Attack Chain/Exploitation Path Diagram Generation Tools?
https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/

We all know that there is no better satisfaction than utterly owning a myriad of hosts after combining several misconfigurations to achieve the goal (and more) of an assessment. It's just as good when getting that into the report for the client and running them through what happened. The problem is, or the problem we're having, is being able to pictorially demonstrate the paths we took throughout the chain of attack. We've taken a look at AttackForge but it's pretty certain that it'll be brushed away due to costs (even if it would be great to manage tests). Right now the team is screenshotting each step with some contextual explanation, which is fine, but ideally I would like us to be able to graphically represent what exactly happened from initial exploitation to reaching the goal of the assessment; rather than have only the screenshots, we could have the attack path graphics along with ATTCK as part of the Summary. Hope that makes sense, and curious if the community knows of any alternative tools? submitted by /u/SpaceLionBlues (https://www.reddit.com/user/SpaceLionBlues)
[link] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/) [comments] (https://www.reddit.com/r/redteamsec/comments/xk0ap4/attack_chainexploitation_path_diagram_generation/)

___________________________
@hacking_Attack
@Hacking_Video

Mass Assignment Leading to Pre Account Takeover

API also called as Application Programmable Interface is used everywhere from modern automotive (smart), mobile, web and IOT devices etc…Continue reading on Medium »
Read more...

hacking: security in practice
Intent Summit 2022 - The Security Research Summit. For researchers. By researchers. CFP Now Open!

https://external-preview.redd.it/hXC8hMWPPzZFyoKn966exPus61H4yZX18C10DDVRk-w.jpg?width=640&crop=smart&auto=webp&s=d1f3be85564ff0791fbde9552797aa5aa74ad505 submitted by /u/jat0369
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Rockstar parent company hacked again as 2K Support sends users malware

Rockstar parent company hacked again as 2K Support sends users malwarePost Views: 38 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Take-Two Interactive has once again been hacked, with the new breach targeting 2K support and urging users to download malware.2K Support has issued a warning to users to be wary of any emails they receive from the support service. On their official Twitter account, a formal statement was released detailing the nature of a recent hack – including what to look out for.

“Earlier today, we became aware that an unauthorized third party illegally accessed the credentials to one of our vendors to the help desk platform that 2K uses to provide support to our customers.”

The message then went on to say that anyone who received an email of this nature should delete it immediately. However, if the email has already been opened, this post provided steps on how to minimize damage and takes “steps out of an abundance of caution.”
Take-Two Interactive has suffered a second attack in a row within a week, now hitting 2K Support with users being promoted to download malware.

If you have received an email from 2K Support, delete the email and block the sender until it's investigated.https://t.co/Oj5fRZEFsD

— Ben (@videotech_) September 20, 2022
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
While investigating the situation, 2K Support will remain offline. At the end of the statement, 2K Support stated that they will continue to release new information to the public and their users in order to ensure they are able to “best protect [themselves] against any malicious activity.”
Just days ago, major GTA 6 leaks were revealed online after developer Rockstar suffered a major hack. Since then, it has been reported that the FBI will be investigating the situation as it is speculated that one of the hackers responsible for the Rockstar leak was also involved in the Uber hack that also occurred this month.
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: fuxploider As a consequence of the GTA leak and now the 2K Support hack, Rockstar’s parent company Take-Two Interactive have suffered exponential hits to its market cap. RockstarINTEL writer Ben Turpin reported on Twitter that the company has “lost up to $500M of its market cap.” As the situation unfolds further, this number can be expected to rise. However, the amount is unknown and is likely dependent on the outcome of the hacking scandal.
Trending: Microsoft Teams stores auth tokens as cleartext in Windows, Linux, Macs
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/2-300x150.png Revolut hack: personal and banking data exposedSeptember 20, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-300x150.png GTA 6 source code and videos leaked after Rockstar Games hackSeptember 19, 2022
Reading Time: 4 minutes

* https://www.blackhatethi[...]

___________________________
@hacking_Attack
@Hacking_Video

calhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-300x150.png Uber hacked, internal systems breached and vulnerability reports stolenSeptember 16, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-2-300x150.png Microsoft Teams stores auth tokens as cleartext in Windows, Linux, MacsSeptember 15, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Rockstar parent company hacked again as 2K Support sends users malware first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SAST vs DAST: What they are, Why you should use them?

https://cdn-images-1.medium.com/max/625/1*OoHvoAckTrXawfg_Nv-6HQ.jpeg
Production code will nearly always have at least some security problems, regardless of how carefully developers follow the most latest…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Information Security — Tech-Wire

https://cdn-images-1.medium.com/max/1024/0*moPOjBBR2ClNd6Tl.jpg
Welcome to our Information Security series. Over the long history of humankind, information has been always a vital asset. Pieces of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
China Leak: IMEI-phone number

https://cdn-images-1.medium.com/max/1709/1*MnlqOD4WwOyru_2uR7cWiQ.png
From the fields of the Internet comes a howl with a characteristic squeal. Apparently, a database of Chinese mobile operators with 1.5…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Linux Is Not Immune To Malware

https://cdn-images-1.medium.com/max/1200/0*7SHIiDaKIg5pvtJr
Windows users cannot live their lives securely without an Antivirus software. Can Linux users afford to live like that? Let’s find out!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Got my CRTE and launched my Youtube Channel

https://cdn-images-1.medium.com/max/624/1*VYn6W9XaZJHyI6U23vw4sw.png
Hello again friends, I’m back with an update from my cybersecurity journey. So after an interesting 24-hour exam, I received my CRTE…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

NimGetSyscallStub - Get Fresh Syscalls From A Fresh Ntdll.Dll Copy
http://www.kitploit.com/2022/09/nimgetsyscallstub-get-fresh-syscalls.html

___________________________
@hacking_Attack
@Hacking_Video

Get fresh Syscalls (https://www.kitploit.com/search/label/Syscalls) from a fresh ntdll.dll copy. This code can be used as an alternative to the already published awesome tools NimlineWhispers (https://github.com/ajpc500/NimlineWhispers) and NimlineWhispers2 (https://github.com/ajpc500/NimlineWhispers2) by @ajpc500 (https://twitter.com/ajpc500) or ParallelNimcalls (https://github.com/frkngksl/ParallelNimcalls).The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don't have to worry about changing Windows (https://www.kitploit.com/search/label/Windows) versions.To compile the shellcode execution template run the following:nim c -d:release ShellcodeInject.nim
The result should look like this:

___________________________
@hacking_Attack
@Hacking_Video