Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Slicer : Tool To Automate The Boring Process Of APK Recon
Slicer is a tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have
Note: The APK has to be extracted via
Why not drozer?
Well, drozer is a different beast. Even though it does finds out all the accessible components but I was tired of running those commands again and again.
Why not automate using drozer?
I actually wrote a bash script for running certain drozer commands so I won’t have to run them manually but there was still some boring stuff that had to be done. Like Checking the
Why not search all the files?
I think that a tool like grep or ripgrep would be much faster to search through all the files. So if there is something specific that you want to search it would be better to use those tools. But if you think that there is something which should be checked in all the android files then feel free to open an issue. Features* Check if the APK has set the
* Return all the activities, services and broadcast receivers which are exported and have null permission set. This is decided on the basis of two things:
*
* If exported is not mention then slicer check if any
* Check the Firebase URL of the APK by testing it for
* If the firebase URL is
* If this thing is open then that can be reported as high severity.
* Check if the google API keys are publically accessible or not.
* This can be reported on some bounty programs but have a low severity.
* But most of the time reporting this kind of thing will bring out the pain of
* Also sometimes the company can just close it as
* Return other API keys that are present in
* Extracts all the URLs and paths.
* These can be used with tool like dirsearch or ffuf. Installation* Clone this repository
git clone https://github.com/mzfr/slicer
cd slicer
Now you can run it:
Extract information from Manifest and strings of an APK
Usage:
slicer [OPTION] [Extracted APK directory]
Options:
-d, --dir path to jadx output directory
-o, --output Name of the output file(not implemented)
I have not implemented the
python3 slicer.py -d path/to/extact/apk -c config.json Click Here To Download
___________________________
@hacking_Attack
@Hacking_Video
Slicer : Tool To Automate The Boring Process Of APK Recon
Slicer is a tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have
nullpermissions and can be externally provoked.Note: The APK has to be extracted via
jadxor apktool. SummaryWhy?I started bug bounty like 3 weeks ago(in June 2020) and I have been trying my best on android apps. But I noticed one thing that in all the apps there were certain things which I have to do before diving in deep. So I just thought it would be nice to automate that process with a simple tool.Why not drozer?
Well, drozer is a different beast. Even though it does finds out all the accessible components but I was tired of running those commands again and again.
Why not automate using drozer?
I actually wrote a bash script for running certain drozer commands so I won’t have to run them manually but there was still some boring stuff that had to be done. Like Checking the
strings.xmlfor various API keys, testing if firebase DB was publically accessible or if those google API keys have setup any cap or anything on their usage and lot of other stuff.Why not search all the files?
I think that a tool like grep or ripgrep would be much faster to search through all the files. So if there is something specific that you want to search it would be better to use those tools. But if you think that there is something which should be checked in all the android files then feel free to open an issue. Features* Check if the APK has set the
android:allowbackupto true* Check if the APK has set the android:debuggableto true.* Return all the activities, services and broadcast receivers which are exported and have null permission set. This is decided on the basis of two things:
*
android:exporte=trueis present in any of the component and have no permission set.* If exported is not mention then slicer check if any
Intent-filtersare defined for that component, if yes that means that component is exported by default(This is the rule given in android documentation.)* Check the Firebase URL of the APK by testing it for
.jsontrick. * If the firebase URL is
myapp.firebaseio.comthen it will check if https://myapp.firebaseio.com/.jsonreturns something or gives permission denied.* If this thing is open then that can be reported as high severity.
* Check if the google API keys are publically accessible or not.
* This can be reported on some bounty programs but have a low severity.
* But most of the time reporting this kind of thing will bring out the pain of
Duplicate.* Also sometimes the company can just close it as
not applicableand will claim that the KEY has a usage cap– r/suspiciouslyspecific https://s.w.org/images/core/emoji/14.0.0/72x72/1f609.png * Return other API keys that are present in
strings.xmland in AndroidManifest.xml* List all the file names present in /res/rawand res/xmldirectory.* Extracts all the URLs and paths.
