hacking: security in practice
Say Hello to Crazy Thin ‘Deep Insert’ ATM Skimmers

https://external-preview.redd.it/bb6WJ_TwpGou2T3O4vPvAaFsNzMtE3eyCl8iggIDgw8.jpg?width=640&crop=smart&auto=webp&s=cfc3b715a7015931db039df5bfcbe92f052c39a7 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What programming languages are required in the industry

I’ve never been a big fan of coding and only have slight knowledge in different languages.

What languages are quite popular and required in the world of hacking/cyber security?

submitted by /u/fgtethancx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Trying to install Tuxcut but it gives an error: This computer is not connected"

This is driving me crazy i want to install this software but it gives this computer is not connected error message when i am sure connected with my wifi adapter. I have kali arm64 on VM.

submitted by /u/Walid_Fakhfakh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SharpImpersonation - A User Impersonation Tool - Via Token Or Shellcode Injection

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIaVq_Sc26gjUeHhYnx_atW9RGEfnKBsGhkKqwiuFG5h16oOpqlvjghLwTE93QhaVSv5AiWAa3Li2oH2BtVrkDlZ9MmjakxuIQtWALuZhe4rhobPZU2ZPvJNCf0Fswv6c4ogPaP0i-mO4RWrb_ovL7NK-EQ6pYFSFrhk2wSaphIUscVgX2uii7DlG-eg/w640-h246/SharpImpersonation_1_List.png This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. The code base was taken from:

* https://github.com/0xbadjuju/Tokenvator

A blog post for the intruduction can be found here:

* https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/ List user processesPS > PS C:\temp> SharpImpersonation.exe listhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIaVq_Sc26gjUeHhYnx_atW9RGEfnKBsGhkKqwiuFG5h16oOpqlvjghLwTE93QhaVSv5AiWAa3Li2oH2BtVrkDlZ9MmjakxuIQtWALuZhe4rhobPZU2ZPvJNCf0Fswv6c4ogPaP0i-mO4RWrb_ovL7NK-EQ6pYFSFrhk2wSaphIUscVgX2uii7DlG-eg/w640-h246/SharpImpersonation_1_List.png List only elevated processesPS > PS C:\temp> SharpImpersonation.exe list elevated Impersonate the first process of the target user to start a new binaryPS > PS C:\temp> SharpImpersonation.exe user:https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqKIsuXDGrcqR40ksnbTeJcDYDnJrZFqbMARk4hfwKmPb7fJMncqwMxb8kTz44_vVH4gvZEHxyZbry5AJE5s-fBupCk8ZkwStVH2cFxbKEn_msN_9Fj1sT2ek46nlDeAZEnkk6ewx64sP6pkUupe7pS6Nb8IFu3O76aNXt3wsH3tmUy7J_y8OAJwHbA/w640-h474/SharpImpersonation_2_CreateProcessWithTokenW.png Inject base64 encoded shellcode into the first process of the target userPS > PS C:\temp> SharpImpersonation.exe user:https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRGSbb8egtKwBxxt_qdv-H0TwKtC-Mh4ZBS5py-BOQH5LQ9j6Sl1z_VgstFEw_tbPb_SYCdWXu0svb_BAargRLfVOP0dwgd3Zm5S-J37jrYiwyMIhVHkSXasEfLVcn25W6Jz1UCTpX7ffSXyrJfNv5wEy5K1QnjXi-wvekJPYUE_BOO4g2xC3IMGa7uQ/w640-h316/SharpImpersonation_3_ShellcodeBase64.png Inject shellcode loaded from a webserver into the first process of the target userPS > PS C:\temp> SharpImpersonation.exe user:https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi82cyZFk3qU2SJmp_ffpIcWcEWIVi1MLe8oWPqg0dfqnEk3CR23DiO7LnmxcG3_E24OeNkLqgNNOcvL5IiH3NNJFUVnks7jh1stXtRkL3mGC7HKi-MfCAlImFJuxae4liKw1BbdujhAzUm_wqwGrXo1MFtYMNEmAd9tpU5AdKP-ufVuspzbwttYqAvSQ/w640-h350/SharpImpersonation_4_ShellcodeWebDownload.png Impersonate the target user via ImpersonateLoggedOnuser for the current sessionPS > PS C:\temp> SharpImpersonation.exe user:https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj33wbKeh8K7StXNa61poxomlUfrABtFZw-Bjz8q-t6et-jyT05sBbjNYYfvZCBWmuh4VTASe8Qqa1GMyeJklWscQIonjR6auoXeLswg1d6q45NOqszV7Y5ahXntkszTH6s25VABvidZF_owuefqeQRt7MNOK70iGDO_TjPmOtv_iSvrVxS_x3A_oRLIg/w640-h460/SharpImpersonation_5_ImpersonateLoggedOnUser.png Download SharpImpersonation

