Hacking on Medium
Hackean RockStar y roban código fuente de GTA 5 y 6

https://cdn-images-1.medium.com/max/959/0*PWVPqCgY8AOZeYLE
Aparentemene el mismo atacante de 18 años que hace apenas unos días hackeó a UBER por diversión, (Ver noticia) ahora ha reivindicado el…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the techniques for the malware to be persistent on the host

So, there are multiple techniques to make your binary/malware persistent on the host. Techniques such as adding in the Registry keys when you installed the executable and changing the date so it will not be suspicious, creating a service, using the task scheduler, and so on.

The question I wanted to ask is what are the other techniques that you have seen or used for the malware/binary persistence so that it will stay on the host and stay maximum stealthy?

Thanks in advance

submitted by /u/rubenamizyan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Quick questing about aircrack

Quick questing about aircrack, I got my network adapter today and wanting to test it out some, but I’m not trying to fuck around with someone else’s stuff because I do live around other networks, so is it okay to just do airodump-ng wlan0mon to see networks and check out if it works, or is that going to fuck with someone else? I have an old router I was going to plug in to mess around with but I don’t want any trouble with anyone else. Just wanted to make sure I’m doing nothing wrong

submitted by /u/Fair-Attorney-909
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bypassing CSRF Protection (I)

https://cdn-images-1.medium.com/max/716/0*r_5gAFw0ejp_TiIA.png
Hi, My name is Hashar Mujahid and in this blog, we will talk about some techniques to bypass the csrf protection.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Bypassing CSRF Protection (I)
https://infosecwriteups.com/bypassing-csrf-protection-i-bc014384d0aa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, My name is Hashar Mujahid and in this blog, we will talk about some techniques to bypass the csrf protection.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/bypassing-csrf-protection-i-bc014384d0aa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Bypassing CSRF Protection (I)

Hi, My name is Hashar Mujahid and in this blog, we will talk about some techniques to bypass the csrf protection.Continue reading on InfoSec Write-ups »
Read more...

Unsubscribe any user’s e-mail notifications via IDOR

Description: I would like to share how I was able to unsubscribe any user from the Target website’s email notification service. Insecure…Continue reading on Medium »
Read more...

hacking: security in practice
noob

I've always been interested in hacking/pen testing, but know little about it. Is there an online tutorial/ tutor video playlist. (For Kali)

submitted by /u/Its_GameOver
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Interview Insight

TL;DR: Penetration testing is more than isolating yourself in a dark corner and typing furiously on your keyboard. Since you actually have to interact with people, do be a good teammate and do not be a jerk.

For context, my manager has been looking to fill a couple of open spots on our team, but has been unhappy with recent candidates. I asked out of curiosity what sort of gap in skills/knowledge he has been seeing, and he actually said that he has seen more social issues than technical. I am going to explain at a high level the key points here to give people an idea of these social skills that they can work on to become more effective teammates and/or more promising interview candidates.

The first item is general communication. Despite the stereotypes, penetration testers are often interacting with people whether they are clients or teammates. You will need to present findings to clients, and in doing so, you need to be able to explain your actions clearly and cohesively. If you cannot effectively communicate the work you did, your work is not useful, frankly. This carries over to writing reports too. If you cannot effectively highlight a vulnerability in documentation, the client is going to have a very difficult time reproducing the finding, and we will probably hear about it.

The second item is personality. By all means, be confident in your abilities, but avoid being overly confident to a point where it is obnoxious. When you work on a team, you have to accept that you will not always have the best solution, and this is a feature, not a bug. Realistically, you may misinterpret something or miss some small detail. When something like this happens and a teammate has input or feedback for you, there is no need to be confrontational. It is important to be receptive of what teammates have to say and learn from your mistakes. How you conduct yourself when you are wrong is very important. There are ways to be incorrect gracefully.

More on personality, while you are going through an interview, it is entirely possible for you to come across something unfamiliar. In these situations, interviewers are interested in observing your thought process. You have the opportunity here to demonstrate how you go about breaking down a problem, thinking through it, and arriving at a conclusion. Additionally, they are interested in seeing how you conduct yourself when you do not know the answer or are unsure of something. Asking good questions would be useful here as well as asking how one of the interviewers would approach the problem (after offering your own solution).

submitted by /u/camelCaseForever
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hi.

Interested in information about bully 2 and video clips and photos of its development write to me privately, rockstar games is currently doing everything possible to download my posts from gta forums, therefore I will use reddit as the last means to share this information with you Interested talk to me privately.

submitted by /u/TB1798B
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can Cards with EMV Chip still be skimmed?

I live in India where Cards with EMV Chip are mandatory but I am still not sure if I should use my card in any ATM or Gas station

submitted by /u/0-_-peekaboo-_-0
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Line stamps on Kakao Talk

Hey guys I was just wondering if it's possible to bring Line stamps onto Kakao talk or somehow bring in custom stamps into Kakao Talk. My reason for this is that there are friends that only use Kakao Talk and I like the Line stamp selection I purchased a bunch and I would have done it in Kakao Talk too if they had the same stamps unfortunately they don't. Any ideas or suggestions?

submitted by /u/SuperSoakerGuyx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
RFID key fob copying for MIWA key

My building refuses to give me a second key fob for my partner even though he will be coming in and out and I pay an egregious amount for rent.

They key fob is the Miwa key fob. Some details about this key fob can be found here:

https://clonemykey.com/copy-wizard/new-key/key-fob/miwa-key-fobs/miwa-red-key-fob/#more-specs

I'd love to use this service, however I have to mail in my key fob which makes it super difficult to clone since I wouldn't be able to leave my apartment while they have it in their possession.

