Hacking on Medium
Attack of the .d2s Files

https://cdn-images-1.medium.com/max/1045/0*tVahKy9NidmrYNLI
Today, we continue our Diablo Hacking Journey by examining and editing the character save file. Last time we found out that the file was…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Proactive Pentest, before a Pentest?
https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/

I am the system admin for a small company. 5 users and a couple public facing services (FTP, IIS website), plus internal servers (SQL, file server etc). Do you recommend any steps I can take and software I can run to find and remediate my own issues before I spend money on an external vendor/audit? I don't have the money right now for full scale Pentest or audit, but I feel like I want to take as many steps as I reasonably can myself, to find issues slowly. I know I won't do as good a job as a pro. Any recommendations? Are there 1 or 2 software tools I can use to get me 90% there? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/xpzje1/proactive_pentest_before_a_pentest/)

___________________________
@hacking_Attack
@Hacking_Video

Once upon a time, There lived a GHOST named “CYBERSECURITY”
https://medium.com/@kishorehariram/once-upon-a-time-there-lived-a-ghost-named-cybersecurity-dbba061908c9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I am writing this blog after seeing the evolution of cybersecurity in the past few months or years. I thought of starting this blog with…Continue reading on Medium » (https://medium.com/@kishorehariram/once-upon-a-time-there-lived-a-ghost-named-cybersecurity-dbba061908c9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Once upon a time, There lived a GHOST named “CYBERSECURITY”

I am writing this blog after seeing the evolution of cybersecurity in the past few months or years. I thought of starting this blog with…Continue reading on Medium »
Read more...

Freeze - Payload Generation Toolkit for Bypassing EDR
https://www.reddit.com/r/redteamsec/comments/xq0hsm/freeze_payload_generation_toolkit_for_bypassing/

submitted by /u/roobixx (https://www.reddit.com/user/roobixx)
[link] (https://github.com/optiv/Freeze) [comments] (https://www.reddit.com/r/redteamsec/comments/xq0hsm/freeze_payload_generation_toolkit_for_bypassing/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Law enforcement used smart phone locator, how?

One investigative journalist claimed, they have identified a device that when in proximity of a cell phone target (IMEL), if triggered give out loud noise to reveal its location.

I have not heard this before.

One thing is if possible this should be only used in high priority target.

I am interested in knowing the technology. GSM? Will it work even if the phone is switched off? All the cell phone maker is building their device building any extra chip inside? or is it using some sort of bug?

Note: This is not GSM tower ping, that I know.

submitted by /u/ch1253
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Pentest customer facing report ?
https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/

I'm curious, if a customer asks a business "do you do pentesting and can I see your report?" Is this a typical thing to share about your infrastructure? Isn't that private? Or is there some common high level type of generic standard report template that tells them "there were 5 issues and they are now fixed - the details are none of your business" ? submitted by /u/maniac_me (https://www.reddit.com/user/maniac_me)
[link] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/) [comments] (https://www.reddit.com/r/Pentesting/comments/xq28i5/pentest_customer_facing_report/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity Solutions for the Aviation Industry

https://cdn-images-1.medium.com/max/600/1*mL-3ZiGwrBEdH2ylQW1nNA.jpeg
Why think about cyber security for the aviation industry?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to become an ethical hacker

https://cdn-images-1.medium.com/max/695/0*hY-DmM_kwXtKBd1o.jpg
When most people hear the term “hacker” they think of a solitary, shrouded individual, illuminated by the glow of a computer in a dark…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
xmap : Performing Internet-wide IPv6 & IPv4 Network Research Scanning

xmap a tool for Performing Internet-wide IPv6 & IPv4 Network Research Scanning

Installing and Building XMap

Installing via Package Manager

XMap operates on GNU/Linux, macOS, and BSD.

Installing with the most OS package managers is not integrated yet.
OSFedora 19+ or EPEL 6+-Debian 8+ or Ubuntu 14.04+-Gentoo-macOS (using Homebrew)-Arch Linux-
Building from Source

Installing XMap Dependencies

XMap has the following dependencies:

* CMake – Cross-platform, open-source build system
* GMP – Free library for arbitrary precision arithmetic
* gengetopt – Command line option parsing for C programs
* libpcap – Famous user-level packet capture library
* flex and byacc – Output filter lexer and parser generator
* json-c – JSON implementation in C
* libunistring – Unicode string library for C
* libdnet – (macOS Only) Gateway and route detection

In addition, the following optional packages enable optional XMap functionality:

* hiredis – RedisDB support in C

Install the required dependencies with the following commands.

* On Debian-based systems (including Ubuntu):
*
* sudo apt-get install build-essential cmake libgmp3-dev gengetopt libpcap-dev flex byacc libjson-c-dev pkg-config libunistring-dev
*

On RHEL- and Fedora-based systems (including CentOS):

sudo yum install cmake gmp-devel gengetopt libpcap-devel flex byacc json-c-devel libunistring-devel

