hacking: security in practice
A technical analysis of Pegasus for Android – Part 2

https://external-preview.redd.it/X2FTimhSC-t-iXNNK6RimAmxOxQej1i98wvUazpJ42k.jpg?width=640&crop=smart&auto=webp&s=553d577d740abd74706d3c525d883db44403bac7 submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Audit your DNS configs, you're probably going to be shocked

https://github.com/punk-security/dnsReaper

I wrote a tool to hunt out DNS config errors that allow for subdomain takeovers. You wouldn't believe how common it is. No one looks after DNS.

I've done a couple talks about DNS takeovers in the UK now at places like blackhat and bsides. I'm really hoping to present it at defcon next year and I'm doing a tonne of research using different DNS datasets.

I'd really appreciate if anyone can point me at some obscure DNS takeover blogs they've come across.

submitted by /u/punksecurity_simon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Australian Optus Data Breach

https://b.thumbs.redditmedia.com/FsR_36D568rIiS5njUEiFaJxetqx3SPpMJVAUoljloc.jpg submitted by /u/CasualWatcher160
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
hashcat

I'm currently trying to brute force a 7z archive (AES-256) (11600 Hash Mode) that I have just create, with Hashcat but my problem is that my Hashrate seems super low currently at 24000H/s for an RTX 3070 my question is this normal because of AES-256 or should it be faster ?

submitted by /u/lordnyrox
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any book recommendation?

I’m looking to read up on the history and techniques. Any good recommendations?

submitted by /u/Digaholeonabeach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Book recommendations

I’m looking to read up on the history and techniques. Any good recommendations?

submitted by /u/Digaholeonabeach
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mobile Verification Tool Error Issues

Hello all.

I have been through the steps to install ubuntu, install python3, including the libimobile utility.

When I run the check backup command it comes up with errors.

​

Can you clarify what I'm missing here?

submitted by /u/ChefBoyOfficial
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Lazarus Lures Aspiring Crypto Pros With Fake Exchange Job Postings

Previously observed using fake Coinbase jobs, the North Korea-sponsored APT has expanded into using Crypo.com gigs as cover to distribute malware.

Dark Reading: Attacks/Breaches
Amid Sweeping Change, Cyber Defenders Face Escalating Visibility — and Pressure

Why cyber teams are now front and center for business enablement within organizations, and the significant challenges they face.

Dark Reading: Attacks/Breaches
FBI Helping Australian Authorities Investigate Massive Optus Data Breach: Reports

Initial reports suggest a basic security error allowed the attacker to access the company's live customer database via an unauthenticated API.

Hacking on Medium
Security Hardening: An Usability Perspective

https://cdn-images-1.medium.com/max/734/1*DhzOLTYmPUxAhxACmL6GaQ.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Proving Grounds-DC-1

https://cdn-images-1.medium.com/max/1716/1*-Fxr_WnoTSDLbz8iUOj4mg.png
Hi everyone! Today we are going to go over how to root DC-1 on Proving Ground by DCAU. Let’s get started

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MetaMask — Some exciting things we didn’t know as users

https://cdn-images-1.medium.com/max/1200/1*J3_G_TGovFiY5619u4T1Rg.jpeg
September 28, 2022

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Kali Linux — Permanently changing or adding to the terminal path

https://cdn-images-1.medium.com/max/958/1*7w_dXySLbd7MHIJ-9KASYw.png
Permanently changing or adding to the terminal path

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Attack of the .d2s Files

https://cdn-images-1.medium.com/max/1045/0*tVahKy9NidmrYNLI
Today, we continue our Diablo Hacking Journey by examining and editing the character save file. Last time we found out that the file was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Proactive Pentest, before a Pentest?
https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/

I am the system admin for a small company. 5 users and a couple public facing services (FTP, IIS website), plus internal servers (SQL, file server etc). Do you recommend any steps I can take and software I can run to find and remediate my own issues before I spend money on an external vendor/audit? I don't have the money right now for full scale Pentest or audit, but I feel like I want to take as many steps as I reasonably can myself, to find issues slowly. I know I won't do as good a job as a pro. Any recommendations? Are there 1 or 2 software tools I can use to get me 90% there? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/)

___________________________
@hacking_Attack
@Hacking_Video