Bug Bounty RoadMap/Methodology

Bug Bounty is the technique/process of finding bugs on programs by using different methodology and reporting those bugs to the respective…Continue reading on Medium »
Read more...

Please break my website:
https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/

hey guys, good afternoon/morning/evening - so, I am a founder of a crypto Analytics website - https://cryptosentiments.xyz (https://cryptosentiments.xyz/) [Web only]
The idea of this website is NOT to monetize it anyway - it's made so that retail investors would have chance to bet on microcaps which could potentially be a unicorn like Shiba/Doge/you name it. As again, this is not a marketing gimmick. I already have 200+ daily users who visit my website. I noticed on some reddit thread that you could ask here for collective pentest by you skilled pentesters/security Engineers. So, yeah, that's that. Feel free to take down my website using your novel skills. I will buy you beer(I can pay you on USDC/BUSD or any crypto if you manage to exploit it). Cheers guys! Happy weekend. PS: Please send me your findings to hello@cryptosentiments.xyz (mailto:hello@cryptosentiments.xyz) - this is to prove that I indeed own the website. Thanks folks! submitted by /u/ElegantAd9162 (https://www.reddit.com/user/ElegantAd9162)
[link] (https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/) [comments] (https://www.reddit.com/r/Pentesting/comments/xxotmt/please_break_my_website/)

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/JlSYKKLzVuNXnelvU_yfX31T4lNiU1eZE8N21NA62r4.jpg Blizard has decided to encrypt the 3D Models of its characters in the new game Overwatch 2. I thought it would be a fun challange to update/make tools to decrypt its assets. Are there any good places to brainstorm ideas and get people interested? Thx.

​

https://preview.redd.it/v2nmcucrtas91.png?width=680&format=png&auto=webp&s=3ba8ac74763374f4c64b9136492a520cf0bea3cc

submitted by /u/TheRedSuspicious
[link] [comments]

hacking: security in practice
What's the best alternative to this Hacker News course?

I was going to pay money ($20) for this set of courses, but I was wondering, is there a similar set of free resources to this?

submitted by /u/TheHunter920
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Parrot 5.1 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjurce2jTY2YVJZXrwfGY2YzGs8IRoQDZP9GFfbWnS__2Ccg1WL0jpqJ9B1PhfVz3OugUjVM9tiOZKoJ4fXljNnubNjfrbJHwp9zJrFNnNfHKJNPK9E8d9MI8OFP4qV2P6EL0vrDq7ePBcN38O6WxI3RYGG0Wh--fvDXE56ukC9tk2t3WrHOc6-Y0BZoA/w640-h328/parrot.png Parrot OS 5.1 is officially released. We're proud to say that the new version of Parrot OS 5.1 is available for download; this new version includes a lot of improvements and updates that makes the distribution more performing and more secure. How do I get Parrot OS?You can download Parrot OS by clicking here and, as always, we invite you to never trust third part and unofficial sources.

If you need any help or in case the direct downloads don't work for you, we also provide official Torrent files, which can circumvent firewalls and network restrictions in most cases. How do I upgrade from a previous version?First of all, we always suggest to update your version for being sure that is stable and functional. You can upgrade an existing system via APT using one of the following commands:

* sudo parrot-upgradeor

* sudo apt update && sudo apt full-upgradeEven if we recommend to always update your version, it is also recommended to do a backup and re-install the latest version to have a cleaner and more reliable user experience, especially if you upgrade from a very old version of parrot. What's new in Parrot OS 5.1New kernel 5.18.You can find all the infos about the new Kernel 5.18 by clickig on this link. Updated docker containersOur docker offering has been revamped! We now provide our dedicated parrot.run image registry along with the default docker.io one.

All our images are now natively multiarch, and support amd64 and arm64 architectures.

Our containers offering was updated as well, and we are committed to further improve it.

Run docker run --rm -ti --network host -v $PWD/work:/work parrot.run/coreand give our containers a try without having to install the system, or visit our Docker images page to explore the other containers we offer. Updated backports.Several packages were updated and backported, like the new Golang 1.19 or Libreoffice 7.4. This is part of our commitment to provide the latest version of every most important software while choosing a stable LTS release model.

To make sure to have all the latest packages installed from our backports channel, use the following commands:

* sudo apt update* sudo apt full-upgrade -t parrot-backportsSystem updatesThe system has received important updates to some opf its key packages, like parrot-menu, which now provides additional launchers to our newly imported tools; or parrot-core, which now provides a new firefox profile with improved security hardening, plus some minor bugfixes to our zshrc configuration. Firefox profile overhaultAs mentioned earlier, our Firefox profile has received a major update that significantly improves the overall privacy and security.