Development Notes

* Enabling development turns on debug symbols, and turns off optimizations. Release builds should be built with -DENABLE_DEVELOPMENT=OFF.
* Enabling log_tracecan have a major performance impact and should not be used except during early development. Release builds should be built with -DENABLE_LOG_TRACE=OFF.
* Redis support is not enabled by default. If you want to use XMap with Redis, you will first need to install hiredis. Then run cmake with -DWITH_REDIS=ON. Debian/Ubuntu has packaged hiredis as libhiredis-dev; Fedora and RHEL/CentOS have packaged it as hiredis-devel.
* Building packages for some systems like Fedora and RHEL requires a user-definable directory (buildroot) to put files. The way to respect this prefix is to run cmake with -DRESPECT_INSTALL_PREFIX_CONFIG=ON.
* Manpages (and their HTML representations) are generated from the .ronnsource files in the repository, using the ronn tool. This does not happen automatically as part of the build process; to regenerate the man pages you’ll need to run make manpages. This target assumes that ronnis in your PATH.
* Building with some versions of CMake may fail with unable to find parser.h. If this happens, try updating CMake. If it still fails, don’t clone XMap into a path that contains the string .com, and try again.
* XMap may be installed to an alternative directory, with the CMAKE_INSTALL_PREFIXoption. For example, to install it in $HOME/optrun

cmake -DCMAKE_INSTALL_PREFIX=$HOME/opt .
make -j4
make install
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
have youever tried to modify video game and are you in the cybersecurity field?

I have a theory

View Poll

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Industry standards - Companies giving access to sensitive personal data (contracts, photos) from publicly accessible URLs

I've recently come across the same issue twice, with major companies, so probably it has become a mainstream policy:

The first one, a multinational telco. I agreed to a new contract, which was published on a public URL for me to check and sign. The contract (which included my social security number, ID number, full name, date of birth, etc) was there for about a month; it was removed after I protested. I can't tell for how long it would be there.

The second one, an international enterprise: After I asked for my data stored on their systems (they give you the option, no special request) they send me a public URL also. It included my ID photos. They were there for 3 months, according to their policy. As an international company, they were much more cumbersome (rather unwilling) to remove them before the time their policy dictates; to be honest, I doubt if I spoke to any human being, probably they were all bots. I can't tell if my ID photos where publicly available after I asked my data or from the day I signed in.

Both companies answer was on the same basis: It's a URL which is not searchable (no results for these kind of URLs from internet search engines) so since I'm the only one who has it, I'm the only one capable of accessing it.
I consider this to NOT be secure. Like having something valuable on a public road, but it's a small road that no-one passes by; most probably, but not 100%, it won't be stolen.

So my questions for anybody in the IT security or audit industry,
- how is it possible for this policy to be acceptable from major companies? - Can it really be considered safe, a public URL; just because it's long, no results returned from search engines, and send only to one person? Send by non-encrypted e-mail, so even if the rest of the chain would be secure, it could be breached through mail. - If a malicious person (cracker, black hat hacker, whatever the terminology) or just a curious and very lucky person who tries many different URLs, access these data: Is there any way to persecute him/her? He did nothing unlawful, He just opened a public URL.

My question to hackers, have you managed to access such personal data on enterprises URLs? Is it really tough to traverse their sites to locate them?

submitted by /u/krackout21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
recommendations for wireless adapters that work with kali nethunter and kali Linux out of the box and has packet injection and monitor mode?

also preferably under or equals 20$, I have seen alot on Ebay from 9-15$ that claim to work out of the box but couldn't find anything that can work both on nethunter and pc.

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New malware dropper called NullMixer infects Windows machines

New malware dropper called NullMixer infects Windows machinesPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A new malware dropper named ‘NullMixer’ is infecting Windows devices with a dozen different malware families simultaneously through fake software cracks promoted on malicious sites in Google Search results.​

NullMixer acts as an infection funnel, using a single Windows executable to launch a dozen different malware families, leading to over two dozen infections running a single device.

These infections range from password-stealing trojans, backdoors, spyware, bankers, fake Windows system cleaners, clipboard hijackers, cryptocurrency miners, and even further malware loaders.

To distribute the malware, the malware distributors use ‘black hat SEO’ to display websites promoting the fake game cracks and pirated software activators in high search result positions on Google.

BleepingComputer tested a Google search for ‘software crack,’ and many of the sites said to be distributing this malware, as shown below, were listed in our search results in the second, third, and fourth search result positions.
https://www.bleepstatic.com/images/news/u/1220909/Website%20snaps/malicious-sites.png
Launching dozens of malwareNullMixer is commonly downloaded as files named similarly to ‘win-setup-i864.exe,’ that when launched, create a new file called ‘setup_installer.exe.’

This new file is responsible for dropping dozens of malware families and, having done that, launches another executable, ‘setup_install.exe.’

That third file launches all malware dropped in the compromised machine using a hardcoded list of their names and the Windows’ cmd.exe’ tool.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/execution-chain.jpg
___________________________
@hacking_Attack
@Hacking_Video

ndancy.

Whatever the case, it would be practically impossible for all those malware families to run on a breached computer and not generate abundant symptoms of compromise for the victim to realize the infection.

These symptoms could include heavy hard disk activity, increased CPU and memory utilization, unusual windows opening for no reason, or simply a noticeable performance issue on the infected device.

Thus, NullMixer is less of a stealthy threat now and more of a catastrophic encounter that can likely only be resolved through a reinstall of Windows.

Users must always consider the risks of downloading executables from obscure online sources and avoid resorting to software piracy.
Trending: Revolut hack: personal and banking data exposed
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-2-300x150.png New Erbium password-stealing malware spreads as game cracks, cheatsSeptember 27, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-1-300x150.png Microsoft SQL servers hacked with FARGO ransomware attacksSeptember 26, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-1-300x150.png Python’s Tarfile path traversal bug from 2007 still present in 350k open source reposSeptember 23, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-3-300x150.png Twitter failed to log you out of all devices after password resetsSeptember 22, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New malware dropper called NullMixer infects Windows machines first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video