hacking: security in practice
have youever tried to modify video game and are you in the cybersecurity field?

I have a theory

View Poll

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Industry standards - Companies giving access to sensitive personal data (contracts, photos) from publicly accessible URLs

I've recently come across the same issue twice, with major companies, so probably it has become a mainstream policy:

The first one, a multinational telco. I agreed to a new contract, which was published on a public URL for me to check and sign. The contract (which included my social security number, ID number, full name, date of birth, etc) was there for about a month; it was removed after I protested. I can't tell for how long it would be there.

The second one, an international enterprise: After I asked for my data stored on their systems (they give you the option, no special request) they send me a public URL also. It included my ID photos. They were there for 3 months, according to their policy. As an international company, they were much more cumbersome (rather unwilling) to remove them before the time their policy dictates; to be honest, I doubt if I spoke to any human being, probably they were all bots. I can't tell if my ID photos where publicly available after I asked my data or from the day I signed in.

Both companies answer was on the same basis: It's a URL which is not searchable (no results for these kind of URLs from internet search engines) so since I'm the only one who has it, I'm the only one capable of accessing it.
I consider this to NOT be secure. Like having something valuable on a public road, but it's a small road that no-one passes by; most probably, but not 100%, it won't be stolen.

So my questions for anybody in the IT security or audit industry,
- how is it possible for this policy to be acceptable from major companies? - Can it really be considered safe, a public URL; just because it's long, no results returned from search engines, and send only to one person? Send by non-encrypted e-mail, so even if the rest of the chain would be secure, it could be breached through mail. - If a malicious person (cracker, black hat hacker, whatever the terminology) or just a curious and very lucky person who tries many different URLs, access these data: Is there any way to persecute him/her? He did nothing unlawful, He just opened a public URL.

My question to hackers, have you managed to access such personal data on enterprises URLs? Is it really tough to traverse their sites to locate them?

submitted by /u/krackout21
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
recommendations for wireless adapters that work with kali nethunter and kali Linux out of the box and has packet injection and monitor mode?

also preferably under or equals 20$, I have seen alot on Ebay from 9-15$ that claim to work out of the box but couldn't find anything that can work both on nethunter and pc.

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
New malware dropper called NullMixer infects Windows machines

New malware dropper called NullMixer infects Windows machinesPost Views: 5 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A new malware dropper named ‘NullMixer’ is infecting Windows devices with a dozen different malware families simultaneously through fake software cracks promoted on malicious sites in Google Search results.​

NullMixer acts as an infection funnel, using a single Windows executable to launch a dozen different malware families, leading to over two dozen infections running a single device.

These infections range from password-stealing trojans, backdoors, spyware, bankers, fake Windows system cleaners, clipboard hijackers, cryptocurrency miners, and even further malware loaders.

To distribute the malware, the malware distributors use ‘black hat SEO’ to display websites promoting the fake game cracks and pirated software activators in high search result positions on Google.

BleepingComputer tested a Google search for ‘software crack,’ and many of the sites said to be distributing this malware, as shown below, were listed in our search results in the second, third, and fourth search result positions.
https://www.bleepstatic.com/images/news/u/1220909/Website%20snaps/malicious-sites.png
Launching dozens of malwareNullMixer is commonly downloaded as files named similarly to ‘win-setup-i864.exe,’ that when launched, create a new file called ‘setup_installer.exe.’

This new file is responsible for dropping dozens of malware families and, having done that, launches another executable, ‘setup_install.exe.’

That third file launches all malware dropped in the compromised machine using a hardcoded list of their names and the Windows’ cmd.exe’ tool.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/execution-chain.jpg
___________________________
@hacking_Attack
@Hacking_Video

ndancy.

Whatever the case, it would be practically impossible for all those malware families to run on a breached computer and not generate abundant symptoms of compromise for the victim to realize the infection.

These symptoms could include heavy hard disk activity, increased CPU and memory utilization, unusual windows opening for no reason, or simply a noticeable performance issue on the infected device.

Thus, NullMixer is less of a stealthy threat now and more of a catastrophic encounter that can likely only be resolved through a reinstall of Windows.

