Hacking on Medium
Octubre mes de la Ciberseguridad.

https://cdn-images-1.medium.com/max/2000/0*rKZ_Ml0sReukDkCH
Cuando un niño usa su computadora, las medidas de seguridad y las prácticas de seguridad normales pueden no ser suficientes. ¿Qué pasa si…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can my employer see my personal laptop when I connect it to the bigger work monitor?

I have the work monitor and laptop for work. If I disconnect from my work laptop and connect my personal laptop after hours, can they still monitor that??

submitted by /u/qnem
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Sharing Knowledge at 44CON

The infosec conference named after the UK's calling code returned this year with a focus on building a healthy community.

Dark Reading: Attacks/Breaches
macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks

Exploit allows unsigned and unnotarized macOS applications to bypass Gatekeeper and other security, without notifying the user.

Dark Reading: Attacks/Breaches
US Consumers Are Finally Becoming More Security & Privacy Conscious

The trend, spotted by Consumer Reports, could mean good news for organizations struggling to contain remote work challenges.

Hacking on Medium
All Been Crypto — Week 7 Oct 2022

https://cdn-images-1.medium.com/max/1920/1*3VhucdCwzFwcDWe8hc-4rQ.jpeg
Another very much range bound week with BTC +2% WoW still lingering below 20k and overall market cap scratching at the 1tn mark. Obviously…

Continue reading on Coinmonks »

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty RoadMap/Methodology
https://maheshbasnet.medium.com/bug-bounty-roadmap-methodology-f58f30b02218?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty is the technique/process of finding bugs on programs by using different methodology and reporting those bugs to the respective…Continue reading on Medium » (https://maheshbasnet.medium.com/bug-bounty-roadmap-methodology-f58f30b02218?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Parrot 5.1 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
http://www.kitploit.com/2022/10/parrot-51-security-gnulinux.html

___________________________
@hacking_Attack
@Hacking_Video

Parrot OS 5.1 is officially released. We're proud to say that the new version of Parrot OS 5.1 is available for download; this new version includes a lot of improvements and updates that makes the distribution more performing and more secure.How do I get Parrot OS?You can download Parrot OS by clicking here (http://parrotsec.org/download) and, as always, we invite you to never trust third part and unofficial sources.If you need any help or in case the direct downloads don't work for you, we also provide official Torrent files, which can circumvent firewalls and network restrictions in most cases.How do I upgrade from a previous version?First of all, we always suggest to update your version for being sure that is stable and functional. You can upgrade an existing system via APT using one of the following commands:sudo parrot-upgradeorsudo apt update && sudo apt full-upgradeEven if we recommend to always update your version, it is also recommended to do a backup and re-install the latest version to have a cleaner and more reliable user experience, especially if you upgrade from a very old version of parrot.What's new in Parrot OS 5.1New kernel 5.18.You can find all the infos about the new Kernel 5.18 by clickig on this link (https://kernelnewbies.org/Linux_5.18#fprobe.2C_for_probing_multiple_functions_with_a_single_probe_handler).Updated docker containersOur docker offering has been revamped! We now provide our dedicated parrot.run image registry along with the default docker.io one.All our images are now natively multiarch, and support amd64 and arm64 architectures.Our containers offering was updated as well, and we are committed to further improve it.Run docker run --rm -ti --network host -v $PWD/work:/work parrot.run/core and give our containers a try without having to install the system, or visit our Docker images page (https://docs.parrotsec.org/docs/cloud/parrot-on-docker) to explore the other containers we offer.Updated backports.Several packages were updated and backported, like the new Golang 1.19 or Libreoffice 7.4. This is part of our commitment to provide the latest version of every most important software while choosing a stable LTS release model.To make sure to have all the latest packages installed from our backports channel, use the following commands:sudo apt updatesudo apt full-upgrade -t parrot-backportsSystem updatesThe system has received important updates to some opf its key packages, like parrot-menu, which now provides additional launchers to our newly imported tools; or parrot-core, which now provides a new firefox profile with improved security hardening, plus some minor bugfixes to our zshrc configuration.Firefox profile overhaultAs mentioned earlier, our Firefox profile has received a major update that significantly improves the overall privacy and security.Our bookmarks collection has been revamped, and now includes new resources, including OSINT services, new learning sources and other useful resources for hackers, developers, students and security researchers.We have also boosted our effort to avoid Mozilla telemetry and bring DuckDuckGo back as the default search engine, while we are exploring other alternatives for the future.Tools updatesMost of our tools have received major version updates, especially our reverse engineering tools, like rizin and rizin-cutter.Important updates involved metasploit, exploitdb and other popular tools as well.New AnonSurf 4.0The new AnonSurf 4 represents a major upgrade for our popular anonymity tool.Anonsurf is our in-house anonymity solution that routes all the system traffic through TOR automatically without having to set up proxy settings for each individua program, and preventing traffic leaking in most cases.The new version provides significant fixes and reliability updates, fully supports debian systems without the old resolvconf setup, has a new user interface with improved system tray icon and settings dialog window, and