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Gitea 1.16.6 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
News247 News Magazine 1.0 Cross Site Scripting

https://4.bp.blogspot.com/-42b-8Yu8ql4/WWlvfoDuyhI/AAAAAAAAIQE/GMGQD7Uo7DMncRccI_LNcWgfvYRkd0zwQCLcBGAs/s1600/h86.png
News247 News Magazine version 1.0 suffers from a persistent cross site scripting vulnerability.

SHA-256 | 0ea0c812171a55c5cffd9cd5752f28312a1e018fc62d7680951d7ba32234f7be

Download
# Exploit Title: News247 - News Magazine (CMS) v1.0 – Stored Cross Site Scripting (XSS)
# Exploit Author: Ravinder Verma
# Date: Septmeber 14, 2022
# Vendor Homepage: https://www.sourcecodester.com/php/14952/news247-news-magazine-php-script.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/news247.zip
# Tested on: Kali Linux, Apache, Mysql
# Vendor: 255programmer
# Version: v1.0
# CVE [Reserved] : CVE-2021-41731
# Exploit Description:

# News247 - News Magazine (CMS) v1.0 suffers from a stored cross site
scripting (XSS) Vulnerability. Admin can publish blogs under various
categories. When creating new "blog category", if admin give malicious
payload like *"">x * into the
category name field and publish that blog. Then it allows you to execute
arbitrary JavaScript in the context of the whole user who visited that
page. It can be abused to steal session cookies, perform requests in the
name of the victim or for phishing attacks.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ransomware prevention: Top Security Tips

https://cdn-images-1.medium.com/max/1184/1*jNwZtc6YcRbS7-Zg8sXsfg.jpeg
Why ransomware prevention is so important

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Announcing the global ioki Hackday 2022

https://cdn-images-1.medium.com/max/1060/1*F0UM2TSOAq6TMG2lqJEtyQ.jpeg
And you can be part of it to get some swag!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Operational technology : Everything You Must Know About IT/OT Convergence

Technology known as operational technology (OT) largely regulates and monitors physical operations. It has the ability to automate and manage machinery, tools, sensors, and other resources. Manufacturing, healthcare, and transportation industries all employ OT systems. Engineering, IT, and operations management are just a few of the many disciplines that fall under the umbrella of operational technology.

OT systems include:

Intelligent Process Automation (IPA): This OT solution uses computerised algorithms to monitor factors like temperature or pressure and regulate operations such as chemical reactions on a factory floor.
Web-enabled Enterprise Systems (WES) – These OT systems provide an integrated view of the firm’s clientele or business operations by combining data from numerous sources within the organisation. Customers might be able to use an automated system to make payments through their bank accounts or check their balances online, for instance.
Industrial Automation: Industrial automation systems are used for tasks like machine repairs and oil changes on manufacturing floors. The “technology required to control the production and delivery of goods, services, information, and ideas” is what is meant by operational technology (OT).

All the physical systems used in a process or operation are referred to as “physical infrastructure” (PI) (such as pumps or conveyors). Additionally, it has a range of sensors that transmit data about these systems to the computer system for monitoring.
Process Control Systems (PCS) are the programmes that are running in the background on servers or PCs. On the basis of historical data from several sensors, smart tags, and RFID tags, these systems feature algorithms for managing processes and automating decisions. Information Technology (IT)Information Technology (IT) is primarily used to collect, manipulate, analyze, and generate insights from information (i.e., data). It allows businesses to interact with their customers more efficiently and effectively.

The main purpose of information technology (IT) is to gather, manage, examine, and derive insights from information (i.e., data). It enables companies to communicate with clients more effectively and efficiently. It serves as the cornerstone of the current information age. It has developed into a crucial tool for consumers, businesses, governments, and non-profit groups. It is a topic of study that focuses on how to create and use networks, systems, and software to support business operations and make information accessible. Included in information technology are:

Software and hardwareused in computers & networks

Networked Systems:These include all types of devices that connect to the Internet, including personal computers, printers, mobile phones, laptops, etc.