Users must always consider the risks of downloading executables from obscure online sources and avoid resorting to software piracy.
Trending: Revolut hack: personal and banking data exposed
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-2-300x150.png New Erbium password-stealing malware spreads as game cracks, cheatsSeptember 27, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-3-1-300x150.png Microsoft SQL servers hacked with FARGO ransomware attacksSeptember 26, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-2-1-300x150.png Python’s Tarfile path traversal bug from 2007 still present in 350k open source reposSeptember 23, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-1-3-300x150.png Twitter failed to log you out of all devices after password resetsSeptember 22, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post New malware dropper called NullMixer infects Windows machines first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What to do if your Twitch account is hacked?

https://cdn-images-1.medium.com/max/2600/1*BFKvUg3wiNOy8C3uOmCo2g.jpeg
Cybersecurity Hacking How-To Malware

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
This hacker Targeting macOS Users Interested in Crypto Jobs

https://cdn-images-1.medium.com/max/728/0*p_68ghKM91Gqc96Q.jpg
The infamous Lazarus Group has continued its pattern of leveraging unsolicited job opportunities to deploy malware targeting Apple’s macOS…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Catch The Flag

https://cdn-images-1.medium.com/max/2600/0*d5IvwLFBqTLomTIv
CTF is always attractive for cyber security professionals,hackers,penetration testers and students.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
evilgophish : Combination Of Evilginx2 And GoPhish

___________________________
@hacking_Attack
@Hacking_Video

All about: IDORs

IDORs happen when users can **access resources that do not belong to them** by directly reference the object ID, object number, or…Continue reading on Medium »
Read more...

hacking: security in practice
Self Hosted Proxy Service

We have created a proxy software that can be deployed to any server and will convert it into a proxy server. So here's how it works.

Let's say you have a server with IP 192.xxx.xxx.023.

We will deploy our software to your server on port let's say:8899

Now Your proxy server is up and running on 192.xxx.xxx.023:8899

To use the proxy simply pass the website in the URL like: -

http://192.xxx.xxx.023:8899/url=https://www.example.com

​

It will work seamlessly like any other proxy service e.g. ScrapingAPI, etc

​

Features:

1. Both residential/data center IPs to choose from.

2. Low pricing

3. Geolocation according to your requirement.

4. Decentralized nodes.

​

For more info please contact me.

submitted by /u/Pradeepkr34
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My Apartment building is switching encryption protocol

Hello,

I live in student accommodation. Me and some engineers clone RFID cards to create replicas for anyone who wants one. This is so people can leave one in their door and take one with them or if you lose one you still have a spare etc...

Protocol was MIFARE CLASSIC 48 bit, easy to crack with Cipher. They are switching to MIFARE PLUS 128 bit, not so easy. The company that provides this is ONITY. We understand we may have been the ones to cause this change.

Any suggestions to cut corners on cracking the encryption or are we stuffed?

submitted by /u/Ladzilla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
can the sova virus spread through PDFs or only through apks

Sova virus is a banking virus which enters the phone through smishing and mimics an app . The app can't be installed . It monitors screen shots , frequently tapped keys and installed apps and sends it to a command centre .

submitted by /u/TangerineThin4780
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
20 digit numerical Wordlist

My router has a default wifi password of 20 numerical digits. After attempts to build a wordlist containing at least some of the permutations i failed really hard (what is exactly the intention behind such a huge password).

What I've done so far:

1. start at 000... add one, save (simplyfied)
2. when starting the script again, check for the last number and continue from there

​

A few problems i aknowledged:

1. it takes for ever (I know thats supposed to be) and I can't imagine a way of shortening the list eg start at 01111.. but then cases like 0XXX...0...XXX are excluded (and checking for three same digits in a row would only slow it down even more)
2. the txt file i wrote everything into is getting EXRTREMELY HUGE: at 5*10^9 its 110GB (expected but can't find a way to fix this)

Im not asking for tech support, just wanting to collect some ideas.

Thank you in advance!

submitted by /u/theWizzard23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
video downloader drm chrome extension free 2022

submitted by /u/OnePaleontologist103
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Most Attackers Need Less Than 10 Hours to Find Weaknesses

Vulnerable configurations, software flaws, and exposed Web services allow hackers to find exploitable weaknesses in companies' perimeters in just hours, not days.

All about: IDORs
https://sl4x0.medium.com/all-about-idors-890fcd3bf330?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video