* These can be used with tool like dirsearch or ffuf. Installation* Clone this repository
git clone https://github.com/mzfr/slicer
cd slicer
Now you can run it:
python3 slicer.py -hUsageIt’s very simple to use. Following options are available:Extract information from Manifest and strings of an APK
Usage:
slicer [OPTION] [Extracted APK directory]
Options:
-d, --dir path to jadx output directory
-o, --output Name of the output file(not implemented)
I have not implemented the
outputflag yet because I think if you can redirect slicer output to a yaml file it will a proper format. Usage Example* Extract information from the APK and display it on the screen.python3 slicer.py -d path/to/extact/apk -c config.json Click Here To Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
Slicer : Tool To Automate The Boring Process Of APK Recon
Slicer is a tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns
Kali Linux Tutorials
ODAT : Oracle Database Attacking Tool
ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that tests the security of Oracle Databases remotely.
Usage examples of ODAT:
* You have an Oracle database listening remotely and want to find valid SIDs and credentials in order to connect to the database
* You have a valid Oracle account on a database and want to escalate your privileges to become DBA or SYSDBA
* You have a Oracle account and you want to execute system commands (e.g. reverse shell) in order to move forward on the operating system hosting the database
Tested on Oracle Database 10g, 11g, 12c, 18c and 19c. FeaturesThanks to ODAT, you can:
* search valid SID on a remote Oracle Database listener via:
* a dictionary attack
* a brute force attack
* ALIAS of the listener
* search Oracle accounts using:
* a dictionary attack
* each Oracle user like the password (need an account before to use this attack)
* execute system commands on the database server using:
* DBMS_SCHEDULER
* JAVA
* external tables
* oradbg
* download files stored on the database server using:
* UTL_FILE
* DBMS_XSLPROCESSOR
* external tables
* CTXSYS
* DBMS_LOB
* upload files on the database server using:
* UTL_FILE
* DBMS_XSLPROCESSOR
* DBMS_ADVISOR
* delete files using:
* UTL_FILE
* gain privileged access using these following system privileges combinations (see help for privesc module commands):
* CREATE ANY PROCEDURE
* CREATE PROCEDURE and EXECUTE ANY PROCEDURE
* CREATE ANY TRIGER (and CREATE PROCEDURE)
* ANALYZE ANY (and CREATE PROCEDURE)
* CREATE ANY INDEX (and CREATE PROCEDURE)
* send/reveive HTTP requests from the database server using:
* UTL_HTTP
* HttpUriType
* scan ports of the local server or a remote server using:
* UTL_HTTP
* HttpUriType
* UTL_TCP
* capture a SMB authentication through:
* an index in order trigger a SMB connection
* exploit some CVE:
* the CVE-2012-3137
* pickup the session key and salt for arbitrary users
* attack by dictionary on sessions
* the CVE-2012-????: A user authenticated can modify all tables who can select even if he can’t modify them normally (no ALTER privilege).
* the CVE-2012-1675 (aka TNS poisoning attack)
* search in column names thanks to the search module:
* search a pattern (ex: password) in column names
* unwrap PL/SQL source code (10g/11g and 12c)
* get system privileges and roles granted. It is possible to get privileges and roles of roles granted also
* execute arbitrary SELECT requests (aka minimal sql shell)
This list is not exhaustive. Supported Platforms and dependenciesODAT is compatible with Linux only.
Standalone version exists in order to don’t have need to install dependencies (see https://github.com/quentinhardy/odat/releases/). The ODAT standalone has been generated thanks to pyinstaller.
