hacking: security in practice
Best Messaging software?

I would like to use a software that doesn’t keep track of my Ip or selling my info, I wanna talk to a friend but I don’t want to use discord or telegram

submitted by /u/FamousResponse2726
[link] [comments]

hacking: security in practice
T-Mobile Says Hacker Stole Data From 37 Million Accounts

https://external-preview.redd.it/db_wZzdStGCnv2Gk8t-YhVhmr4C5De3RoNt0g4WPoik.jpg?width=216&crop=smart&auto=webp&s=efbc3a7bf88de8583d15f1dff0ec8b4db8e122de submitted by /u/trumpfamily2020
[link] [comments]

Hacking on Medium
Networking in Cybersecurity: Concepts, Challenges & Solutions

https://cdn-images-1.medium.com/max/640/1*XnYzoxFg-d8v1I8sracJ8A.jpeg
Learn about the various concepts, challenges & solutions to multiple areas of networking in relation to the cybersecurity industry.

Continue reading on Medium »

Hacking on Medium
Hawk (htb) writeup

https://cdn-images-1.medium.com/max/695/1*Zi0OriRyLUathKCGMY4ivw.png
Running nmapAutomator.sh shows us a couple of different things to look at.

Continue reading on Medium »

Hacking on Medium
Home Grown Red Team: Bypassing Applocker, UAC and Getting Administrative Persistence

https://cdn-images-1.medium.com/max/643/1*4jR-qOHQ3hZkJi-s6dnpmQ.png
Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon.

Continue reading on Medium »

Hacking on Medium
Windows Isolation & Compartmentalization

https://cdn-images-1.medium.com/max/640/1*PSg5wipY3UA039dTlhWypQ.jpeg
Securing Your Windows: A Step-by-Step Guide to Isolation and Compartmentalization Techniques

Continue reading on Medium »

Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/16 to 01/20/2023

https://cdn-images-1.medium.com/max/1000/0*iRxNeY3RbpYSIJJZ
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…

Continue reading on Hunter Strategy »

Hacking on Medium
When Tech-Savvy Bears Attack: The DNC Hack

https://cdn-images-1.medium.com/max/600/0*PV40QIF61q9sTr4h.png
Once upon a time, in a land far, far away, there was a group of mischievous hackers known as “Fancy Bear”. These bears were not your…

Continue reading on Medium »

Dumping LSASS by CrowdStrike Falcon and Windows Defender
https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/

<!-- SC_OFF -->I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo
https://github.com/D1rkMtr/DumpThatLSASS <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/)

Smbmap creates directory to check write privileges on SMB Share
https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/

<!-- SC_OFF -->When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ ​ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 ​ Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 ​ ​ https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 <!-- SC_ON --> submitted by /u/JustAnotherRedTeamer (https://www.reddit.com/user/JustAnotherRedTeamer)
[link] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/)

Create your own tools to hunt bugs, a power often neglected

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups »
Read more...

Create your own tools to hunt bugs, a power often neglected
https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
T-Mobile Breached Again, This Time Exposing 37M Customers' Data

This time around, weak API security allowed a threat actor to access account information, the mobile phone giant reported.