hacking: security in practice
Protect yourself against fake login screens (by learning how to make one)

https://external-preview.redd.it/vYVHggfeyr0gAKtbrx1azE9ALGGCUR3-Zh6NSvScVOk.jpg?width=320&crop=smart&auto=webp&s=5ebe630a227133363782a2feca7b91e90e07c5a2 submitted by /u/88-mph-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Threatest : Threatest Is A Go Framework For End-To-End Testing Threat Detection Rules

Threatest is a Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform.

Concepts

Detonators

A detonator describes how and where an attack technique is executed.

Supported detonators:

* Local command execution
* SSH command execution
* Stratus Red Team
* AWS detonator

Alert matchers

An alert matcher is a platform-specific integration that can check if an expected alert was triggered.

Supported alert matchers:

* Datadog security signals

Detonation and alert correlation

Each detonation is assigned a UUID. This UUID is reflected in the detonation and used to ensure that the matched alert corresponds exactly to this detonation.

The way this is done depends on the detonator; for instance, Stratus Red Team and the AWS Detonator inject it in the user-agent; the SSH detonator uses a parent process containing the UUID.

Sample usage

See examples for complete usage example.

Testing Datadog Cloud SIEM signals triggered by Stratus Red Team
threatest := Threatest()

threatest.Scenario("AWS console login").
WhenDetonating(StratusRedTeamTechnique("aws.initial-access.console-login-without-mfa")).
Expect(DatadogSecuritySignal("AWS Console login without MFA").WithSeverity("medium")).
WithTimeout(15 * time.Minute)

assert.NoError(t, threatest.Run())
Testing Datadog Cloud Workload Security signals triggered by running commands over SSH
ssh, _ := NewSSHCommandExecutor("test-box", "", "")

threatest := Threatest()

threatest.Scenario("curl to metadata service").
WhenDetonating(NewCommandDetonator(ssh, "curl http://169.254.169.254 --connect-timeout 1")).
Expect(DatadogSecuritySignal("EC2 Instance Metadata Service Accessed via Network Utility"))

assert.NoError(t, threatest.Run())

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Fuzzing — An Overview For Beginners

https://cdn-images-1.medium.com/max/750/1*LV730os0Yw6Sk1avTVhPhw.png
Fuzzing is a really common technique utilized by security researchers when looking for vulnerabilities in software. Lets get an overview.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
templates (thm) writeup

https://cdn-images-1.medium.com/max/1171/1*uSpKDq-x9VzQOuJ9PzFEMw.png
Enumeration:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to hack any social media account?

https://cdn-images-1.medium.com/max/800/1*XJfkS1rknPG6rrptpEn_gA.jpeg
Everyone knows that this is one of the most asked questions on the internet. So, let’s answer. But first, let me break the question into…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerabilidades críticas en Citrix ADC y Citrix Gateway (Parcha!)

https://cdn-images-1.medium.com/max/1151/0*STvYnVmBW2NGoOaj
Citrix insta a sus clientes a instalar actualizaciones de seguridad para tres vulnerabilidades críticas de omisión de autenticación en…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Undetectable Windows Reverse Shell

https://cdn-images-1.medium.com/max/805/0*gb8TvAj5uVhjLs27.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ALL YOU NEED TO KNOW ABOUT MAN IN THE MIDDLE ATTACK (MITM); A CONCLUDED GUIDE

https://cdn-images-1.medium.com/max/1080/1*4RBqQAKt02TNFzUYHqXM9g.png
In this story, we’ll see what MITM is and how hackers perform MITM in the public Wi-Fi with an detailed example.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Finding a career?
https://www.reddit.com/r/Pentesting/comments/yqy2il/finding_a_career/

Hello! I am currently trying to find the best route to take to become a Pentester, I am curious what routes other pentesters have taken and what qualifications they had when hired. I've looked into options and it seems like the best option for me to just focus on getting certs like OSCP and making rank on HTB, military experience would take time and I wouldn't be getting the certs I want and SANS would also take time and money but I don't know if having certs and rank on HTB would be enough or if I would need prior experience or degrees. I would love if any other pentesters could let me know what worked for them. submitted by /u/Nebulime (https://www.reddit.com/user/Nebulime)
[link] (https://www.reddit.com/r/Pentesting/comments/yqy2il/finding_a_career/) [comments] (https://www.reddit.com/r/Pentesting/comments/yqy2il/finding_a_career/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Misguided Ghosts Writeup

https://cdn-images-1.medium.com/max/940/1*M5aMh0rqUr4YX0eBdCAqZw.png
Misguided Ghosts Walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Internal Writeup

https://cdn-images-1.medium.com/max/936/1*ajFoVhwVndoha84yYUp3eQ.png
Internal Walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video