___________________________
@hacking_Attack
@Hacking_Video

offers a better overall user experience.Parrot IoT improvementsOur IoT version now implements significant performance improvements for the various Raspberry Pi boards, and finally includes Wi-Fi support for the Raspberry Pi 400 board.The Parrot IoT offering has also been expanded, and it now offers Home and Security editions as well, with a full MATE desktop environment exactly like the desktop counterpart.Architect Edition improvementsOur popular Architect Edition now implements some minor bugfixes and is more reliable than ever.The Architect Edition is a special edition of Parrot that enables the user to install a barebone Parrot Core system, and then offers a selection of additional modules to further customize the system.You can use Parrot Architect to install other desktop environments like KDE, GNOME or XFCE, or to install a specific selection of tools.New infrastructure powered by Parrot and KubernetesThe Architect Edition is also used internally by the Parrot Engineering Team to install Parrot Server Edition on all the servers that power our infrastructure, which is officially 100% powered by Parrot and Kubernetes.This is a major change in the way we handle our infrastructure, which enables us to implement better autoscaling, easier management, smaller attack surface and an overall better network, with the improved scalability and security we were looking for.

Download Parrot Security 5.1 (https://download.parrotsec.org/parrot/iso/4.7/)

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty RoadMap/Methodology

Bug Bounty is the technique/process of finding bugs on programs by using different methodology and reporting those bugs to the respective…Continue reading on Medium »
Read more...

Please break my website:
https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/

hey guys, good afternoon/morning/evening - so, I am a founder of a crypto Analytics website - https://cryptosentiments.xyz (https://cryptosentiments.xyz/) [Web only]
The idea of this website is NOT to monetize it anyway - it's made so that retail investors would have chance to bet on microcaps which could potentially be a unicorn like Shiba/Doge/you name it. As again, this is not a marketing gimmick. I already have 200+ daily users who visit my website. I noticed on some reddit thread that you could ask here for collective pentest by you skilled pentesters/security Engineers. So, yeah, that's that. Feel free to take down my website using your novel skills. I will buy you beer(I can pay you on USDC/BUSD or any crypto if you manage to exploit it). Cheers guys! Happy weekend. PS: Please send me your findings to hello@cryptosentiments.xyz (mailto:hello@cryptosentiments.xyz) - this is to prove that I indeed own the website. Thanks folks! submitted by /u/ElegantAd9162 (https://www.reddit.com/user/ElegantAd9162)
[link] (https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/) [comments] (https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/)

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/JlSYKKLzVuNXnelvU_yfX31T4lNiU1eZE8N21NA62r4.jpg Blizard has decided to encrypt the 3D Models of its characters in the new game Overwatch 2. I thought it would be a fun challange to update/make tools to decrypt its assets. Are there any good places to brainstorm ideas and get people interested? Thx.

​

https://preview.redd.it/v2nmcucrtas91.png?width=680&format=png&auto=webp&s=3ba8ac74763374f4c64b9136492a520cf0bea3cc

submitted by /u/TheRedSuspicious
[link] [comments]

hacking: security in practice
What's the best alternative to this Hacker News course?

I was going to pay money ($20) for this set of courses, but I was wondering, is there a similar set of free resources to this?

submitted by /u/TheHunter920
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Parrot 5.1 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjurce2jTY2YVJZXrwfGY2YzGs8IRoQDZP9GFfbWnS__2Ccg1WL0jpqJ9B1PhfVz3OugUjVM9tiOZKoJ4fXljNnubNjfrbJHwp9zJrFNnNfHKJNPK9E8d9MI8OFP4qV2P6EL0vrDq7ePBcN38O6WxI3RYGG0Wh--fvDXE56ukC9tk2t3WrHOc6-Y0BZoA/w640-h328/parrot.png Parrot OS 5.1 is officially released. We're proud to say that the new version of Parrot OS 5.1 is available for download; this new version includes a lot of improvements and updates that makes the distribution more performing and more secure. How do I get Parrot OS?You can download Parrot OS by clicking here and, as always, we invite you to never trust third part and unofficial sources.

