Hacking Articles Tips Tricks Videos Tutorials

Exploiting Activity in medium android app

Hello friends I am Raju Kumar A.k.a Mrcyberwarrior. Let’s come to the story, I found vulnerabilities in the web as well as android…Continue reading on Medium »
Read more...

15 views15:14

Unauthenticated AD password reset bug = Informational?? SINCE WHEN.

Continue reading on Medium »
Read more...

17 views15:14

Hacking Articles Tips Tricks Videos Tutorials

Exploiting Activity in medium android app
https://mrcyberwarrior.medium.com/exploiting-activity-in-medium-android-app-e2e6f3553eef?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Exploiting Activity in medium android app

Hello friends I am Raju Kumar A.k.a Mrcyberwarrior. Let’s come to the story, I found vulnerabilities in the web as well as android…

14 viewsedited 16:14

Hacking Articles Tips Tricks Videos Tutorials

9 views16:14

Hacking Articles Tips Tricks Videos Tutorials

Hello friends I am Raju Kumar A.k.a Mrcyberwarrior. Let’s come to the story, I found vulnerabilities in the web as well as android…Continue reading on Medium » (https://mrcyberwarrior.medium.com/exploiting-activity-in-medium-android-app-e2e6f3553eef?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Exploiting Activity in medium android app

Hello friends I am Raju Kumar A.k.a Mrcyberwarrior. Let’s come to the story, I found vulnerabilities in the web as well as android…

9 viewsedited 16:14

Hacking Articles Tips Tricks Videos Tutorials

Unauthenticated AD password reset bug = Informational?? SINCE WHEN.
https://popalltheshells.medium.com/unauthenticated-ad-password-reset-bug-informational-since-when-9094535ebe48?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Unauthenticated AD password reset = Informational. SINCE WHEN???

Hello all, I’d like to talk about an unauthenticated password reset and Denial of Service finding I found on a bounty program which apparently, according to the vendor “does not have security…

8 viewsedited 16:15

Hacking Articles Tips Tricks Videos Tutorials

8 views16:15

Hacking Articles Tips Tricks Videos Tutorials

Continue reading on Medium » (https://popalltheshells.medium.com/unauthenticated-ad-password-reset-bug-informational-since-when-9094535ebe48?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Unauthenticated AD password reset = Informational. SINCE WHEN???

Hello all, I’d like to talk about an unauthenticated password reset and Denial of Service finding I found on a bounty program which apparently, according to the vendor “does not have security…

8 viewsedited 16:15

Hacking Articles Tips Tricks Videos Tutorials

9 views16:27

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
CyberBattleSim - An Experimentation And Research Platform To Investigate The Interaction Of Automated Agents In An Abstract Simulated Network Environments

https://1.bp.blogspot.com/-vGpE_i3OFBE/YJCzPBBAFQI/AAAAAAAAWGw/ifT4S-NNlJwiKRXS0fpEKxHcc85kO8XlACNcBGAsYHQ/w640-h570/CyberBattleSim.png CyberBattleSim is an experimentation research platform to investigate the interaction of automated agents operating in a simulated abstract enterprise network environment. The simulation provides a high-level abstraction of computer networks and cyber security concepts. Its Python-based Open AI Gym interface allows for training of automated agents using reinforcement learning algorithms.

The simulation environment is parameterized by a fixed network topology and a set of vulnerabilities that agents can utilize to move laterally in the network. The goal of the attacker is to take ownership of a portion of the network by exploiting vulnerabilities that are planted in the computer nodes. While the attacker attempts to spread throughout the network, a defender agent watches the network activity and tries to detect any attack taking place and mitigate the impact on the system by evicting the attacker. We provide a basic stochastic defender that detects and mitigates ongoing attacks based on pre-defined probabilities of success. We implement mitigation by re-imaging the infected nodes, a process abstractly modeled as an operation spanning over multiple simulation steps.

To compare the performance of the agents we look at two metrics: the number of simulation steps taken to attain their goal and the cumulative rewards over simulation steps across training epochs. Project goalsWe view this project as an experimentation platform to conduct research on the interaction of automated agents in abstract simulated network environments. By open sourcing it we hope to encourage the research community to investigate how cyber-agents interact and evolve in such network environments.

The simulation we provide is admittedly simplistic, but this has advantages. Its highly abstract nature prohibits direct application to real-world systems thus providing a safeguard against potential nefarious use of automated agents trained with it. At the same time, its simplicity allows us to focus on specific security aspects we aim to study and quickly experiment with recent machine learning and AI algorithms.

For instance, the current implementation focuses on the lateral movement cyber-attacks techniques, with the hope of understanding how network topology and configuration affects them. With this goal in mind, we felt that modeling actual network traffic was not necessary. This is just one example of a significant limitation in our system that future contributions might want to address.

On the algorithmic side, we provide some basic agents as starting points, but we would be curious to find out how state-of-the art reinforcement learning algorithms compare to them. We found that the large action space intrinsic to any computer system is a particular challenge for Reinforcement Learning, in contrast to other applications such as video games or robot control. Training agents that can store and retrieve credentials is another challenge faced when applying RL techniques where agents typically do not feature internal memory. These are other areas of research where the simulation could be used for benchmarking purposes.

Other areas of interest include the responsible and ethical use of autonomous cyber-security systems: How to design an enterprise network that gives an intrinsic advantage to defender agents? How to conduct safe research aimed at defending enterprises against autonomous cyber-attacks while preventing nefarious use of such technology? DocumentationRead the Quick introduction to[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

CyberBattleSim - An Experimentation And Research Platform To Investigate The Interaction Of Automated Agents In An Abstract Simulated…

13 viewsedited 16:27

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest & Hacking Tools

CyberBattleSim - An Experimentation And Research Platform To Investigate The Interaction Of Automated Agents In An Abstract Simulated…

13 viewsedited 16:27

Hacking Articles Tips Tricks Videos Tutorials

11 views17:24

Hacking Articles Tips Tricks Videos Tutorials

Photo

Dark Reading: Attacks/Breaches
Exchange Exploitation: Not Dead Yet

The mass exploitation of Exchange Servers has been a wake-up call, and it will take all parties playing in concert for the industry to react, respond, and recover.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading

Exchange Exploitation: Not Dead Yet

The mass exploitation of Exchange Servers has been a wake-up call, and it will take all parties playing in concert for the industry to react, respond, and recover.

12 viewsedited 17:24

About

Blog

Apps

Platform