Our bookmarks collection has been revamped, and now includes new resources, including OSINT services, new learning sources and other useful resources for hackers, developers, students and security researchers.

We have also boosted our effort to avoid Mozilla telemetry and bring DuckDuckGo back as the default search engine, while we are exploring other alternatives for the future. Tools updatesMost of our tools have received major version updates, especially our reverse engineering tools, like rizin and rizin-cutter.

Important updates involved metasploit, exploitdb and other popular tools as well. New AnonSurf 4.0The new AnonSurf 4 represents a major upgrade for our popular anonymity tool.

Anonsurf [...]

___________________________
@hacking_Attack
@Hacking_Video

is our in-house anonymity solution that routes all the system traffic through TOR automatically without having to set up proxy settings for each individua program, and preventing traffic leaking in most cases.

The new version provides significant fixes and reliability updates, fully supports debian systems without the old resolvconf setup, has a new user interface with improved system tray icon and settings dialog window, and offers a better overall user experience. Parrot IoT improvementsOur IoT version now implements significant performance improvements for the various Raspberry Pi boards, and finally includes Wi-Fi support for the Raspberry Pi 400 board.

The Parrot IoT offering has also been expanded, and it now offers Home and Security editions as well, with a full MATE desktop environment exactly like the desktop counterpart. Architect Edition improvementsOur popular Architect Edition now implements some minor bugfixes and is more reliable than ever.

The Architect Edition is a special edition of Parrot that enables the user to install a barebone Parrot Core system, and then offers a selection of additional modules to further customize the system.

You can use Parrot Architect to install other desktop environments like KDE, GNOME or XFCE, or to install a specific selection of tools. New infrastructure powered by Parrot and KubernetesThe Architect Edition is also used internally by the Parrot Engineering Team to install Parrot Server Edition on all the servers that power our infrastructure, which is officially 100% powered by Parrot and Kubernetes.

This is a major change in the way we handle our infrastructure, which enables us to implement better autoscaling, easier management, smaller attack surface and an overall better network, with the improved scalability and security we were looking for. Download Parrot Security 5.1

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Linux Kernel 5.19.12 bug could damage Intel laptop displays

Linux Kernel 5.19.12 bug could damage Intel laptop displaysPost Views: 7 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes Linux users have reported seeing weird white flashes and rapid blinking on their Intel laptop displays after upgrading to Linux kernel version 5.19.12, leading to warnings that the bug may damage displays.Linux kernel version 5.19.12 isn’t experimental or beta but a point release of the stable branch that came out on September 28, 2022.

Besides being a visual annoyance, the unexpected screen flickering prevents users from doing anything on their systems, and Intel Linux kernel engineer Ville Syrjäl warns that it could also damage the display.

After analyzing the Linux logs of users affected by the issue, Syrjäl replied to the kernel mailing list saying that the problem lies in bogus panel power sequencing delays, which may harm the panels.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
Syrjä recommended immediate reversion of the Linux Kernel to an older version to avoid causing hardware damage on people’s machines and to publish a recommendation that “no one using laptops with Intel GPUs run 5.19.2”.

Unfortunately, this realization came after many users had already upgraded to the buggy Linux version, risking damage to their systems and becoming forced to apply kernel version downgrades.

The most sizable community of users impacted by the problem was that of Framework laptops, reporting issues with Arch and Fedora following an upgrade to Linux kernel 5.19.2.

Greg Kroah-Hartman, the leading maintainer of the stable branch, released kernel version 5.19.13 on Tuesday, resolving the problem and giving Linux distributions a safe stepping stone to bounce to.

“This release is to resolve a regression on some Intel graphics systems that had problems with 5.19.12. If you do not have this problem with 5.19.12, there is no need to upgrade,” reads the release announcement.

Popular Arch-based distribution Majaro has already announced they’ll jump from 5.19.7 directly to 5.19.13, avoiding introducing risks to users of Intel GPU laptops.

However, given the delay in pushing Linux kernel upgrades on many other distributions, the buggy version might land on some of them later.
Trending: A primer on OS Command Injection Attacks
Trending: Recon Tool: ReconSpider
Users are advised to check the kernel version numbers before upgrading and avoid Linux 5.19.12 if they’re using an Intel laptop.

