Hacking on Medium
Blue Machine Walkthrough — How to get root ?

https://cdn-images-1.medium.com/max/1024/0*0Neqs0ptVQPHu9Oe.png
Difficulty : Easy

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OSWP course review (2022)

https://cdn-images-1.medium.com/max/1094/1*pEf8NGX-HDr9xNLg58LVRg.png
A couple of months ago I finished OSWP and wanted to share an honest but brief and straight to the point review.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ciphershastra — Maya Puzzle

https://cdn-images-1.medium.com/max/1594/1*h9rae3rIMBMvvQt0Qf3-OQ.png
You can find the challenge here: https://ciphershastra.com/Maya.html

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Perfect Routine Is the Quickest Way to Destroy Your Side Hustle

https://cdn-images-1.medium.com/max/2600/1*msMFovmqF4WnILS27OvkFg.jpeg
Sprinkle some fun into the day won’t you?

Continue reading on Practice in Public »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers Demonstrate the Ability to Unlock a Tesla Model Y

https://cdn-images-1.medium.com/max/2600/1*KZGWJudeZ4EZ7qjmM1OW9g.png
A new hack has demonstrated the possibility for a Tesla Model Y to be unlocked and started in under a minute by replicating a keycard from…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Nim-RunPE : A Nim Implementation Of Reflective PE-Loading From Memory

Nim-RunPE , is a Nim implementation of reflective PE-Loading from memory. The base for this code was taken from RunPE-In-Memory – which I ported to Nim.

You’ll need to install the following dependencies:

nimble install ptr_math winim

I did test this with Nim Version 1.6.2 only, so use that version for testing or I cannot guarantee no errors when using another version.

Compile

If you want to pass arguments on runtime or don’t want to pass arguments at all compile via:

nim c NimRunPE.nim

If you want to hardcode custom arguments modify const exeArgsto your needs and compile with:

nim c -d:args NimRunPE.nim– this was contributed by @glynx, thanks

More Information

The technique itself it pretty old, but I didn’t find a Nim implementation yet. So this has changed now. https://s.w.org/images/core/emoji/14.0.0/72x72/1f642.png
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZP1bKpmhyBWpqCcgK2mHuaBGMcQRN4GCSSfjwzk4O0flEpJiIuzV02pMFvkPB9Q6nzFU7FHs3C4HVDiu2d619WLtB2dwuxkShroq5eI0ApQVhI_meWQ6d-c5YreDeRmC1Sl2O3nZ6t7ZyjNc7k2R6WOv4S0qshqLtmzlWHiLTA14_kN22orZgzFW4/s1306/54.png
If you plan to load e.g. Mimikatz with this technique – make sure to compile a version from source on your own, as the release binaries don’t accept arguments after being loaded reflectively by this loader. Why? I really don’t know it’s strange but a fact. If you compile on your own it will still work:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQKl-WRaOXWh_yfpdJXZKtWVJyfvL6ZiWZMHIrAbv2Do6RVItdK5bXr3-LhXzhRa0fkkJ2z52AlNZuHIs_4cgm4sjm9_BePF7q5Q4kDbmMZ67D6N55IACGI5n9w7epivLdX3-e3tddc7VOa39Tkrv76MxCeItROYtx8ROMMOCh7_72gZHppQrqEvxO/s1493/78.png
My private Packer is also weaponized with this technique – but all Win32 functions are replaced with Syscalls there. That makes the technique stealthier.
Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems

The ransomware gang has been seen exploiting a Mitel RCE flaw discovered in VoIP devices in April (and patched in July) to perform double-extortion attacks.

Dark Reading: Attacks/Breaches
Business Security Starts With Identity

How identity-centric security can support business objectives.

Dark Reading: Attacks/Breaches
Attackers Can Compromise Most Cloud Data in Just 3 Steps

An analysis of cloud services finds that known vulnerabilities typically open the door for attackers, while insecure cloud architectures allow them to gain access to the crown jewels.

Dark Reading: Attacks/Breaches
Gartner Survey Shows 75% of Organizations Are Pursuing Security Vendor Consolidation in 2022

.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ohio Raises a Volunteer Army to Fight Election Hacking

https://external-preview.redd.it/FH3t4REaOfvjldMSvVbJsx-uR68paDwA_NhG0vO9GbY.jpg?width=640&crop=smart&auto=webp&s=153376ecdff258352a8ae81be038e03ff099c52b submitted by /u/Straganaugth
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding Sn1per

I have been using Sn1per to test websites. I understand that it's not really a tool in itself but a collection of tools that run in an automated fashion. I should probably learn each tool individually as well.

If Sn1per finds an exploit that it has a module for will it automatically open up a Meterpreter session? Also, are there any other good programs like Sn1per?

submitted by /u/z0mbiechris
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Now that Mandiant is owned by Google, who is the biggest pure play cybersecurity consulting services firm?

The only other pure play cybersecurity consulting services firm that has as high a profile seems to be Dragos - anybody have other ones?

submitted by /u/AJGrayTay
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video