If you want to have the development version installed on your computer, these following tools and dependencies are needed:
* Langage: Python 3
* Oracle dependancies:
* Instant Oracle basic
* Instant Oracle sdk
* Python libraries:
* cx_Oracle
* passlib
* pycrypto
* python-scapy
* python-libnmap (new from python 5.1)
* colorlog (recommended)
* termcolor (recommended)
* argcomplete (recommended)
* pyinstaller (recommended) Installation (optional, for development version)This part describes how to install instantclient, CX_Oracle and some others python libraries on Ubuntu in order to have the ODAT development version. Don’t forget that an ODAT standalone version exists at https://github.com/quentinhardy/odat/releases/: It is not required to install something for use the standalone version
* Clone the repository to get the ODAT source code:
git clone https://github.com/quentinhardy/odat.git
* Update wiki pages in this repository for getting the ODAT documentation loca[...]
___________________________
@hacking_Attack
@Hacking_Video
ODAT : Oracle Database Attacking Tool
ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that tests the security of Oracle Databases remotely.
Usage examples of ODAT:
* You have an Oracle database listening remotely and want to find valid SIDs and credentials in order to connect to the database
* You have a valid Oracle account on a database and want to escalate your privileges to become DBA or SYSDBA
* You have a Oracle account and you want to execute system commands (e.g. reverse shell) in order to move forward on the operating system hosting the database
Tested on Oracle Database 10g, 11g, 12c, 18c and 19c. FeaturesThanks to ODAT, you can:
* search valid SID on a remote Oracle Database listener via:
* a dictionary attack
* a brute force attack
* ALIAS of the listener
* search Oracle accounts using:
* a dictionary attack
* each Oracle user like the password (need an account before to use this attack)
* execute system commands on the database server using:
* DBMS_SCHEDULER
* JAVA
* external tables
* oradbg
* download files stored on the database server using:
* UTL_FILE
* DBMS_XSLPROCESSOR
* external tables
* CTXSYS
* DBMS_LOB
* upload files on the database server using:
* UTL_FILE
* DBMS_XSLPROCESSOR
* DBMS_ADVISOR
* delete files using:
* UTL_FILE
* gain privileged access using these following system privileges combinations (see help for privesc module commands):
* CREATE ANY PROCEDURE
* CREATE PROCEDURE and EXECUTE ANY PROCEDURE
* CREATE ANY TRIGER (and CREATE PROCEDURE)
* ANALYZE ANY (and CREATE PROCEDURE)
* CREATE ANY INDEX (and CREATE PROCEDURE)
* send/reveive HTTP requests from the database server using:
* UTL_HTTP
* HttpUriType
* scan ports of the local server or a remote server using:
* UTL_HTTP
* HttpUriType
* UTL_TCP
* capture a SMB authentication through:
* an index in order trigger a SMB connection
* exploit some CVE:
* the CVE-2012-3137
* pickup the session key and salt for arbitrary users
* attack by dictionary on sessions
* the CVE-2012-????: A user authenticated can modify all tables who can select even if he can’t modify them normally (no ALTER privilege).
* the CVE-2012-1675 (aka TNS poisoning attack)
* search in column names thanks to the search module:
* search a pattern (ex: password) in column names
* unwrap PL/SQL source code (10g/11g and 12c)
* get system privileges and roles granted. It is possible to get privileges and roles of roles granted also
* execute arbitrary SELECT requests (aka minimal sql shell)
This list is not exhaustive. Supported Platforms and dependenciesODAT is compatible with Linux only.
Standalone version exists in order to don’t have need to install dependencies (see https://github.com/quentinhardy/odat/releases/). The ODAT standalone has been generated thanks to pyinstaller.
If you want to have the development version installed on your computer, these following tools and dependencies are needed:
* Langage: Python 3
* Oracle dependancies:
* Instant Oracle basic
* Instant Oracle sdk
* Python libraries:
* cx_Oracle
* passlib
* pycrypto
* python-scapy
* python-libnmap (new from python 5.1)
* colorlog (recommended)
* termcolor (recommended)
* argcomplete (recommended)
* pyinstaller (recommended) Installation (optional, for development version)This part describes how to install instantclient, CX_Oracle and some others python libraries on Ubuntu in order to have the ODAT development version. Don’t forget that an ODAT standalone version exists at https://github.com/quentinhardy/odat/releases/: It is not required to install something for use the standalone version
* Clone the repository to get the ODAT source code:
git clone https://github.com/quentinhardy/odat.git
* Update wiki pages in this repository for getting the ODAT documentation loca[...]