Those already impacted by the bug are advised not to leave their displays operating in the blinking mode for long, as this increases the chances of causing irreversible damage to the screen.

Typically, bootloaders allow users to pick from the last three kernel versions, so reverting to a non-problematic version shouldn’t be too hard.

If you don’t see the option on Grub, press and hold the “Shift” button on your keyboard while booting.

Meanwhile, the release of mainline version 6.0 was announced by Linus Torvalds on Sunday, bringing support for Arc GPUs, AMD RDNA 3, and Intel “Raptor Lake,” performance-boosting scheduler changes for Intel Xeon and AMD EPYC chips, energy tweaks, and more.

The next milestone will be version 6.1, which will likely be the first to support Rust, a high-performance memory-safe programming language that provides raw speed and flexibility. ​Trending: Microsoft SQL servers hacked with FARGO ransomware attacks Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (rel[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Offensive Security Tool: VLANPWN

Offensive Security Tool: VLANPWNPost Views: 7 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes VLANPWNVLANPWN is a tool written by in9uz, it is divided into 2 python scripts.

DoubleTagging.py – It is designed to carry out a VLAN Hopping attack as a result of the injection of a frame with two 802.1Q tags.

DTPHijacking.py – A script for conducting a DTP Switch Spoofing/Hijacking attack. It sends a malicious DTP-Desirable frame, as a result of which the attacker’s machine becomes a trunk channel. The impact of this attack is that you can bypass the segmentation of VLAN networks and see all the traffic of VLAN networks.

A great tool to test for the Red Team and Pentesters when performing Internal pentesting and post-exploitation techniques.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/SS1-1024x748.png Example:python3 DoubleTagging.py --interface eth0 --nativevlan 1 --targetvlan 20 --victim 10.10.20.24 --attacker 10.10.10.54Trending: Recon Tool: ReconSpider
Trending: Offensive Security Tool: Arjun
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/SS2-1024x819.png Example:python3 DTPHijacking.py --interface eth0DisclaimerThis tool is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of this tool. We use it to test under NDA agreements with clients and their consents for Pentesting purposes and we never encourage to misuse or take responsibility for any damage caused!
Clone the repo from here: GitHub Link
Trending: Write up: A primer on OS Command Injection Attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ProtOSINT-300x150.png OSINT Tool: ProtOSINTSeptember 30, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/BF_ActiveSub-300x150.png Recon Tool: BF ActiveSubSeptember 29, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/ReconSpider-300x150.png Recon Tool: ReconSpiderSeptember 23, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Social-Hunter-300x150.png OSINT Tool: Social HunterSeptember 22, 2022
Reading Time: 2 minutes https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Offensive Security Tool: VLANPWN first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

ated to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-2-300x150.png Microsoft SQL servers backdoored with new malwareOctober 6, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-1-300x150.png Researchers get $46k in bounties for Akamai misconfiguration vulnerabilityOctober 5, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-300x150.png Microsoft confirms zero-day exploits against Exchange Server in ‘limited’ attacksOctober 4, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/10/Images-for-the-News-posts-7-300x150.png Lazarus hackers abuse Dell driver bug using new FudModule rootkitOctober 3, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Linux Kernel 5.19.12 bug could damage Intel laptop displays first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Real Fake Bitcoin Sender Software, Fake BTC Transaction Sender Tool Fake Bitcoin Sender Software…

https://cdn-images-1.medium.com/max/600/1*GBPQmqKS2-qEfPBvI3-fmA.jpeg
WHAT IS BITCOIN

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Encode x StarkNet Autumn Hackathon: dApp<-Wallet Integration-A Walk-Through for New dApp Projects…

https://cdn-images-1.medium.com/max/1920/1*8xCdYtY1hU5GpXTp8hN76A.jpeg

On Thursday, 6th October we were delighted to host the dApp<-Wallet Integration<-A Walk-Through for New dApp Projects event for our…
Continue reading on Encode Club »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BSC Chain Cross-Chain Bridge Hacking Analysis

https://cdn-images-1.medium.com/max/1600/1*_P5Y3d2GRSz-xdVBLyIqgQ.png
Brief Description Of The Attack

Continue reading on Numen Cyber Labs »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PSScriptAnalyzer: SAST Tool for PowerShell Script

https://cdn-images-1.medium.com/max/1559/1*-adRiLAlD8dh1ns-YUW5MA.png
PowerShell Script Analyzer, also known as PSScriptAnalyzer, is a static code analysis tool (SAST tool), which examines the PowerShell…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video