submitted by /u/_noraj_ (https://www.reddit.com/user/_noraj_)
[link] (https://www.acceis.fr/transform-p3-p4-p5-vulnerabilities-to-p1/) [comments] (https://www.reddit.com/r/Pentesting/comments/xvaa0j/transform_p3_p4_p5_vulnerabilities_to_p1_or_how/)

___________________________
@hacking_Attack
@Hacking_Video

Utkuici - Nessus Automation
http://www.kitploit.com/2022/10/utkuici-nessus-automation.html

___________________________
@hacking_Attack
@Hacking_Video

Today, with the spread of information technology systems, investments in the field of cyber security have increased to a great extent. Vulnerability (https://www.kitploit.com/search/label/Vulnerability) management, penetration tests and various analyzes are carried out to accurately determine how much our institutions can be affected by cyber threats. With Tenable Nessus, the industry leader in vulnerability management (https://www.kitploit.com/search/label/Vulnerability%20Management) tools, an IP address that has just joined the corporate network, a newly opened port, exploitable vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) can be determined, and a python application that can work integrated with Tenable Nessus has been developed to automatically identify these processes.
Features Finding New IP Address Finding New Port Finding New Exploitable Vulnerability Installation git clone https://github.com/anil-yelken/Nessus-Automation cd Nessus-Automation sudo pip3 install requirements.txt Usage The SIEM IP address in the codes should be changed. In order to detect a new IP address exactly, it was checked whether the phrase "Host Discovery" was used in the Nessus scan name, and the live IP addresses were recorded in the database with a timestamp, and the difference IP address was sent to SIEM. The contents of the hosts table were as follows: Usage: python finding-new-ip-nessus.py

___________________________
@hacking_Attack
@Hacking_Video

By checking the port scans made by Nessus, the port-IP-time stamp information is recorded in the database, it detects a newly opened service over the database and transmits the data to SIEM in the form of "New Port:" port-IP-time stamp. The result observed by SIEM is as follows: Usage: python finding-new-port-nessus.py

___________________________
@hacking_Attack
@Hacking_Video

In the findings of vulnerability scans made in institutions and organizations, primarily exploitable vulnerabilities should be closed. At the same time, it records the vulnerabilities in the database that can be exploited with metasploit (https://www.kitploit.com/search/label/Metasploit) in the institutions and transmits this information to SIEM when it finds a different exploitable vulnerability on the systems. Exploitable vulnerabilities observed by SIEM: Usage: python finding-exploitable-service-nessus.py

___________________________
@hacking_Attack
@Hacking_Video

Contact https://twitter.com/anilyelken06 https://medium.com/@anilyelken

Download Nessus-Automation (https://github.com/anil-yelken/Nessus-Automation)

___________________________
@hacking_Attack
@Hacking_Video

Learning Basics: Over The Wire (Bandit -> Level 1 → Level 17)
https://apexvicky.medium.com/learning-basics-over-the-wire-bandit-level-1-level-17-d20bb856a60d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I know it’s been way too long, since I wrote an article. I was just too busy with my studies. Anyway, lets jump right in. I started this…Continue reading on Medium » (https://apexvicky.medium.com/learning-basics-over-the-wire-bandit-level-1-level-17-d20bb856a60d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ML Wallet Vulnerability
https://nmochea.medium.com/ml-wallet-vulnerability-c956f731dc19?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Disclaimer: The purpose of this research is to improve and strengthen security all issues discovered in this research are reported to the…Continue reading on Medium » (https://nmochea.medium.com/ml-wallet-vulnerability-c956f731dc19?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Phishing With Chromium's Application Mode

https://external-preview.redd.it/KF-X_Y4JLrBWCdT3TGwXWtks6UtDFutk3aVbsRbuVfs.jpg?width=640&crop=smart&auto=webp&s=d209fb6a6a59073f46ca4f9ae9640e88a0b4d2c7 submitted by /u/Seytonic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to bypass county's Internet "great" firewalls?

Hi there! Recently we had a big internet outage in my country, iran, ans now the goverment blocked like 90 percent of our access to global internet. Every kind of vpn you may think of are blocked. Nordvon, expresvpn, windscribe, proton vpn, etc. So some nerds like me tried to make our own vpns. I personally purchased a vps that's based in Germany and tried to setup OpenVPN on it, well as you may expect that didn't work, so tried wireguard with shadowsocks and surprisingly that didn't work either (it timeout on handshking everytime). After that i purchased another vps in my country so i could connect to i first and that vps was supposed to connect to the vps based in Germany and agian i failed.

Someothers tried http enjecting, ssh tunneling, etc and they failed too.

Right now I am connected to reddit using tor+snowflake however it struggles too, most if the time it for unknown reasons it get stucks on "added controll event port handler", whatever that is.

I also contacted netblocks and they said our current firewall is even worse than what is china is using.

So, does any one of you great people know anyway that friends in iran and I can connect to the Internet?

I'd be glad if you could help!

submitted by /u/yousef7118
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to hack a modern Android to erase conversations?

The app to hack is WhatsApp, is there Any tool/app recommended?

Erasing the app would be a nice call too.

submitted by /u/bigg_D_energy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Blueshift DEX on the Milkomeda Algorand A1 Testnet

It’s fair to say that I have always been waiting for a Blueshift integration with any of the top blockchains (outside of Cardano) like…Continue reading on Medium »
Read more...