Exploit Collector
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cisco Secure Email Gateway Malware Detection Evasion

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to convert SHA-1 or NTLM to cracker compatible wordlist ?

cracker like hashcat

submitted by /u/RedditNoobie777
[link] [comments]

hacking: security in practice
Top Zeus Botnet Suspect “Tank” Arrested in Geneva

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
want to Trade Original Bash Bunny for Original Shark jack Keychain

I had recently bought the new bash bunny so I have no use for my old one and I wanted the shark jack Keychain but they had none in stock will also trade for a plunder bug since they also don't have one of those in stock. I got the cable shark jack I just wanted the Keychain one.

I have a bunch of other none hak5 equipment I may trade in exchange just depends on what your looking for and if I have it and if I don't need it.

submitted by /u/Wildcardsec
[link] [comments]

Device for Magstrip Read/Write + other functionality?
https://www.reddit.com/r/Pentesting/comments/yw913h/device_for_magstrip_readwrite_other_functionality/

<!-- SC_OFF -->I live in a housing unit that uses cards w/ magstrips for front doors. I will be having a friend stay with me for ~1 month, and need to clone my access card (I don't want to go to my landlord, as I think they might not want me to have a medium-term guest like this). Anyway, I need a magstrip reader/writer. I remember seeing some device (can't remember where) that had this functionality + more (for example scanning for access points, and im sure many other things --- i forget details now). If I already am going to shell out for a reader/writer, may as well look into things that do more than just this. Is there some well-known/common pentesting tool that includes the ability to clone magstrips? <!-- SC_ON --> submitted by /u/orangejake (https://www.reddit.com/user/orangejake)
[link] (https://www.reddit.com/r/Pentesting/comments/yw913h/device_for_magstrip_readwrite_other_functionality/) [comments] (https://www.reddit.com/r/Pentesting/comments/yw913h/device_for_magstrip_readwrite_other_functionality/)

Hacking on Medium
Home Grown Red Team: Lateral Movement With Havoc C2 And Microsoft EDR

https://cdn-images-1.medium.com/max/600/1*lyAiUEVfU6diywz3cP3YnA.png
Lateral movement is extremely important for any red team engagement.

Continue reading on Medium »

Hacking on Medium
Google pagará una multa de privacidad de $391 millones por rastrear en secreto la ubicación de los…

https://cdn-images-1.medium.com/max/1763/0*XM74zBUruPE_DE97
El gigante de Internet Google acordó pagar un récord de 391,5 millones de dólares para llegar a un acuerdo con 40 estados de EE. UU. por…

Continue reading on Medium »

Hacking on Medium
Cryptography 101 - Introduction

https://cdn-images-1.medium.com/max/1000/1*mdDvZ_IGsdrm9nfc1HSx1g.gif
In this series we’ll be taking a walk through a brief introduction to the art of cryptography.

Continue reading on Medium »

Hacking on Medium
Domain Escalation with Token Impersonation

https://cdn-images-1.medium.com/max/2600/1*TukriVMXWRdm5I0OiMFhLA.jpeg
Token Impersonation with Delegation Tokens  — MITRE ATT&ACK — Access Token Manipulation T1134

Continue reading on R3d Buck3T »

Dark Reading: Attacks/Breaches
Wipermania: Malware Remains a Potent Threat, 10 Years Since 'Shamoon'

An in-depth analysis of system-destroying malware families presented at Black Hat Middle East & Africa shows a growing nuance in terms of how they're deployed.

Dark Reading: Attacks/Breaches
Where Can Third-Party Governance and Risk Management Take Us?

Part 2 in our series addressing the top 10 unanswered questions in security: How will TPGRM evolve?

Dark Reading: Attacks/Breaches
Misconfigurations, Vulnerabilities Found in 95% of Applications

Weak configurations for encryption and missing security headers topped the list of software issues found during a variety of penetration and application security tests.

Getting Binaries into Memory (Going Fileless)
https://www.reddit.com/r/redteamsec/comments/ywdpu3/getting_binaries_into_memory_going_fileless/

In this video, I show how to convert C# executables into PowerShell scripts and then use download cradles to put them directly into memory. This leaves no trace of the executable on disk and can slip by AV/EDR in many cases. Getting Binaries into Memory (Going Fileless) (https://youtu.be/BO0bVFZJmpg) submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/ywdpu3/getting_binaries_into_memory_going_fileless/) [comments] (https://www.reddit.com/r/redteamsec/comments/ywdpu3/getting_binaries_into_memory_going_fileless/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Lulzsec: The Full Story

https://cdn-images-1.medium.com/max/600/1*aATp0FdxnYe1gc-RmqfCzg.jpeg
Lulzsec exploded onto the hacking scene becoming infamous worldwide overnight and the same could be said about their downfall.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video