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
ODAT : Oracle Database Attacking Tool - Kali Linux Tutorials
ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: Tested on Oracle Database 10g, 11g, 12c, 18c and 19c. Features Thanks to ODAT, you can: This list…
Hacking Articles Tips Tricks Videos Tutorials
Kali Linux Tutorials ODAT : Oracle Database Attacking Tool ODAT (Oracle Database Attacking Tool) is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: * You have an Oracle database listening…
lly:
cd odat/
git submodule init
git submodule update
* Get instant client basic, sdk (devel) and sqlplus from the Oracle web site:
* X64: http://www.oracle.com/technetwork/topics/linuxx86-64soft-092277.html
* X86: http://www.oracle.com/technetwork/topics/linuxsoft-082809.html
* For the moment (03/2021), Oracle Database instant client version 11.2 is the best version if you want to generate the ODAT standalone with pyinstaller. For using the ODAT development version, the last version of the Oracle client can be used (e.g. version 19).
* Install python3-dev, alien and libaio1 package (for sqlplus):
sudo apt-get install libaio1 python3-dev alien python3-pip
* Generate DEB files from RPM files with :
sudo alien --to-deb oracle-instantclient19.3-basic-???.x???.rpm
sudo alien --to-deb oracle-instantclient19.3-devel-???.x???.rpm
* Install instant client basic, sdk and sqlplus:
sudo dpkg -i oracle-instantclient19.3-basic-???.x???.deb
sudo dpkg -i oracle-instantclient19.3-devel_???_???.deb
* Put these lines in your /etc/profile file in order to define Oracle env variables:
export ORACLE_HOME=/usr/lib/oracle/19.3/client64/
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$ORACLE_HOME/lib
export PATH=${ORACLE_HOME}bin:$PATH
* Restart your session (to apply env variables)
* Create the /etc/ld.so.conf.d/oracle.conf file and add the path to Oracle home:
/usr/lib/oracle/19.3/client64/lib/
* Update the ldpath using:
sudo ldconfig
* Install CX_Oracle
sudo -s
source /etc/profile
pip3 install cx_Oracle
* Test if all is good:
python3 -c 'import cx_Oracle'
This command should just return without errors.
* Install some python libraries:
sudo apt-get install python3-scapy
sudo pip3 install colorlog termcolor pycrypto passlib python-libnmap
sudo pip3 install argcomplete && sudo activate-global-python-argcomplete
* Download and install the development version of pyinstaller (http://www.pyinstaller.org/) for python 3.
python setup.py install
* or install through pip:
pip3 install pyinstaller
* Run ODAT:
./odat.py -h Click Here To Download
___________________________
@hacking_Attack
@Hacking_Video
cd odat/
git submodule init
git submodule update
* Get instant client basic, sdk (devel) and sqlplus from the Oracle web site:
* X64: http://www.oracle.com/technetwork/topics/linuxx86-64soft-092277.html
* X86: http://www.oracle.com/technetwork/topics/linuxsoft-082809.html
* For the moment (03/2021), Oracle Database instant client version 11.2 is the best version if you want to generate the ODAT standalone with pyinstaller. For using the ODAT development version, the last version of the Oracle client can be used (e.g. version 19).
