Hacking on Medium
Profanity로 만든 Vanity 주소 즉각 변경 필요

https://cdn-images-1.medium.com/max/1023/1*UiYnct5FsBiRMkli7HezFQ.png
Profanity로 만든 이더리움 Vanity 주소들이 bruce force방식으로 해킹이 되어 가장 근본적이고 기초적인 seed key가 해킹되는 사태가 발생했습니다. 해킹 방지를 위해 이더리움 주소 어디서 만들었는지 체크하고, 프로젝트를 운영할…

Continue reading on Dogok Research »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Painful Lessons from Uber’s Recent Über-Breach

https://cdn-images-1.medium.com/max/960/1*kIl0CYEDmqk2LZyXyHrlzQ.png
Uber’s latest breach is big and fraught with concerns about the maturity of the company’s cybersecurity capability. Failure abounds across…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Possible to become pentester without formal IT/cybersecurity training?
https://www.reddit.com/r/Pentesting/comments/xjqq5k/possible_to_become_pentester_without_formal/

Background: I was really interested in hacking when I was a kid and since we couldn't afford wifi I learned the basics of backtrack and hacked my neighbors wifi (WEP and WPA2 with the wps vulnerability) when that became more common) and in school I jailbroke and rooted one of tablets so I could use the wifi one my phone and sell the password to other kids. I did other shit like bypass content filtering by changing DNS settings. Nothing crazy but everything I learned was from youtube and trial and error and I loved it. After I graduated HS I stayed away from computers as I finally had a social life but now that I'm in my mid 20s I want to get back into my dream as a kid of being an ethical hacker. Basically my question is, is it feasible to learn enough to be employed through online pen test classes from sites like TCM and Offensive Security or should I take the plunge and go to a community college for a cybersecurity degree? Money is an issue so I want to streamline the process as much as possible submitted by /u/FuckDOCCS (https://www.reddit.com/user/FuckDOCCS)
[link] (https://www.reddit.com/r/Pentesting/comments/xjqq5k/possible_to_become_pentester_without_formal/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjqq5k/possible_to_become_pentester_without_formal/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Little confused

I opened macchanger entered “macchanger -s wlan0” and my current MAC is already different than my permanent MAC?! I’ve never changed it before what’s going on here?

submitted by /u/Fair-Attorney-909
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anybody know web hacking?

I need help. We have a homework based on conceptuals of this said topic. Such as inspecting and changing results within the console. Share accounts if you know somebody pls

submitted by /u/Delicious_Growth_744
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Force uninstalling corporate antivirus

It’s called Trend Micro Agent and it’s on my company laptop. In the past I was able to wipe Endpoint management software using a power shell script but this one is quite the challenge. It requires a password to uninstall and I’m trying to figure out a way to force uninstall it without having to reset windows. Any pros around to assist? It’s interfering with my workflow, I plan to reinstall it after I’m done with my project.

submitted by /u/Ev1lC4t
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bendigo bank can’t track who hacked our account QLD

We had an ex employee using a current employees log in to view business accounts.

She is viewing them because she is being charged with payroll fraud. I don’t know what viewing the business accounts after their fraud activities were uncovered achieves, but she is.

We found out when in court she mentioned “she had evidence” that the business wasn’t “playing by the rules”. Which is projection, because the only one not following the rules is that con artist.

All employees were asked to change passwords after she left, but one forgot to and so she did the day the con artist made that statement. Lo and behold that afternoon a failed log in attempt pinged three times for that employee. So she was using her log in to view accounts.

She currently (somehow) runs a family daycare despite over 120 aggravated fraud charges pending a trial in the district court. (So annoyed, she now gets to con the child care subsidy scheme/income tax)

Bendigo bank have provided police “data” of all who accessed the accounts, but police are stating that there are no IP addresses to prove she breached her bail to continue access, or (imo) that they can’t understand the data.

She’s breached her bail twice, we would love to prove she still is. We’ve changed passwords and enabled TFA.

