Hacking Articles Tips Tricks Videos Tutorials

Searching for Subdomain Vulnerabilities using Censys

TL;DR- A ‘how-to’ on utilizing a great tool that takes the concept of ‘Google dorking’ to a whole new level. This article is highly…Continue reading on The Gray Area »
Read more...

8 views17:33

What is PKI, and why is it being used?

Ever thought about how you can validate the authenticity of a website and the data we are sending to it is really safe?Continue reading on CodeX »
Read more...

8 views17:33

Hacking Articles Tips Tricks Videos Tutorials

Searching for Subdomain Vulnerabilities using Censys
https://medium.com/the-gray-area/searching-for-subdomain-vulnerabilities-using-censys-d5463e77a1eb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Searching for Subdomain Vulnerabilities using Censys

TL;DR- A ‘how-to’ on utilizing a great tool that takes the concept of ‘Google dorking’ to a whole new level. This article is highly…

8 viewsedited 18:38

Hacking Articles Tips Tricks Videos Tutorials

8 views18:38

Hacking Articles Tips Tricks Videos Tutorials

TL;DR- A ‘how-to’ on utilizing a great tool that takes the concept of ‘Google dorking’ to a whole new level. This article is highly…Continue reading on The Gray Area » (https://medium.com/the-gray-area/searching-for-subdomain-vulnerabilities-using-censys-d5463e77a1eb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Searching for Subdomain Vulnerabilities using Censys

TL;DR- A ‘how-to’ on utilizing a great tool that takes the concept of ‘Google dorking’ to a whole new level. This article is highly…

8 viewsedited 18:38

Hacking Articles Tips Tricks Videos Tutorials

What is PKI, and why is it being used?
https://medium.com/codex/what-is-pki-and-why-is-it-being-used-d757dda823f3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is PKI, and why is it being used?

Ever thought about how you can validate the authenticity of a website and the data we are sending to it is really safe?

7 viewsedited 18:38

Hacking Articles Tips Tricks Videos Tutorials

8 views18:38

Hacking Articles Tips Tricks Videos Tutorials

Ever thought about how you can validate the authenticity of a website and the data we are sending to it is really safe?Continue reading on CodeX » (https://medium.com/codex/what-is-pki-and-why-is-it-being-used-d757dda823f3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

What is PKI, and why is it being used?

Ever thought about how you can validate the authenticity of a website and the data we are sending to it is really safe?

8 viewsedited 18:38

Hacking Articles Tips Tricks Videos Tutorials

8 views20:06

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Protect yourself against fake login screens (by learning how to make one)

https://external-preview.redd.it/vYVHggfeyr0gAKtbrx1azE9ALGGCUR3-Zh6NSvScVOk.jpg?width=320&crop=smart&auto=webp&s=5ebe630a227133363782a2feca7b91e90e07c5a2 submitted by /u/88-mph-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Protect yourself against fake login screens (by learning how to...

Posted in r/hacking by u/88-mph- • 2 points and 0 comments

9 viewsedited 20:06

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
Threatest : Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform.

Concepts

Detonators

A detonator describes how and where an attack technique is executed.

Supported detonators:

* Local command execution
* SSH command execution
* Stratus Red Team
* AWS detonator

Alert matchers

An alert matcher is a platform-specific integration that can check if an expected alert was triggered.

Supported alert matchers:

* Datadog security signals

Detonation and alert correlation

Each detonation is assigned a UUID. This UUID is reflected in the detonation and used to ensure that the matched alert corresponds exactly to this detonation.

The way this is done depends on the detonator; for instance, Stratus Red Team and the AWS Detonator inject it in the user-agent; the SSH detonator uses a parent process containing the UUID.

Sample usage

See examples for complete usage example.

Testing Datadog Cloud SIEM signals triggered by Stratus Red Team
threatest := Threatest()

threatest.Scenario("AWS console login").
WhenDetonating(StratusRedTeamTechnique("aws.initial-access.console-login-without-mfa")).
Expect(DatadogSecuritySignal("AWS Console login without MFA").WithSeverity("medium")).
WithTimeout(15 * time.Minute)

assert.NoError(t, threatest.Run())
Testing Datadog Cloud Workload Security signals triggered by running commands over SSH
ssh, _ := NewSSHCommandExecutor("test-box", "", "")

threatest := Threatest()

threatest.Scenario("curl to metadata service").
WhenDetonating(NewCommandDetonator(ssh, "curl http://169.254.169.254 --connect-timeout 1")).
Expect(DatadogSecuritySignal("EC2 Instance Metadata Service Accessed via Network Utility"))

assert.NoError(t, threatest.Run())

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Threatest : Framework For End-To-End Testing Threat Detection Rules

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique

8 viewsedited 20:30

Hacking Articles Tips Tricks Videos Tutorials

7 views21:42

Hacking Articles Tips Tricks Videos Tutorials

7 views21:42

Hacking Articles Tips Tricks Videos Tutorials

7 views21:42

Hacking Articles Tips Tricks Videos Tutorials

Photo