hacking: security in practice
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

https://external-preview.redd.it/qvagQCUP1uPrszNRmMMFS-QsYIpdFQIQLltnB0dBptM.jpg?width=640&crop=smart&auto=webp&s=798167cd502ce748669e08a1242ff89d2671698c submitted by /u/cheeztoshobo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Brings Zero Trust to Hardware in Windows 11

A stacked combination of hardware and software protects the next version of Windows against the latest generation of firmware threats.

CodeRed's Pentesting and Privilege Escalation course
https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/

Hi, does anyone knows about complete Pentesting and Privilege Escalation course of CodeRed? I need details. submitted by /u/iambarry345 (https://www.reddit.com/user/iambarry345)
[link] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/) [comments] (https://www.reddit.com/r/Pentesting/comments/xjygwe/codereds_pentesting_and_privilege_escalation/)

___________________________
@hacking_Attack
@Hacking_Video

Mass Assignment Leading to Pre Account Takeover
https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5

API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium » (https://medium.com/@cyberali/mass-assignment-leading-to-pre-account-takeover-13041280a0d9?source=rss------bug_bounty-5)

Hacking on Medium
Mass Assignment Leading to Pre Account Takeover

https://cdn-images-1.medium.com/max/1154/1*zl-PE5lbIZ0PASkSGoYgPg.png
API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…

Continue reading on Medium »

Hacking on Medium
The unlimited approval feature helps save time and money on gas, but it was abused in the LiFi hack

Users can facilitate a wide range of asset transfer and swapping options across a variety of major chains with LI.FI, an advanced bridge…

Continue reading on Medium »

Hacking on Medium
How to — Directory Enumeration

https://cdn-images-1.medium.com/max/1521/1*9q0LE2g04GVdEqi7fwWoog.png
Directory Enumeration is an important skill every penetration tester and hacker should have in their skill pouch. It is a technique to…

Continue reading on Medium »

Hacking on Medium
Uber Blames this Hacking Group for Recent Security Breach

https://cdn-images-1.medium.com/max/728/0*yaB8KR5Jyklmkn-g.gif
Uber on Monday disclosed more details related to the security incident that happened last week, pinning the attack on a threat actor it…

Continue reading on System Weakness »

Hacking on Medium
Russian Sandworm Hackers Impersonate Ukrainian Telecoms to?

https://cdn-images-1.medium.com/max/728/0*dLIiwWvr3rcTLCkL.jpg
A threat cluster linked to the Russian nation-state actor tracked as Sandworm has continued its targeting of Ukraine with commodity…

Continue reading on Medium »

Hacking on Medium
Ethical Hacking | Exploiting Apache Tomcat Port 8180

https://cdn-images-1.medium.com/max/1920/1*lCwCP1OH8HFwD8L0X67oAA.png
In this episode, we will exploit the apache tomcat version 5.5 service running on port 8180 to get a meterpreter session of the server…

Continue reading on Medium »

Attack Chain/Exploitation Path Diagram Generation Tools?
https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/

We all know that there is no better satisfaction than utterly owning a myriad of hosts after combining several misconfigurations to achieve the goal (and more) of an assessment. It's just as good when getting that into the report for the client and running them through what happened. The problem is, or the problem we're having, is being able to pictorially demonstrate the paths we took throughout the chain of attack. We've taken a look at AttackForge but it's pretty certain that it'll be brushed away due to costs (even if it would be great to manage tests). Right now the team is screenshotting each step with some contextual explanation, which is fine, but ideally I would like us to be able to graphically represent what exactly happened from initial exploitation to reaching the goal of the assessment; rather than have only the screenshots, we could have the attack path graphics along with ATTCK as part of the Summary. Hope that makes sense, and curious if the community knows of any alternative tools? submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/) [comments] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/)

___________________________
@hacking_Attack
@Hacking_Video

Mass Assignment Leading to Pre Account Takeover

API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium »
Read more...

hacking: security in practice
Intent Summit 2022 - The Security Research Summit. For researchers. By researchers. CFP Now Open!

https://external-preview.redd.it/hXC8hMWPPzZFyoKn966exPus61H4yZX18C10DDVRk-w.jpg?width=640&crop=smart&auto=webp&s=d1f3be85564ff0791fbde9552797aa5aa74ad505 submitted by /u/jat0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video