How can we get this evidence she was logging in? Are the bank able to track IP addresses? Are we asking for the wrong data 😖

submitted by /u/strayashrimp
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hello guys my friend got hacked on insta and even got their phone number any way to fix this?

I don't know what to do in this situation because they even got my friend's phone number.

submitted by /u/ConversationNew6726
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ransomware simulation tools
https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/

Hello everyone, can you recommend me a free tool to simulate ransomware attacks? submitted by /u/Equivalent_Year154 (https://www.reddit.com/user/Equivalent_Year154)
[link] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/) [comments] (https://www.reddit.com/r/redteamsec/comments/xjtluy/ransomware_simulation_tools/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall

Firezone is a self-hosted VPN server and Linux firewall* Manage remote access through an intuitive web interface and CLI utility.
* Deploy on your own infrastructure to keep control of your network traffic.
* Built on WireGuard® to be stable, performant, and lightweight. Get StartedFollow our deploy guide to install your self-hosted instance of Firezone.

Or, if you’re on a supported platform, try our one-line install script :

sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)” Features* Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
* SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
* No dependencies: All dependencies are bundled thanks to Chef Omnibus.
* Simple: Takes minutes to set up. Manage via a simple CLI.
* Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
* Firewall included: Uses Linux nftables to block unwanted egress traffic. Anti-featuresFirezone is not:

* An inbound firewall
* A tool for creating mesh networks
* A full-featured router
* An IPSec or OpenVPN server DeployGet started with Firezone in a few minutes by self-hosting on a supported platform​Firezone can be self-hosted on a server running a supported Linux distribution in a few minutes. This guide will walk you through the steps to get started. Step 1: Environment Setup​Supported operating systems​Start by checking if your environment is listed on supported platforms. A kernel upgrade may be required to ensure WireGuard® is available. Security settings​Ensure port forwarding is enabled on your firewall. The default Firezone configuration requires the following ports to be open:

* 443/tcp: To access the web UI.
* 51820/udp: The VPN traffic listen-port.

NOTE

Firezone modifies the kernel netfilter and routing tables. Other programs that modify the Linux routing table or firewall may interfere with Firezone’s operation. For help troubleshooting connectivity issues, see the troubleshooting guide. Production deployments​Firezone requires the setup of a DNS record and matching SSL certificate for production deployments. See instructions here. Step 2: Server Install Script​The easiest way to get started using Firezone is via the automatic installation script below.

sudo -E bash -c “$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)”

This will ask you a few questions regarding your install, install the latest release for your platform, then create an administrator user and print to the console instructions for logging in to the web UI.

By default, the web UI can be reached at the IP or domain name of your server. You can regenerate the admin credentials using the firezone-ctl create-or-reset-admincommand.

If the script fails, follow instructions for manual installation. Step 3: Install Client Apps​Once successfully deployed, users and devices can be added to connect to the VPN server:

* Add Users: Add users to grant them access to your network.
* Client Instructions: Instructions to establish a VPN session. After Setup​Congrats! You have completed the setup, but there’s a lot more you can do with Firezone.

* Integrate your identity provider for authenticating clients
* Using Firezone to establish a static IP
* Create tunnels between multiple peers with reverse tunnels
* Only route certain traffic through Firezone with split tunneling

Support us by:

* Star our repo on Github
* Follow us on Twitter at @firezonehq
* Follow us on LinkedIn at @firezonehq Supported PlatformsFirezone currently supports the following platforms:
OSArchitecturesStatusNotesAmazonLinux 2amd64 arm64Fully-supportedSee AmazonLinux 2 NotesCen[...]

