Hacking on Medium
NATO documents from Portugal were stolen and put up for sale on the dark web.

https://cdn-images-1.medium.com/max/2600/1*eGHkpxzlnzwfR6yBG1JgWw.jpeg
In August, a group of hackers put secret military documents up for sale on the Internet. Among them are data on the modern weapons systems…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team Part 5 — Intro to C2 | TryHackMe

https://cdn-images-1.medium.com/max/2000/0*ct-G4Bbw7YwjijPm.png
Hello world and welcome to HaXeZ where today we’re going to be getting a bit more technical and looking at C2s. To clarify, C2 is short…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team Part 3 — Red Team Threat Intel | TryHackMe

https://cdn-images-1.medium.com/max/1964/0*kkVojXNl2ecKHvRw.png
Hello world and welcome to HaXeZ, in this post we’re going to be walking through the 3rd Red Team challenge in the Red Team Fundamentals…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Any known case studies on a beacon’s logic executing from within a GPU compute shader?
https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/

I’ve been tinkering with writing a chess engine as this fun security engineering project write-up where the vulnerable chess web app uses peer-to-peer and the attacker exploits the victim peer, the pieces start breaking the rules, we use memory forensics to try to analyze and detect the exploitation heuristically via dynamic run-time analysis with baselining… Anyway, I digress. As part of this project I’m thinking a lot about chess engines and wonder: Hmm, I could probably write a chess sim inside a GPU compute shader to calculate a large number of variations in parallel. Then it struck me: If I can do that, couldn’t we write beacons which mostly execute their malicious code within a GPU shader, then pass the I/O in and out of a more benign process? You’d still need to do some stuff on the CPU (any effects on target), but with popular C2 frameworks you have this significant, sort of robust beacon agent code injected in a process to be detected. Sleep masking hides it from memory scanning kinda sorta, but not really against good defensive techniques. Seems like you could hide most of that memory signature inside a GPU compute shader and have much less “robust” code (essentially attack surface for defenders to use for detection) in RAM. Doubt any EDRs out there are scanning VRAM… Even if you did zero processing in a shader, even just hiding data in VRAM when not in-use (example: sleep masking) seems interesting on its own. Maybe someone’s heard of such a thing? Google is terrible with results when “GPU” and “red team” point to non-cyber branding slang. Google Scholar also turned up nothing. submitted by /u/Jonathan-Todd (https://www.reddit.com/user/Jonathan-Todd)
[link] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdlssd/any_known_case_studies_on_a_beacons_logic/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Bishop Fox Releases Cloud Enumeration Tool CloudFox

CloudFox is a command-line tool to help penetration testers understand unknown cloud environments.

Dark Reading: Attacks/Breaches
Microsoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs

In Microsoft's lightest Patch Tuesday update of the year so far, several security vulnerabilities stand out as must-patch, researchers warn.

Dark Reading: Attacks/Breaches
ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools

Cyber spies are using legitimate apps for DLL sideloading, deploying an updated range of malware, including the new "Logdatter" info-stealer.

Dark Reading: Attacks/Breaches
Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

Facebook lead-generation forms are being repurposed to collect passwords and credit card information from unsuspecting Facebook advertisers.

Dark Reading: Attacks/Breaches
U-Haul Customer Contract Search Tool Compromised

Password compromise led to unauthorized access to a customer contract search tool over a five-month window, according to the company.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Accidentally logged into Capital One using gym’s wifi.

Since it’s not recommended to login to public wifis, should I take action to protect myself?

submitted by /u/IsaPixza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

how do you bypass carbon black appcontrol?
https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/

Title states my question.. just looking for your seasoned wisdom. Thanks in advance! submitted by /u/AccomplishedRush4869 (https://www.reddit.com/user/AccomplishedRush4869)
[link] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/) [comments] (https://www.reddit.com/r/Pentesting/comments/xdnqh2/how_do_you_bypass_carbon_black_appcontrol/)

___________________________
@hacking_Attack
@Hacking_Video

Hydra
https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/

<!-- SC_OFF -->So I'm trying to use hydra to brute force a password check. It's for a class on VMs. How can I pull just logins from Active Directory? I've been able to pull users, but it's their legal names and not their logins. Then in Hydra, how do I know what protocol to use? <!-- SC_ON --> submitted by /u/w_sohl (https://www.reddit.com/user/w_sohl)
[link] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/) [comments] (https://www.reddit.com/r/redteamsec/comments/xdogjb/hydra/)

Hacking on Medium
WiFi Hacking

https://cdn-images-1.medium.com/max/797/1*j0QcGWI2yisfxL83SuN-7Q.png
WiFi

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Key Takeaways From the Twitter Whistleblower's Testimony

Twitter did not know what data it had nor who had access to it, Peiter "Mudge" Zatko told Congressional lawmakers during a Senate panel hearing.

hacking: security in practice
How did discord crash gifs work?

There used to exist gifs that, if viewed, crashed the discord client. It seems the bug that allowed this has been patched since then, but I have had trouble finding information on how exactly it worked online.

How exactly did these gifs work?

Thank you!

submitted by /u/Binbasher-03
[link] [comments]

hacking: security in practice
Is learning Burpsuite worth it?

I've been reading articles on Burpsuite and it seems like a pretty good and comprehensive tool.

Is it worth it to take the time and kind of learn it in detail? What kind of actions can you perform with it? Does it exploit vulnerabilities, brute force, or anything like that?

submitted by /u/z0mbiechris
[link] [comments]