* Install python3-dev, alien and libaio1 package (for sqlplus):
sudo apt-get install libaio1 python3-dev alien python3-pip
* Generate DEB files from RPM files with :
sudo alien --to-deb oracle-instantclient19.3-basic-???.x???.rpm
sudo alien --to-deb oracle-instantclient19.3-devel-???.x???.rpm
* Install instant client basic, sdk and sqlplus:
sudo dpkg -i oracle-instantclient19.3-basic-???.x???.deb
sudo dpkg -i oracle-instantclient19.3-devel_???_???.deb
* Put these lines in your /etc/profile file in order to define Oracle env variables:
export ORACLE_HOME=/usr/lib/oracle/19.3/client64/
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$ORACLE_HOME/lib
export PATH=${ORACLE_HOME}bin:$PATH
* Restart your session (to apply env variables)
* Create the /etc/ld.so.conf.d/oracle.conf file and add the path to Oracle home:
/usr/lib/oracle/19.3/client64/lib/
* Update the ldpath using:
sudo ldconfig
* Install CX_Oracle
sudo -s
source /etc/profile
pip3 install cx_Oracle
* Test if all is good:
python3 -c 'import cx_Oracle'
This command should just return without errors.
* Install some python libraries:
sudo apt-get install python3-scapy
sudo pip3 install colorlog termcolor pycrypto passlib python-libnmap
sudo pip3 install argcomplete && sudo activate-global-python-argcomplete
* Download and install the development version of pyinstaller (http://www.pyinstaller.org/) for python 3.
python setup.py install
* or install through pip:
pip3 install pyinstaller
* Run ODAT:
./odat.py -h Click Here To Download
___________________________
@hacking_Attack
@Hacking_Video
Oracle
Instant Client for Linux x86-64 (64-bit)
Instant Client downloads for Linux x86-64 (64-bit)
hacking: security in practice
My Google randomly wasn't responding to my voice commands
Does this mean I've been hacked? I tried manually clicking on the button and it worked. My internet connection is fine and now it's working perfectly.
submitted by /u/Outrageous_Cap_6186
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
My Google randomly wasn't responding to my voice commands
Does this mean I've been hacked? I tried manually clicking on the button and it worked. My internet connection is fine and now it's working perfectly.
submitted by /u/Outrageous_Cap_6186
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
My Google randomly wasn't responding to my voice commands
Does this mean I've been hacked? I tried manually clicking on the button and it worked. My internet connection is fine and now it's working perfectly.
Hacking on Medium
Me from nothing to beginner hacker
Hello all, This is my first blog post and I would like to share my experience from knowing nothing in the field of ethical hacking to a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Me from nothing to beginner hacker
Hello all, This is my first blog post and I would like to share my experience from knowing nothing in the field of ethical hacking to a…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Me from nothing to beginner hacker
Hello all, This is my first blog post and I would like to share my experience from knowing nothing in the field of ethical hacking to a…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Neighour CTF-TryHackMe
https://cdn-images-1.medium.com/max/600/0*4DS-RZrUGMppZsKl.png
This is a writeup to a beginner level CTF on TryHackMe.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Neighour CTF-TryHackMe
https://cdn-images-1.medium.com/max/600/0*4DS-RZrUGMppZsKl.png
This is a writeup to a beginner level CTF on TryHackMe.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Neighour CTF-TryHackMe
This is a writeup to a beginner level CTF on TryHackMe.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe Pickle Rick Writeup
https://cdn-images-1.medium.com/max/1107/1*OG_VdcwnO23GMNylbR18nA.png
A step by step guide to how I solved the Pickle Rick Challenge.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe Pickle Rick Writeup
https://cdn-images-1.medium.com/max/1107/1*OG_VdcwnO23GMNylbR18nA.png
A step by step guide to how I solved the Pickle Rick Challenge.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe Pickle Rick CTF
A step by step guide to how I solved the Pickle Rick Challenge.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Aircrack-ng
