Dark Reading: Attacks/Breaches
Apache Commons Vulnerability: Patch but Don't Panic

Experts say CVE-2022-42899 is a serious vulnerability, but widespread exploitation is unlikely because of the specific conditions that need to exist for it to happen.

Dark Reading: Attacks/Breaches
SBOMs: An Overhyped Concept That Won't Secure Your Software Supply Chain

We need more than the incomplete snapshot SBOMs provide to have real impact.

Found vulnaribility on subdomain of nasa.gov simply using censys
https://medium.com/@kandar.souvik6/found-vulnaribility-on-subdomain-of-nasa-gov-simply-using-censys-d93f253ff560?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, i have found low level vulnaribility on subdomain of nasa.gov simply using censys.At first i have used the process mentioned at my…Continue reading on Medium » (https://medium.com/@kandar.souvik6/found-vulnaribility-on-subdomain-of-nasa-gov-simply-using-censys-d93f253ff560?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advise for elevating prompt with reverse tcp shell

Lab setup: Attempting to attack a Microsoft Win10 developer Vm with Kali Linux. Using the social engineering toolkit, I was able to get a reverse shell back to the Kali machine,which gave me a cmd.exe session

From what I read online, I should be able to drop from a cmd.exe prompt into a powershell prompt (no issue) then run as administrator (issue) The Win10 VM is being promoted for creds and not my Kali Machine. The user I’m impersonating is a local admin, but the shell that i access in Kali doesn’t have permission to make registry changes or create additional users. Any advice/commands I should try next are appreciated.

submitted by /u/HelpBeginning4777
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I seem to have found a lot of IP addresses with almost all of their ports open.

So i was basically just playing around with zmap and then ended up coming across a load of IPs with many open ports. I scanned these IPs on nmap and noticed they are practically using every service you could think of. I'm wondering if this is some sort of configuration of the servers side causing it to appear that these ports are open or is it something else?

submitted by /u/Ok-Chipmunk4539
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Strange Bedfellows — a modern western urban fantasy adventure

https://cdn-images-1.medium.com/max/600/1*tVI0SwOCWJrmNEfejt_MhA.jpeg
“Ben?”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I hacked a $10 Target Halloween toy to be interactive

https://cdn-images-1.medium.com/max/2450/1*nUcYLW7LxEOS6pvclsrvag.jpeg
Triggering the bat toy’s movement and sound with motion detection, by hacking it to connect to a Raspberry Pi and a webcam.

Continue reading on Code Like A Girl »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Breaking Into Cyber Security — Part One

https://cdn-images-1.medium.com/max/2600/1*6MoVyuUN5SAz3RhVgh3Jyw.jpeg
“How do you get into cybersecurity?” I hear you cry. I don’t know, but I can tell you how I did it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Redirecionando portas por UPnP sem acesso ao roteador.

https://cdn-images-1.medium.com/max/1366/1*8OqUTTuhU6VuaHbcBkCZNw.png
UPnP(Universal Plug and Play) se trata de um conjunto de protocolos para que dispositivos ou serviços (O UPnP é comumente usado em IoT e…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Linux — Part 1

https://cdn-images-1.medium.com/max/2600/1*41UqIKvdPfutsYfXD8nhKA.png
In an earlier blog, we set up our basic cybersecurity homelab, now get yourself familiarised with the Linux environment. Try to use it as…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Scan QR Code and Got Hacked (CVE-2021–43530 : UXSS on Firefox Android Version)

I. QR CodeContinue reading on Medium »
Read more...

Scan QR Code and Got Hacked (CVE-2021–43530 : UXSS on Firefox Android Version)
https://medium.com/@sas.kunz/scan-qr-code-and-got-hacked-cve-2021-43530-uxss-on-firefox-android-version-768b24b326fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I. QR CodeContinue reading on Medium » (https://medium.com/@sas.kunz/scan-qr-code-and-got-hacked-cve-2021-43530-uxss-on-firefox-android-version-768b24b326fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video