___________________________
@hacking_Attack
@Hacking_Video

tOS 7amd64Fully-supportedSee CentOS 7 NotesCentOS 8amd64 arm64Fully-supportedSee CentOS 8 NotesCentOS Stream 9amd64 arm64Fully-supportedWorks as-isRed Hat Enterprise Linux 7amd64Fully-supportedSee RHEL 7 NotesRed Hat Enterprise Linux 8amd64 arm64Fully-supportedSee RHEL 8 NotesRed Hat Enterprise Linux 9amd64 arm64Fully-supportedSee RHEL 9 NotesDebian 10amd64 arm64Fully-supportedSee Debian 10 NotesDebian 11amd64 arm64Fully-supportedWorks as-isFedora 33amd64 arm64Fully-supportedSee Fedora NotesFedora 34amd64 arm64Fully-supportedSee Fedora NotesFedora 35amd64 arm64Fully-supportedSee Fedora NotesUbuntu 18.04amd64 arm64Fully-supportedSee Ubuntu 18.04 NotesUbuntu 20.04amd64 arm64Fully-supportedWorks as-isUbuntu 22.04amd64 arm64Fully-supportedWorks as-isopenSUSE Leap 15.3amd64Fully-supportedSee openSUSE Notes
If your distro isn’t listed here please try using a package for the closest distro first. For example, since Raspberry Pi OS is based on Debian, try using the Debian Firezone package.

If that doesn’t work, please open an issue and let us know. New distros are being supported on a regular basis and there’s a good chance yours will be added soon.

Note that we only support RPM and DEB based packaging systems. Others, like Arch Linux are currently being investigated in this issue. AmazonLinux 2 Notes​Kernel upgrade required:

sudo amazon-linux-extras install -y kernel-5.10 CentOS 7 Notes​Kernel upgrade to 5.6+ required. To upgrade to the latest mainline kernel and select it as the default boot kernel:

sudo rpm –import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
sudo yum install -y https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
sudo yum install -y elrepo-release
sudo yum –enablerepo=elrepo-kernel install -y kernel-ml
sudo grub2-set-default 0
sudo grub2-mkconfig -o /boot/grub2/grub.cfg
sudo reboot CentOS 8 Notes​The WireGuard kernel module needs to be installed:

yum install elrepo-release epel-release
yum install kmod-wireguard RHEL 7 Notes​Red Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 7 should work just fine for RHEL 7. You’ll still need to upgrade your kernel to 5.6+ however. To do so, follow the steps for CentOS 7 Notes above. RHEL 8 Notes​Red Hat Enterprise Linux is binary compatible with CentOS, so the Firezone package for CentOS 8 should work just fine for RHEL 8. You’ll still need to install the WireGuard kernel module, however. See CentOS 8 Notes above. RHEL 9 Notes​Use the package for CentOS 9. Fedora Notes​On fresh Fedora installations you’ll probably need to install a cron implementation to support the logrotate functionality, otherwise you may receive errors about a missing /etc/cron.hourlydirectory.

yum install cronie-anacron Ubuntu 18.04 Notes​Kernel upgrade to 5.4+ required:

sudo apt install linux-image-generic-hwe-18.04 Debian 10 Notes​Kernel upgrade to 5.6+ required. See this guide for an example. openSUSE Notes​Firezone requires the setcaputility, but some recent openSUSE releases may not have it installed by default. To fix, ensure libcap-progsis installed:

sudo zypper install libcap-progs PrerequisitesFirezone requires the setup of a DNS record and matching SSL certificate for production deployments. Create a DNS record​Firezone requires a fully-qualified domain name (e.g. firezone.company.com) for production use. You’ll need to create the appropriate DNS record at your registrar to achieve this. Typically this is either an A, CNAME, or AAAA record depending on your requirements.[...]

Kali Linux Tutorials
Firezone : WireGuard-Based VPN Server And Firewall

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

https://external-preview.redd.it/qvagQCUP1uPrszNRmMMFS-QsYIpdFQIQLltnB0dBptM.jpg?width=640&crop=smart&auto=webp&s=798167cd502ce748669e08a1242ff89d2671698c submitted by /u/cheeztoshobo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Brings Zero Trust to Hardware in Windows 11

A stacked combination of hardware and software protects the next version of Windows against the latest generation of firmware threats.

CodeRed's Pentesting and Privilege Escalation course
https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/

Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details. submitted by /u/iambarry345 (https://www.reddit.com/user/iambarry345)
[link] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/)

___________________________
@hacking_Attack
@Hacking_Video

Mass Assignment Leading to Pre Account Takeover
https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5

API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium » (https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5)