Is there any key fob duplication tool that I can use (say one of the tools I can purchase on amazon)? Any suggested guides? It looks like this is a standard RFID key fob. I tried KeyMe but their kiosks wouldn't take my key fob for some reason.

submitted by /u/apprximatelycorrect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unsubscribe any user’s e-mail
notifications via IDOR
https://medium.com/@Dhamuharker/unsubscribe-any-users-e-mail-notifications-via-idor-7de76e2b036b?source=rss------bug_bounty-5

Description:
I would like to share how I was able to unsubscribe any user from the Target
website’s email notification service.
Insecure…Continue reading on Medium » (https://medium.com/@Dhamuharker/unsubscribe-any-users-e-mail-notifications-via-idor-7de76e2b036b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Revolut hack: personal and banking data exposed

Revolut hack: personal and banking data exposedPost Views: 40 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Revolut has suffered a cyberattack that gave an unauthorized third party access to personal information of tens of thousands of clients.The incident occurred a week ago, on Sunday night, and has been described as “highly targeted.”

Founded in 2015, Revolut is a financial technology company that has seen a rapid growth, now offering banking, money management, and investment services to customers all over the world.

In a statement for BleepingComputer, a company spokesperson said that an unauthorized party had access “for a short period of time” to details of only a 0.16% of its customers.
“We immediately identified and isolated the attack to effectively limit its impact and have contacted those customers affected. Customers who have not received an email have not been impacted” – Revolut
According to the breach disclosure to the State Data Protection Inspectorate in Lithuania, where Revolut has a banking license, 50,150 customers have been impacted.

Based on the information from Revolut, the agency said that the number of affected customers in the European Economic Area is 20,687, and just 379 Lithuanian citizens are potentially impacted by this incident.

Details on how the threat actor gained access to the database have not been disclosed but it appears that the attacker relied on social engineering.

The Lithuanian data protection agency notes that the likely exposed information includes:

* Email addresses
* Full names
* Postal addresses
* Phone numbers
* Limited payment card data
* Account data
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
However, in a message to an affected customer, Revolut says that the type of compromised personal data varies for different customers. Card details, PINs, or passwords were not accessed.

Revolut emphasizes that the intruder did not gain access to users’ funds.

“Our customers’ money is safe – as it has always been. All customers can continue to use their cards and accounts as normal,” the company spokesperson told BleepingComputer.

The company reacted quickly to the intrusion and significantly limited the risk to its customers, isolating the attack by early Monday (2 A.M.).

As a precaution, Revolut formed a dedicated team tasked with monitoring customer accounts, to make sure that both money and data are safe.

Users should be “extremely wary” of any messages requesting personal details or passwords. Revolut will not call customers about the incident and will never ask for sensitive information.

Below is the full statement BleepingComputer received from a Revolut spokesperson:

Revolut recently experienced a highly targeted cyber attack. This resulted in an unauthorized third party obtaining access to the details of a small percentage (0.16%) of our customers for a short period of time.

We immediately identified and isolated the attack to effectively limit its impact and have contacted those customers affected. Customers who have not received an email have not been impacted.

To be clear, no funds have been accessed or stolen. Our customers’ money is safe – as it has always been. All customers can continue to use their cards and accounts as normal.

We take incidents such as these incredibly seriously, and we would like to sincerely apologize to any customers who have been affected by this incident, as the safety of our customers and their data is our top priority at Revolut.

Some Revolut customers also noted around the t[...]

___________________________
@hacking_Attack
@Hacking_Video

ime of the incident that the support chat was displaying inappropriate language to visitors.
https://www.bleepstatic.com/images/news/u/1100723/2022/RevolutOhDaddy.jpg
While it is not clear if this defacement is related to the breach disclosed by Revolut, it shows that hackers may have had access to a wider range of systems used by the company.

Revolut did not explain how or why users received these messages but apologized to reporting customers and said that it was “addressing the issue and are taking steps to ensure this does not happen again.”
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: fuxploider Phishers take advantageThis security incident is a good opportunity for phishing actors to trick any Revolut customer, even those not impacted, into giving away their sensitive details.

As first spotted by UCL’s “Report Smishing” platform, there’s already an ongoing SMS phishing campaign attempting to trick Revolut account holders with messages that their existing card has been frozen to prevent fraud.

To request a new card, the victims are directed to click on the link “revolut-card-cancel[.]com”, where they will go through a four-step phishing process as shown below.
https://www.bleepstatic.com/images/news/u/1220909/Phishing/phishing-steps.jpg
Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-300x150.png GTA 6 source code and videos leaked after Rockstar Games hackSeptember 19, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-300x150.png Uber hacked, internal systems breached and vulnerability reports stolenSeptember 16, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-2-300x150.png Microsoft Teams stores auth tokens as cleartext in Windows, Linux, MacsSeptember 15, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-1-300x150.png Zero-day in WPGateway WordPress plugin actively exploited in thousands WordPress sitesSeptember 14, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Revolut hack: personal and banking data exposed first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Crack WPA2-PSK from Probing Clients
https://www.reddit.com/r/redteamsec/comments/xj2ong/crack_wpa2psk_from_probing_clients/

submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://tbhaxor.com/crack-wpa-psk-from-probing-clients-without-access-point/) [comments] (https://www.reddit.com/r/redteamsec/comments/xj2ong/crack_wpa2psk_from_probing_clients/)