Hacking on Medium
How to Hack a Human: Social Engineering

https://cdn-images-1.medium.com/max/832/1*IruWEj3ZlA-DiJqJYRpDZA.png
You must have heard about hacking computer systems or websites etc., but how about Hacking Humans? Hacking a human is not as difficult as…

Continue reading on Medium »

Return to Sender - Detecting Kernel Exploits with eBPF
https://www.reddit.com/r/redteamsec/comments/zlubsg/return_to_sender_detecting_kernel_exploits_with/

submitted by /u/mdaverde (https://www.reddit.com/user/mdaverde)
[link] (https://youtu.be/QTZvabExQ1I) [comments] (https://www.reddit.com/r/redteamsec/comments/zlubsg/return_to_sender_detecting_kernel_exploits_with/)

CNA script testing/feedback
https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/

<!-- SC_OFF -->Hi Teamers, Ive created a Cobalt Strike Aggressor (CNA) Script I've dubbed ipv4guard. As it's my first one ever and Im ever looking for feedback and testers (and contributors!! ;D) to maybe help to improve it. The script is for Cobalt Strike and per the blurb I wrote A Cobalt Strike Aggressor Script that aims to help prevent errant Cobalt Strike commands from being executed on non-whitelisted / off-limit / out-of-scope / unapproved IPv4 addresses. Ive done tested best I can but obviously cant by my lonesome put it into as much of a wider berth testing than the wider community. Cheers <!-- SC_ON --> submitted by /u/savsaintsanta (https://www.reddit.com/user/savsaintsanta)
[link] (https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/) [comments] (https://www.reddit.com/r/redteamsec/comments/zlvdxw/cna_script_testingfeedback/)

Dark Reading: Attacks/Breaches
CSAF Is the Future of Vulnerability Management

Version 2.0 of the Common Security Advisory Framework will enable organizations to automate vulnerability remediation.

Dark Reading: Attacks/Breaches
Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech

Former pure-play deception startup Illusive attracts Proofpoint with its repositioned platform focusing on identity threat detection and response (ITDR).

Dark Reading: Attacks/Breaches
Automated Cybercampaign Creates Masses of Bogus Software Building Blocks

The proliferation of automated cyberattacks against npm, NuGet, and PyPI underscores the growing sophistication of threat actors and the threats to open source software supply chains.

Dark Reading: Attacks/Breaches
How Our Behavioral Bad Habits Are a Community Trait and Security Problem

Learn to think three moves ahead of hackers so you're playing chess, not checkers. Instead of reacting to opponents' moves, be strategic, and disrupt expected patterns of vulnerability.

Dark Reading: Attacks/Breaches
Royal Ransomware Puts Novel Spin on Encryption Tactics

An emerging cybercriminal group linked with Conti has expanded its partial encryption strategy and demonstrates other evasive maneuvers, as it takes aim at healthcare and other sectors.

Dark Reading: Attacks/Breaches
Analysis Shows Attackers Favor PowerShell, File Obfuscation

Aiming to give threat hunters a list of popular attack tactics, a cybersecurity team analyzed collections of real-world threat data to find attackers' most popular techniques.

hacking: security in practice
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
How do you find the Origin server if it's behind reverse proxy / CDN - easiest and cheapest ways?

Give me an example of how you would do this without needing some expensive subscription(s)?

submitted by /u/Intelligent-Way1288
[link] [comments]

hacking: security in practice
Here is my Day 1 walk through of TryHackMe's Advent of Cyber! A great event for beginners and experts alike. Still going on!

Going to drop these regularly until the end of the event. Let me know what you think!

You can still join today! It is great for beginners to learn and even people that know their way around get the chance to be hands on with things they might have other wise not touched.

​

See you there!

https://github.com/s1l1c0np1r4t3/TryHackMe-AdventOfCyber2022/blob/main/Day-1/TryHackMe-AdventOfCyber-Day1.md

submitted by /u/s1l1c0np1r4t3
[link] [comments]

Deep Web
I have no experience with the deep Web so looking for any help regarding my situation below.

Hi so I'm a young male who was druged and sexually assaulted not too long ago. Currently the detective involved with the case believes there is possible trafficking involved and that I got away simply because I woke up a lot sooner than the suspect thought I would and the way I escaped the detective thinks this person probably did not even consider I would even try to escape the way I did.

My question is even though I don't remember everything about the assault I remember certain things such as a lot of equipment that was brought into the room that was covered up that I couldn't see and other things that make me believe he was probably videotaping what he was doing as well.

He obviously would not post this stuff on a normal website however I have suspicion he could be posting it on dark web forms.

My question is, does anybody know a way I could try and look for this kind of thing to help with my case?

I have really no experience with the dark web and I don't want to go on websites that can possibly incriminate me or something like that because my intent is not to look at anything on the website, it is simply to try and find possible incriminating things about this guy and find the videos of me on these websites that can further help my case.

Does anybody know the proper things I need in order to even view these dark web forms to begin with and can anybody put me in the possible direction of where I should look for this kind of thing?

I would be looking at it via a cell phone. I don't have a computer or anything so pretty much just trying to see how to go about doing this on a phone.

Thanks!

submitted by /u/Cali_24-Sav
[link] [comments]