A Dissection Of Nighthawk C2
https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/

submitted by /u/Diesl (https://www.reddit.com/user/Diesl)
[link] (https://www.proofpoint.com/us/blog/threat-insight/nighthawk-and-coming-pentest-tool-likely-gain-threat-actor-notice) [comments] (https://www.reddit.com/r/redteamsec/comments/z1xkgo/a_dissection_of_nighthawk_c2/)

___________________________
@hacking_Attack
@Hacking_Video

Vulnerable SDK components lead to supply chain risks in IoT and OT environments
https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/VulnerableSDK) [comments] (https://www.reddit.com/r/redteamsec/comments/z1z832/vulnerable_sdk_components_lead_to_supply_chain/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Enterprises Pay $1,200 Per Employee Annually to Fight Cyberattacks Against Cloud Collab Apps

Orgs are in the middle of a rapid increase in the use of new collaboration tools to serve the needs of an increasingly dispersed workforce — and they're paying a very real security price.

Dark Reading: Attacks/Breaches
Google Blocks 231B Spam, Phishing Emails in Past 2 Weeks

Google Workspace's team is seeing a spike in phishing and spam hitting Gmail — up 10% in just the last two weeks.

Dark Reading: Attacks/Breaches
How Tech Companies Can Slow Down Spike in Breaches

Cybercrime continues to evolve — and shows no signs of slowing down.

Dark Reading: Attacks/Breaches
Hack The Box Launches Annual University CTF to Inspire Next Generation of Security Professionals

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
CybeReady Releases Five Easy Tips to Shop Safely During Black Friday

Safe shopping guidance coupled with new CISO tool to help safeguard personal data and corporate networks.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
FIDO Alliance Announces Authenticate Virtual Summit Focused on Securing IoT

Industry experts to share insights into how FIDO and related technologies can bring password-less authentication to IoT.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Two Estonian Citizens Arrested in $575 Million Cryptocurrency Fraud and Money Laundering Scheme

.

___________________________
@hacking_Attack
@Hacking_Video

Interesting Stored XSS via meta data
https://medium.com/pentesternepal/interesting-stored-xss-via-meta-data-eb8fe1de8b33?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Back in February of this year Bibek Neupane and I had hacked on a private bug bounty program on Hackerone, we had chosen one of the social…Continue reading on Pentester Nepal » (https://medium.com/pentesternepal/interesting-stored-xss-via-meta-data-eb8fe1de8b33?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Working with a scope using Gowitness
https://medium.com/@murami.ike/working-with-a-scope-using-gowitness-4d338b0321ac?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Gowitness is a usefull application written in Golang by @leonjza. According to the gowitness documentation:Continue reading on Medium » (https://medium.com/@murami.ike/working-with-a-scope-using-gowitness-4d338b0321ac?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Rise of Web 3.0 Security
https://shifacyclewala.medium.com/the-rise-of-web-3-0-security-d90373b64714?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Web3 Security introductionContinue reading on Medium » (https://shifacyclewala.medium.com/the-rise-of-web-3-0-security-d90373b64714?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Rise of Web 3.0 Security

Web3 Security introductionContinue reading on Medium »
Read more...

Kali Linux Tutorials
Wodat : Windows Oracle Database Attack Toolkit

Wodat is a simple port of the popular Oracle Database Attack Tool (ODAT) to C# .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code.

* Perform password based attacks e.g. username as password, username list against given password, password list against given username, username:pass combolist.
* Test if a credential/connection string is working against target
* Brute force attacks to discover valid SID/ServiceNames
* Perform discovery of valid TNS listeners against provided target file or CIDR range
* More to come, I hope!
* DisclaimerI take not responsibility for your use of the software. Development is done in my personal capacity and carry no affiliation to my work. UsageThe general command line arguments required are as follow:
wodat.exe COMMAND ARGGUMENTS
COMMAND (ALL,BRUTECRED,BRUTESID,BRUTESRV,TEST,DISC)
-server:XXX.XXX.XXX.XXX -port:1520
-sid:AS OR -srv:AS
-user:Peter -pass:Password
To test if a specific credential set works.
wodat.exe TEST -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE -user:peter -pass:pan
See the outline on modules for further usage. The tool will always first check if the TNS listener that is targeted works. ModulesBRUTESIDModule performs wordlist SID guessing attack if not successful will ask for brute force attack.
wodat.exe BRUTESID -server:XXX.XXX.XXX.XXX -port:1521 https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDKAx6TZllxV-wMaezSbhJM3pTmaYW3CbUNctXgl3cfTHJ1bGDmFx70H3zp4Wi35qeToAclB7ErXbT68apwYL6izkwYcRRf17FB9NnTxn7plTJbTDRZAxSouvBJeCzHAAAtTBaLbNjHhPA85E_tJUzXn3kKF9GTkkcLoePw-4yufGFBUPCk_x3AJ10/s918/wodat1.png BRUTESRVModule performs wordlist ServiceName guessing attack if not successful will ask for brute force attack.
wodat.exe BRUTESRV -server:XXX.XXX.XXX.XXX -port:1521 BRUTECREDModule performs wordlist password based attack. The following options exist:
A - username:password combolist with no credentials given during arguments
B - username list with password given in arguments
C - password list with username given in arguments
D - username as password with username list provided
To perform a basic attack with a given file that has username:password combos.
wodat.exe BRUTECRED -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDVyIychkovFHSYvbLP_1TYC8ddAgoz7cvKrVC45SGSPf2e5Mcc3EBH3EaTPGX8ubymlHtIS-u58T3rgNOAiM15Y6qnWCiKX9xsR7FTiUMBC48lnPs7x_MI5jOJ9TVOtgYcfN-RWBr2z8HEnFfv9jAoxNP7bqJ2bw96P34cxbiXFRQxu7iaKfeY7AB/s1248/wodat2.png TESTModule tests if the given connection string can connect successfully.
wodat.exe TEST -server:XXX.XXX.XXX.XXX -port:1521 -sid:XE -user:peter -pass:pan https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaIGqB5kVnIjElHb7rdJxuuEB5f7zv6pS1veJ9ktmmTTb2HM6M3tdOizxyulDExMydiwrpVppZezmStOaffg8xspdSY2sR6tkA1YLImikimY3yOBXXlExkoxiGxHrnnOlotNhiNpzxk5637GQa-p-Sp8Qil7PKS6JYvA8FelxP_dNXMvOs5yXbZtxE/s1311/wodat3.png DISCModule will perform discovery against provided CIDR range or file with instances. Note, only instances with valid TNS listeners will be returned. Testing a network range will be much faster as it’s processed in parallel.
wodat.exe DISC
Instances to test must be formatted as per the below example targets.txt:
192.168.10.1
192.168.10.5,1521 https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOrlW4a2P9AspeO5RrO18-zdjQF5NA_lEiXRLM_9VN1Aa8Y8yblCux6il1eHt4QICLM_M4UanwA--y91BiJ3Wvbn119VlqFymIfYu1VkIfhL-jxjwpeIV31GQaIXVFnBBD1amA4QKb10hdUnfCmq86TMJU0oU7zOZHWDhn7cbwfkvEzJ5wUaIeZHXY/s950/wodat4.png ALLNot implemented yet. RECONNot implemented yet. Setup and RequirementsYou can grab automated release build from the GitHub Actions or build yourself using the following commands:
nuget restore wodat.sln
msbuild wodat.sln -t:rebuild -property:Co[...]

___________________________
@hacking_Attack
@Hacking_Video