get a new one?

I’ve done my research and found out how cellphone signals are triangulated. SIM cards can also carry information and can provide the IMEI from a phone to cellular carriers. Most tracking and hacking is done on smartphone these days. What are the chances of government agencies keeping tabs on that IMEI to see if it reconnects to a specific carrier?

In terms of the phone I understand that the IMEI is programmed into the phone and the numbers come off a database that can identify the phone manufacture and model. I wondered why isn’t there a tool that can spoof IMEI numbers into believing it’s another phone model that is currently not in use. I know each phone processor is different and they all use a different set of instructions so maybe a universal tool is not viable but say only for a specific phone brand or model.

Is such tool possible to create? And also why can’t people just swap out SIM cards?

Didn’t know where else to post I’ve just been curious for a long time.

submitted by /u/FapTapAnon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How accounts are cracked? (netflix,spotify,...)

Just as the title says, how cracks work in term of cracking accounts like spotify,netflix...

submitted by /u/Joe-seph002
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Think this would work? (evasive malware lab dabbling)

So for the past few weeks, I've been playing with making windows defender evasive shellcode loaders to get initial access to my windows 10 lab environment.

My payloads can get me initial access, but I'm walled in behind UAC and windows defender can still catch me if I try to sneak in more tools (e.g. winpeas, mimikatz, lazagne...you know, stuff you'd want to test in an engagement).

I know I can impair defenses (both defender and future UAC use) if I can get UAC-elevated access to powershell, but currently I can't.

my idea for how I could do this:

1) bind my payload to an installer that needs UAC elevation to run and installs a large program that takes forever to complete installation for.

2) payload injects shellcode into the UAC-elevated installer process

3) immediately on getting the shell, impair defenses.

4) migrate my shell to something more stable like spoolsv.exe or some other trivial but always on service.

5) ?????

6) do hacker shit with defenses impaired.

Does this sound like it would work, or is there something better I could be doing?

submitted by /u/_vercingtorix_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

eJPT info
https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/

Hello. I would like to get the eJPT exam voucher. I have already followed the entire preparation course + all the labs. Can anyone who took the exam tell me what kind of questions they received? And how was the laboratory set up (2 reachable machines, 1 reachable machine and 1 needs rotation ...)? submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/) [comments] (https://www.reddit.com/r/Pentesting/comments/x6pkbe/ejpt_info/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[PT] — Caso de Uso → Pivoting

https://cdn-images-1.medium.com/max/979/1*jT96sbHXIdLwD9kdJO8Lzg.png
Estarei mostrando a resolução de um desafio de um Lab da INE (Clique aqui para ver o treinamento) que envolve os tópicos abaixo:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Damn Vulnerable DeFi: “Free Rider” (Level 10) — Solution

https://cdn-images-1.medium.com/max/1137/1*m1yAF3llPYFd7g8SAjCd7w.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
O que é Pentest?

https://cdn-images-1.medium.com/max/1080/1*av-5YZL4J8THFRnGQdL5vA.png
Explicando de forma simples o que é e quais são os tipos de Pentest.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Google lanza actualización urgente de Chrome para parchar una nueva vulnerabilidad 0-Day

https://cdn-images-1.medium.com/max/1773/0*_lOeykshwZQ-hBc4
Google envió el viernes soluciones de emergencia para abordar una vulnerabilidad de seguridad en el navegador web Chrome que, según dijo…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Multa de €405m a Instagram por violación de la privacidad a niños de acuerdo a RGPD

https://cdn-images-1.medium.com/max/1750/0*D5PgP21dxx5H5k4K
La Comisión Irlandesa de Protección de Datos ha multado a la plataforma de redes sociales Instagram, propiedad de Meta, con 405 millones…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kerberos

https://cdn-images-1.medium.com/max/2000/0*a7GE_IbdblF4uFSB.png
What is Kerberos and how does it work?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
15 Types of Hackers — You Should Know About

https://cdn-images-1.medium.com/max/2600/0*29s3PNnU-fZuEYgP
You’ll find 15 distinct categories of hackers and countermeasures here. Just click on the article below to get started with the reading.

Continue reading on ILLUMINATION »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kerberos Delegations

https://cdn-images-1.medium.com/max/2560/0*rjQo6tB54Bjom8pn
วันนี้จะมาอธิบาย Delegation แบบต่างๆบน Kerberos ซึ่งจริงๆก็มีคนเขียนไว้เยอะแล้ว…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video