Telecommunications:This includes wired or wireless communications using telephone lines, ISDN lines, cable TV connections, etc., as well as emails and instant messaging.

Database Management:This is organizing and storing data so users can retrieve it. Database management systems (DBMSs) are software programs that store information in databases and can be used for retrieving information from these databases. Difference Between Information Technology (IT) and Operational Technology (OT)Information technology is the creation, storage, retrieval, and processing of information using science and engineering. It involves creating, implementing, and designing computer networks, software, and hardware. The technology that supports information technology systems, such as telecommunications, utilities, and mechanical apparatus, is known as operational technology (OT). Although the two disciplines are similar, they can be separated by their emphasis on various phases of the business lifecycle. The main distinction between informati[...]

___________________________
@hacking_Attack
@Hacking_Video

on technology and operational technology is that the former refers to computer systems and all of their parts. Operational technology, on the other hand, refers to how those systems work within an organisation. A computer system might be used, for instance, to manage financial data. However, this does not imply that the computer system is a part of the information technology used in a company’s operations or IT/OT ConvergenceIT/OT convergence combines IT systems with OT systems, letting them transmit data to each other. IT/OT convergence aims to use this connectivity to enhance the value these systems deliver. While there are different reasons organizations connect their IT and OT systems, they all have one thing in common: they want to enhance their business processes. For example, a company might be trying to streamline its supply chain and thus improve the time it takes for products to get to clients. Or a company might be looking for ways to enhance its customer service operations so that customers can get in touch with it quickly or get a response faster. IT/OT convergence is more than just integration between different platforms; it also includes data analytics tools that can bring together disparate data sets to create a picture of what’s happening within an organization or industry. Examples And Use Cases For IT/OT ConvergenceThe term “IT/OT convergence” is becoming more popular as businesses seek to integrate technologies to improve their business processes, customer experience, and work-life balance.

Here are some of the most common use cases for IT/OT convergence:

* Flexibility: Companies are looking for IT/OT solutions to increase flexibility by providing different ways to monitor and control equipment, improve remote access options, and more.
* Cost savings: Businesses are focused on reducing costs by using technology to track equipment performance and simplify maintenance tasks.
* Improved quality of service (QoS): Businesses want solutions that can effectively ensure QoS for their customers while reducing costs through automation, mobility, and other improvements.

Examples

* An automated warehouse system can help companies save money by reducing the labor needed to transport and store materials.
* A fleet management application helps companies track their vehicles and maintain them correctly. That reduces the risk of accidents and extends the life of the vehicle, which can save money in the long run.
* Remote access software allows employees to use their computers from home or other locations, reducing their need to travel for work.
* A project management platform helps companies plan projects more efficiently, saving time and money.
* An internal social network allows employees to stay connected with each other while they’re working at home or on vacation – helping them keep up with what’s happening in the office without having to constantly check in with colleagues daily.
* The use of IoT sensors to help people with disabilities. For example, an IoT sensor can monitor their blood pressure, heart rate, and more. This data is then sent to a healthcare provider via an app or website that they can access. The person can also set up alerts if they experience any changes in their health that could indicate a problem.
* An IoT sensor in the workplace can help track employee productivity levels, saving time and money for companies that want to become more efficient.

The use of IT/OT convergence is an area that is rapidly evolving and has the potential to improve a variety of physical operations.

It includes providing better monitoring, control, and automation for machinery, enhancing equipment performance, reducing downtime, and improving safety and health.

The following are just some of the possible uses:

* IT/OT can automate various tasks, including safety-critical activities such as manufacturing, construction, testing, and maintenance.
* IT/OT can detect issues in real-time or near real-time, allowing corrective acti[...]

___________________________
@hacking_Attack
@Hacking_Video

on to be taken before an unsafe condition occurs.
* IT/OT can reduce manual labor at the point of operation using technology that can monitor and control equipment remotely.
* IT support professionals can also use IT/OT convergence techniques to help employees be more productive and efficient.
* In healthcare, IT/OT convergence can help reduce medical errors, improve patient safety, and lower costs by reducing readmissions to the hospital.
* In manufacturing, IT/OT convergence can help increase worker productivity by automating manual processes like welding or painting on machines that have been out of production for months at a time. Industrial IoT Enable the Convergence of IT And OTThe industrial Internet of Things (IIoT) is a term that describes the network of devices that connect, either by wired or wireless communication, to communicate or exchange information.

