Hacking on Medium
How to become a hacker in 2023

https://cdn-images-1.medium.com/max/1115/1*T1eTFW7lux9VAUYMRFAHAA.png
It is important to note that the term “hacker” has a negative connotation and is often associated with illegal activities. However, there…

Continue reading on Medium »

Hacking on Medium
Create a Pinterest account for your business and regularly post high-quality images and videos that…

Use relevant and popular hashtags to make your pins discoverable to a wider audience.

Continue reading on Medium »

Hacking on Medium
How to Hack a Human: Social Engineering

https://cdn-images-1.medium.com/max/832/1*IruWEj3ZlA-DiJqJYRpDZA.png
You must have heard about hacking computer systems or websites etc., but how about Hacking Humans? Hacking a human is not as difficult as…

Continue reading on Medium »

Return to Sender - Detecting Kernel Exploits with eBPF
https://www.reddit.com/r/redteamsec/comments/zlubsg/return_to_sender_detecting_kernel_exploits_with/

submitted by /u/mdaverde (https://www.reddit.com/user/mdaverde)
[link] (https://youtu.be/QTZvabExQ1I) [comments] (https://www.reddit.com/r/redteamsec/comments/zlubsg/return_to_sender_detecting_kernel_exploits_with/)

CNA script testing/feedback
https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/

<!-- SC_OFF -->Hi Teamers, Ive created a Cobalt Strike Aggressor (CNA) Script I've dubbed ipv4guard. As it's my first one ever and Im ever looking for feedback and testers (and contributors!! ;D) to maybe help to improve it. The script is for Cobalt Strike and per the blurb I wrote A Cobalt Strike Aggressor Script that aims to help prevent errant Cobalt Strike commands from being executed on non-whitelisted / off-limit / out-of-scope / unapproved IPv4 addresses. Ive done tested best I can but obviously cant by my lonesome put it into as much of a wider berth testing than the wider community. Cheers <!-- SC_ON --> submitted by /u/savsaintsanta (https://www.reddit.com/user/savsaintsanta)
[link] (https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/) [comments] (https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/)

Dark Reading: Attacks/Breaches
CSAF Is the Future of Vulnerability Management

Version 2.0 of the Common Security Advisory Framework will enable organizations to automate vulnerability remediation.

Dark Reading: Attacks/Breaches
Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech

Former pure-play deception startup Illusive attracts Proofpoint with its repositioned platform focusing on identity threat detection and response (ITDR).

Dark Reading: Attacks/Breaches
Automated Cybercampaign Creates Masses of Bogus Software Building Blocks

The proliferation of automated cyberattacks against npm, NuGet, and PyPI underscores the growing sophistication of threat actors and the threats to open source software supply chains.

Dark Reading: Attacks/Breaches
How Our Behavioral Bad Habits Are a Community Trait and Security Problem

Learn to think three moves ahead of hackers so you're playing chess, not checkers. Instead of reacting to opponents' moves, be strategic, and disrupt expected patterns of vulnerability.

Dark Reading: Attacks/Breaches
Royal Ransomware Puts Novel Spin on Encryption Tactics

An emerging cybercriminal group linked with Conti has expanded its partial encryption strategy and demonstrates other evasive maneuvers, as it takes aim at healthcare and other sectors.

Dark Reading: Attacks/Breaches
Analysis Shows Attackers Favor PowerShell, File Obfuscation

Aiming to give threat hunters a list of popular attack tactics, a cybersecurity team analyzed collections of real-world threat data to find attackers' most popular techniques.

hacking: security in practice
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
How do you find the Origin server if it's behind reverse proxy / CDN - easiest and cheapest ways?

Give me an example of how you would do this without needing some expensive subscription(s)?

submitted by /u/Intelligent-Way1288
[link] [comments]

hacking: security in practice
Here is my Day 1 walk through of TryHackMe's Advent of Cyber! A great event for beginners and experts alike. Still going on!

Going to drop these regularly until the end of the event. Let me know what you think!

You can still join today! It is great for beginners to learn and even people that know their way around get the chance to be hands on with things they might have other wise not touched.

​

See you there!

https://github.com/s1l1c0np1r4t3/TryHackMe-AdventOfCyber2022/blob/main/Day-1/TryHackMe-AdventOfCyber-Day1.md

submitted by /u/s1l1c0np1r4t3
[link] [comments]