If you need any help or in case the direct downloads don't work for you, we also provide official Torrent files, which can circumvent firewalls and network restrictions in most cases. How do I upgrade from a previous version?First of all, we always suggest to update your version for being sure that is stable and functional. You can upgrade an existing system via APT using one of the following commands:

* sudo parrot-upgradeor

* sudo apt update && sudo apt full-upgradeEven if we recommend to always update your version, it is also recommended to do a backup and re-install the latest version to have a cleaner and more reliable user experience, especially if you upgrade from a very old version of parrot. What's new in Parrot OS 5.1New kernel 5.18.You can find all the infos about the new Kernel 5.18 by clickig on this link. Updated docker containersOur docker offering has been revamped! We now provide our dedicated parrot.run image registry along with the default docker.io one.

All our images are now natively multiarch, and support amd64 and arm64 architectures.

Our containers offering was updated as well, and we are committed to further improve it.

Run docker run --rm -ti --network host -v $PWD/work:/work parrot.run/coreand give our containers a try without having to install the system, or visit our Docker images page to explore the other containers we offer. Updated backports.Several packages were updated and backported, like the new Golang 1.19 or Libreoffice 7.4. This is part of our commitment to provide the latest version of every most important software while choosing a stable LTS release model.

To make sure to have all the latest packages installed from our backports channel, use the following commands:

* sudo apt update* sudo apt full-upgrade -t parrot-backportsSystem updatesThe system has received important updates to some opf its key packages, like parrot-menu, which now provides additional launchers to our newly imported tools; or parrot-core, which now provides a new firefox profile with improved security hardening, plus some minor bugfixes to our zshrc configuration. Firefox profile overhaultAs mentioned earlier, our Firefox profile has received a major update that significantly improves the overall privacy and security.

Our bookmarks collection has been revamped, and now includes new resources, including OSINT services, new learning sources and other useful resources for hackers, developers, students and security researchers.

We have also boosted our effort to avoid Mozilla telemetry and bring DuckDuckGo back as the default search engine, while we are exploring other alternatives for the future. Tools updatesMost of our tools have received major version updates, especially our reverse engineering tools, like rizin and rizin-cutter.

Important updates involved metasploit, exploitdb and other popular tools as well. New AnonSurf 4.0The new AnonSurf 4 represents a major upgrade for our popular anonymity tool.

Anonsurf [...]

___________________________
@hacking_Attack
@Hacking_Video

is our in-house anonymity solution that routes all the system traffic through TOR automatically without having to set up proxy settings for each individua program, and preventing traffic leaking in most cases.

The new version provides significant fixes and reliability updates, fully supports debian systems without the old resolvconf setup, has a new user interface with improved system tray icon and settings dialog window, and offers a better overall user experience. Parrot IoT improvementsOur IoT version now implements significant performance improvements for the various Raspberry Pi boards, and finally includes Wi-Fi support for the Raspberry Pi 400 board.

The Parrot IoT offering has also been expanded, and it now offers Home and Security editions as well, with a full MATE desktop environment exactly like the desktop counterpart. Architect Edition improvementsOur popular Architect Edition now implements some minor bugfixes and is more reliable than ever.

The Architect Edition is a special edition of Parrot that enables the user to install a barebone Parrot Core system, and then offers a selection of additional modules to further customize the system.

You can use Parrot Architect to install other desktop environments like KDE, GNOME or XFCE, or to install a specific selection of tools. New infrastructure powered by Parrot and KubernetesThe Architect Edition is also used internally by the Parrot Engineering Team to install Parrot Server Edition on all the servers that power our infrastructure, which is officially 100% powered by Parrot and Kubernetes.

This is a major change in the way we handle our infrastructure, which enables us to implement better autoscaling, easier management, smaller attack surface and an overall better network, with the improved scalability and security we were looking for. Download Parrot Security 5.1

___________________________
@hacking_Attack
@Hacking_Video