IIoT technologies are the “bridge” connecting IT to OT (and vice versa). It can do so through software applications, embedded devices, and sensors connected directly to the manufacturing process.

IIoT technologies such as advanced sensors, wearables, actuators, robotics, and artificial intelligence software enable this convergence of IT and OT.

Having all these interconnected devices communicating with each other allows for greater visibility into the manufacturing environment and more efficient operation, which results in significant cost savings for manufacturers.

IIoT technologies enable new applications that were not possible before. For example, IIoT technology can monitor and optimize the performance of manufacturing processes like 3D printing and additive manufacturing (a process that uses subtractive processes rather than traditional ones).

They enable companies to automate their industrial processes using existing resources – such as sensors — and allow them to optimize their operations in real-time. Benefits of IT/OT convergenceHere are some of the main benefits: Better performanceKPIs aid in increasing productivity and performance throughout the company, assisting both teams in pursuing and accomplishing shared objectives. It improves both departments’ corporate visibility, allowing the rest of the organization to see how technology contributes to achieving shared goals. Organizations can create more precise and useful KPIs by combining OT and IT data. Improve SecurityConverged OT/IT solutions can help firms with centralized monitoring systems and technologies close the gap between cybersecurity and physical security.

OT and IT systems have unique security requirements and capabilities that are typically incompatible with a single approach or equipment.

Projects that combine IT and OT visibility improve OT security awareness throughout the company and assist IT teams in integrating current technologies into a broader cybersecurity plan. Reduce Costs and Save TimeIn the past, organizations have separate IT and OT departments. It led to a lot of wasted resources, as IT and OT departments often worked on different projects simultaneously.

Without IT/OT convergence, companies needed separate teams to work on these projects. It meant they would have to hire more people to meet their objectives. But with IT/OT convergence, all the necessary information is gathered by one team, resulting in fewer costs and better results. Challenges And their Solutions for IT/OT convergenceChallenges with cybersecurityDefending an integrated IT/OT network can be extremely difficult, especially when employing outdated OT equipment.

These devices were frequently made with little thought given to security, making them a prime target for hackers attempting to penetrate the entire network.

A unified cybersecurity strategy might not be sufficient for a fleet of devices. SolutionBecause OT devices frequently generate data packets with consistent patterns, IT architecture can be configured with intelligent filtering to find and remove unusual pac[...]

___________________________
@hacking_Attack
@Hacking_Video

kets that might be signs of a cyberattack.

The systems are set up with zero-trust authentication to safeguard their connections. Scaling ProblemsMassive vast amounts of information are produced by edge devices nowadays.

The number of gadgets could overload the infrastructure if the IT systems are not ready.

Due to OT asset monitoring restrictions, IT teams could not clearly see the fleet’s edge device count and might be unready for the exact amount. SolutionYou can control the data flow from OT devices to the IT network using different intermediate architecture or cloud services.

The convergence group can ensure that all use cases address by a written convergence strategy that contains a scalability part with current and future stages.

With the use of digital twins, it is possible to detect possible failure points without disrupting the production system by mirroring resources and processes. Various Team PerspectivesConvincing IT and OT teams to collaborate on a convergence project can be challenging since they have distinct viewpoints, duties, and focus areas.

IT teams are accustomed to working with corporate data, executives, and the newest techniques.

However, the OT job is all about creating and utilizing long-lasting physical or mechanical systems. SolutionInitial cross-training between IT and OT groups can aid in fostering the cooperative environment required to provide each visibility and build confidence between them.

They will have a greater understanding of each perspective’s contributions and how they must cooperate to preserve them. Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Unflagging Iranian Threat Activity Spurs Warnings, Indictments From US Government

Authorities are cracking down on persistent cybercriminal attacks from APTs associated with Iran's Islamic Revolutionary Guard Corps.

Dark Reading: Attacks/Breaches
5 Best Practices for Building Your Data Loss Prevention Strategy

The entire security team should share in the responsibility to secure sensitive data.

Dark Reading: Attacks/Breaches
Token-Mining Weakness in Microsoft Teams Makes for Perfect Phish

Access tokens for other Teams users can be recovered, allowing attackers to move from a single compromise to the ability to impersonate critical employees, but Microsoft isn't planning to patch.

Dark Reading: Attacks/Breaches
Telos Corporation to Help Enterprises Operationalize Cybersecurity Compliance and Regulatory Risks with IBM Security

Solution addresses compliance challenges in complex landscapes
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video