Hi, i have found low level vulnaribility on subdomain of nasa.gov simply using censys.At first i have used the process mentioned at my…Continue reading on Medium » (https://medium.com/@kandar.souvik6/found-vulnaribility-on-subdomain-of-nasa-gov-simply-using-censys-d93f253ff560?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advise for elevating prompt with reverse tcp shell

Lab setup: Attempting to attack a Microsoft Win10 developer Vm with Kali Linux. Using the social engineering toolkit, I was able to get a reverse shell back to the Kali machine,which gave me a cmd.exe session

From what I read online, I should be able to drop from a cmd.exe prompt into a powershell prompt (no issue) then run as administrator (issue) The Win10 VM is being promoted for creds and not my Kali Machine. The user I’m impersonating is a local admin, but the shell that i access in Kali doesn’t have permission to make registry changes or create additional users. Any advice/commands I should try next are appreciated.

submitted by /u/HelpBeginning4777
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I seem to have found a lot of IP addresses with almost all of their ports open.

So i was basically just playing around with zmap and then ended up coming across a load of IPs with many open ports. I scanned these IPs on nmap and noticed they are practically using every service you could think of. I'm wondering if this is some sort of configuration of the servers side causing it to appear that these ports are open or is it something else?

submitted by /u/Ok-Chipmunk4539
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Strange Bedfellows — a modern western urban fantasy adventure

https://cdn-images-1.medium.com/max/600/1*tVI0SwOCWJrmNEfejt_MhA.jpeg
“Ben?”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I hacked a $10 Target Halloween toy to be interactive

https://cdn-images-1.medium.com/max/2450/1*nUcYLW7LxEOS6pvclsrvag.jpeg
Triggering the bat toy’s movement and sound with motion detection, by hacking it to connect to a Raspberry Pi and a webcam.

Continue reading on Code Like A Girl »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Breaking Into Cyber Security — Part One

https://cdn-images-1.medium.com/max/2600/1*6MoVyuUN5SAz3RhVgh3Jyw.jpeg
“How do you get into cybersecurity?” I hear you cry. I don’t know, but I can tell you how I did it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Redirecionando portas por UPnP sem acesso ao roteador.

https://cdn-images-1.medium.com/max/1366/1*8OqUTTuhU6VuaHbcBkCZNw.png
UPnP(Universal Plug and Play) se trata de um conjunto de protocolos para que dispositivos ou serviços (O UPnP é comumente usado em IoT e…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Linux — Part 1

https://cdn-images-1.medium.com/max/2600/1*41UqIKvdPfutsYfXD8nhKA.png
In an earlier blog, we set up our basic cybersecurity homelab, now get yourself familiarised with the Linux environment. Try to use it as…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Scan QR Code and Got Hacked (CVE-2021–43530 : UXSS on Firefox Android Version)

I. QR CodeContinue reading on Medium »
Read more...

Scan QR Code and Got Hacked (CVE-2021–43530 : UXSS on Firefox Android Version)
https://medium.com/@sas.kunz/scan-qr-code-and-got-hacked-cve-2021-43530-uxss-on-firefox-android-version-768b24b326fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I. QR CodeContinue reading on Medium » (https://medium.com/@sas.kunz/scan-qr-code-and-got-hacked-cve-2021-43530-uxss-on-firefox-android-version-768b24b326fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Emotional Toll From Cyberattacks Can Linger Among Staff for Years

Research shows 1 in 7 employees involved in a cyberattack exhibits clinical trauma symptoms months after the incident.

Dark Reading: Attacks/Breaches
RCS Secure Catches Its Next Big Wave

Cybersecurity company RCS Secure announces round of Series A funding and name change as it rebrands to Third Wave Innovations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
China-Linked Cyber-Espionage Team Homes In on Hong Kong Government Orgs

The Winnti APT was spotted dropping several variants of Spyder Loader and other malware as part of the so-called Operation Cuckoobees.