https://cdn-images-1.medium.com/max/940/1*0Y0suuOGKhPC4ahF3oCKng.jpeg
Aircrack-ng es una suite de programas que nos permitirán realizar auditorías inalámbricas WiFi a routers y puntos de acceso WiFi. Esta…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Aircrack-ng
https://cdn-images-1.medium.com/max/940/1*0Y0suuOGKhPC4ahF3oCKng.jpeg
Aircrack-ng es una suite de programas que nos permitirán realizar auditorías inalámbricas WiFi a routers y puntos de acceso WiFi. Esta…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Aircrack-ng
Aircrack-ng es una suite de programas que nos permitirán realizar auditorías inalámbricas WiFi a routers y puntos de acceso WiFi. Esta…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Create C++ Windows Reverse Shell
https://cdn-images-1.medium.com/max/1314/1*gOdo4CqWTD6qC0RjR9eD4g.png
Introduction
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Create C++ Windows Reverse Shell
https://cdn-images-1.medium.com/max/1314/1*gOdo4CqWTD6qC0RjR9eD4g.png
Introduction
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Create C++ Windows Reverse Shell
Introduction
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Best Tools in My Hacker Every Day Carry (EDC)
https://cdn-images-1.medium.com/max/2600/0*wSQ6B1NubDxo80yg
TL;DR- My favorite tools that I use on a daily basis for cybersecurity in physical pen-testing, bug bounty hunting, and network recon.
Continue reading on The Gray Area »
___________________________
@hacking_Attack
@Hacking_Video
The Best Tools in My Hacker Every Day Carry (EDC)
https://cdn-images-1.medium.com/max/2600/0*wSQ6B1NubDxo80yg
TL;DR- My favorite tools that I use on a daily basis for cybersecurity in physical pen-testing, bug bounty hunting, and network recon.
Continue reading on The Gray Area »
___________________________
@hacking_Attack
@Hacking_Video
Medium
The Best Tools in My Hacker Every Day Carry (EDC)
TL;DR- My favorite tools that I use on a daily basis for cybersecurity in physical pen-testing, bug bounty hunting, and network recon.
A Dissection Of Nighthawk C2
https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/
submitted by /u/Diesl (https://www.reddit.com/user/Diesl)
[link] (https://www.proofpoint.com/us/blog/threat-insight/nighthawk-and-coming-pentest-tool-likely-gain-threat-actor-notice) [comments] (https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/
submitted by /u/Diesl (https://www.reddit.com/user/Diesl)
[link] (https://www.proofpoint.com/us/blog/threat-insight/nighthawk-and-coming-pentest-tool-likely-gain-threat-actor-notice) [comments] (https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
A Dissection Of Nighthawk C2
Posted in r/redteamsec by u/Diesl • 1 point and 0 comments
Vulnerable SDK components lead to supply chain risks in IoT and OT environments
https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/VulnerableSDK) [comments] (https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/
submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/VulnerableSDK) [comments] (https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/)
___________________________
@hacking_Attack
@Hacking_Video
reddit
Vulnerable SDK components lead to supply chain risks in IoT and OT...
Posted in r/redteamsec by u/SCI_Rusher • 1 point and 0 comments
Dark Reading: Attacks/Breaches
Enterprises Pay $1,200 Per Employee Annually to Fight Cyberattacks Against Cloud Collab Apps
Orgs are in the middle of a rapid increase in the use of new collaboration tools to serve the needs of an increasingly dispersed workforce — and they're paying a very real security price.
Enterprises Pay $1,200 Per Employee Annually to Fight Cyberattacks Against Cloud Collab Apps
Orgs are in the middle of a rapid increase in the use of new collaboration tools to serve the needs of an increasingly dispersed workforce — and they're paying a very real security price.
Dark Reading: Attacks/Breaches
Hack The Box Launches Annual University CTF to Inspire Next Generation of Security Professionals
.
___________________________
@hacking_Attack
@Hacking_Video
Hack The Box Launches Annual University CTF to Inspire Next Generation of Security Professionals
.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Hack The Box Launches Annual University CTF to Inspire Next Generation of Security Professionals
.