Dark Reading: Attacks/Breaches
Tidal Cyber Closes $4M Funding Round For New Threat-Informed Defense Technology

.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Utkuici - Nessus Automation

https://blogger.googleusercontent.com/img/a/AVvXsEhn_XwTqM_s6E8qfyVPAY_KAbq1XfuWUzfcLIFlMV8zrfgEbNdoNPImJ_lgojs2UtLgt3Gyscrq_F8A7uRqYlXQBBUGWbfXHurmnzwsML4Hu2KO-9thxLx1HtEJTZBBtHTBclePRm15i1Pl9AHI7xPExHO_aypmG6DYnqvjwQDMNqj3Z41dQuGOWzATEQ=w640-h290 Today, with the spread of information technology systems, investments in the field of cyber security have increased to a great extent. Vulnerability management, penetration tests and various analyzes are carried out to accurately determine how much our institutions can be affected by cyber threats. With Tenable Nessus, the industry leader in vulnerability management tools, an IP address that has just joined the corporate network, a newly opened port, exploitable vulnerabilities can be determined, and a python application that can work integrated with Tenable Nessus has been developed to automatically identify these processes. Features* Finding New IP Address
* Finding New Port
* Finding New Exploitable Vulnerability Installationgit clone https://github.com/anil-yelken/Nessus-Automation cd Nessus-Automation sudo pip3 install requirements.txt UsageThe SIEM IP address in the codes should be changed.

In order to detect a new IP address exactly, it was checked whether the phrase "Host Discovery" was used in the Nessus scan name, and the live IP addresses were recorded in the database with a timestamp, and the difference IP address was sent to SIEM. The contents of the hosts table were as follows:

Usage: python finding-new-ip-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEhn_XwTqM_s6E8qfyVPAY_KAbq1XfuWUzfcLIFlMV8zrfgEbNdoNPImJ_lgojs2UtLgt3Gyscrq_F8A7uRqYlXQBBUGWbfXHurmnzwsML4Hu2KO-9thxLx1HtEJTZBBtHTBclePRm15i1Pl9AHI7xPExHO_aypmG6DYnqvjwQDMNqj3Z41dQuGOWzATEQ=w640-h290 By checking the port scans made by Nessus, the port-IP-time stamp information is recorded in the database, it detects a newly opened service over the database and transmits the data to SIEM in the form of "New Port:" port-IP-time stamp. The result observed by SIEM is as follows:

Usage: python finding-new-port-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEh53mmDZ9sSmDtt213_qPucEFoCExlGdvoXSXw3mLgpmlbQkyVVjt95rlbi9LGyPPrzegVDpajbFiRcGfmIIKZmqGGNcZIcyncN-UD0K1UR3INWON4kNiqgy69B-7t7ESkFN1-vWGcdDPJy4k9RUFbLsxvEE5KyHNRi0EJy2WdUG_4CmBvkdQjUMqyOOw=w640-h332 In the findings of vulnerability scans made in institutions and organizations, primarily exploitable vulnerabilities should be closed. At the same time, it records the vulnerabilities in the database that can be exploited with metasploit in the institutions and transmits this information to SIEM when it finds a different exploitable vulnerability on the systems. Exploitable vulnerabilities observed by SIEM:

Usage: python finding-exploitable-service-nessus.py https://blogger.googleusercontent.com/img/a/AVvXsEjkwBMu3zTVqAC6TwRqrXemNEFm-mIuLvUGMcnLn_YPbDnMxuWWAl25RVLYvfgCJyeufbx9bFrr6QR5mzUIZ25tMvHA2zHq9hOI9AsBiRTpYsQd_99qxuQV8bxZKnVVBlJeGloBrd3FVuJdWAJTn9qoSLNWCC1sELOJmEwtFkSqpHAwCgOLha1SwAQZ6Q=w640-h250 Contacthttps://twitter.com/anilyelken06 https://medium.com/@anilyelken Download Nessus-Automation

___________________________
@hacking_Attack
@Hacking_Video

Step 21: SQL Injection Fundamentals
https://medium.com/@R4v3ncl4w/step-21-sql-injection-fundamentals-c54bc69487c9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SQLi my old friend… honestly I’m hopin to run through this module fairly quickly. I did a Udemy course on SQL databases after struggling…Continue reading on Medium » (https://medium.com/@R4v3ncl4w/step-21-sql-injection-fundamentals-c54bc69487c9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resources I used to learn Hacking

I will share hacking resources I currently use to improve myself in the CyberSecurity field and to become a Pentester.
I hope this list…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Your Digital Footprint

Social Media.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is the Dark Web and Deep Web — Why people want to use it ?

https://cdn-images-1.medium.com/max/600/0*S3ODLsjm3pgG46iu.jpg
What is Dark Web ?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Step 21: SQL Injection Fundamentals

SQLi my old friend… honestly I’m hopin to run through this module fairly quickly. I did a Udemy course on SQL databases after struggling…Continue reading on Medium »
Read more...

Hacking on Medium
Hell In A Shell | Application Shimming

https://cdn-images-1.medium.com/max/641/1*VGkYCk9uSM7AG0OJ3urW_Q.png
In this series I’ll be sharing some of my favourite tips and tricks for red team and penetration testing engagements.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How good is a good password?

https://cdn-images-1.medium.com/max/800/1*d2jnLAJ9iKJcQV7fDGLQIQ.jpeg
Passwords…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Hack Android and iPhones

https://cdn-images-1.medium.com/max/900/1*lOX2ohtAOLBf36rOHPkTHg.jpeg
If you believed your phone was safe, reconsider. This WikiLeaks leak claims that the CIA has already created an amazing array of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The story of the 0-day crit that wasn’t

https://cdn-images-1.medium.com/max/817/0*1eMaNtSE5OMqK1lK.png
Sharing the journey of finding a critical vulnerability in a popular DeFi app, and then taking an unexpected turn.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Step 21: SQL Injection Fundamentals

https://cdn-images-1.medium.com/max/892/1*uc9r_zj1EiAqfmxFeMpVdA.png
SQLi my old friend… honestly I’m hopin to run through this module fairly quickly. I did a Udemy course on SQL databases after struggling…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video