5 Brain Hacks That Made me one among the Top 15 Security Researchers!
https://medium.com/illumination/5-brain-hacks-that-made-me-one-among-the-top-15-security-researchers-779db47b3fc9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Continue reading on ILLUMINATION » (https://medium.com/illumination/5-brain-hacks-that-made-me-one-among-the-top-15-security-researchers-779db47b3fc9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
5 Brain Hacks That Made me one among the Top 15 Security Researchers!

https://cdn-images-1.medium.com/max/601/0*Z8Osxp3UHP4sk15V.jpeg
Continue reading on ILLUMINATION »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Madeye’s Castle TryHackMe Writeup

https://cdn-images-1.medium.com/max/940/1*IW7eHsCLrKx32K4dALAPGw.png
Madeye’s Castle is a medium rated Linux room on tryhackme by madeye.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Faculty — HackTheBox walkthrough

https://cdn-images-1.medium.com/max/711/1*6DdOKIByFYOpua-PJGMr7A.png
This post is regarding an HTB machine named Faculty. The difficulty of this machine was medium and it was a fun box.

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Some of the Best Search Engines used by Hackers/Security Researchers/Bug Bounty Hunters in 2022

https://cdn-images-1.medium.com/max/740/0*MmxDOVkkyPGx0zPH.png
The most exciting part about being a security researcher is when you’ve got a hunch and you have that moment when you feel like you have…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Iran Petrol Pump Cyber Attack

https://cdn-images-1.medium.com/max/600/1*2qNQaYNPAPnRq0sfcTtuuQ.png
Iran is a major oil producer and has heavily subsidized its domestic petrol but the cost of fuel has been a flashpoint in an economy…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe En-Pass Writeup

https://cdn-images-1.medium.com/max/936/1*jP6JhzrJEkrAnC02ePkCpg.png
TryHackMe En-pass Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Tryhackme Surfer Makine Çözümü
https://medium.com/@barisures/tryhackme-surfer-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-a6348ad5dadc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Açıklama: Selam arkadaşlar, Tryhackme platformunda bulunan ‘Epoch’ isimli makinenin çözümünü sizinle paylaşıyor olacağım. Bu makinede Bu…Continue reading on Medium » (https://medium.com/@barisures/tryhackme-surfer-makine-%C3%A7%C3%B6z%C3%BCm%C3%BC-a6348ad5dadc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Threatest - Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules
http://www.kitploit.com/2022/10/threatest-threatest-is-go-framework-for.html

___________________________
@hacking_Attack
@Hacking_Video

Threatest is a Go framework for testing threat detection (https://www.kitploit.com/search/label/Threat%20Detection) end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post: https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/
Concepts Detonators A detonator describes how and where an attack technique is executed. Supported detonators: Local command execution SSH command execution Stratus Red Team AWS detonator Alert matchers An alert matcher is a platform-specific integration that can check if an expected alert was triggered. Supported alert matchers: Datadog security signals Detonation and alert correlation Each detonation is assigned a UUID. This UUID is reflected in the detonation and used to ensure that the matched alert corresponds exactly to this detonation. The way this is done depends on the detonator; for instance, Stratus Red Team (https://www.kitploit.com/search/label/Red%20Team) and the AWS Detonator inject it in the user-agent; the SSH detonator uses a parent process containing the UUID. Sample usage See examples (https://github.com/DataDog/threatest/blob/main/examples) for complete usage example. Testing Datadog Cloud SIEM signals (https://www.kitploit.com/search/label/Signals) triggered by Stratus Red Team threatest := Threatest()

threatest.Scenario("AWS console login").
WhenDetonating(StratusRedTeamTechnique("aws.initial-access.console-login-without-mfa")).
Expect(DatadogSecuritySignal("AWS Console login without MFA").WithSeverity("medium")).
WithTimeout(15 * time.Minute)

assert.NoError(t, threatest.Run()) Testing Datadog Cloud Workload Security signals triggered by running commands over SSH ssh, _ := NewSSHCommandExecutor("test-box", "", "")

threatest := Threatest()

threatest.Scenario("curl to metadata service").
WhenDetonating(NewCommandDetonator(ssh, "curl http://169.254.169.254 --connect-timeout 1")).
Expect(DatadogSecuritySignal("EC2 Instance Metadata Service Accessed via Network Utility"))

assert.NoError(t, threatest.Run())

Download Threatest (https://github.com/DataDog/threatest)

___________________________
@hacking_Attack
@Hacking_Video