Hacking on Medium
Networking in Cybersecurity: Concepts, Challenges & Solutions

https://cdn-images-1.medium.com/max/640/1*XnYzoxFg-d8v1I8sracJ8A.jpeg
Learn about the various concepts, challenges & solutions to multiple areas of networking in relation to the cybersecurity industry.

Continue reading on Medium »

Hacking on Medium
Hawk (htb) writeup

https://cdn-images-1.medium.com/max/695/1*Zi0OriRyLUathKCGMY4ivw.png
Running nmapAutomator.sh shows us a couple of different things to look at.

Continue reading on Medium »

Hacking on Medium
Home Grown Red Team: Bypassing Applocker, UAC and Getting Administrative Persistence

https://cdn-images-1.medium.com/max/643/1*4jR-qOHQ3hZkJi-s6dnpmQ.png
Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon.

Continue reading on Medium »

Hacking on Medium
Windows Isolation & Compartmentalization

https://cdn-images-1.medium.com/max/640/1*PSg5wipY3UA039dTlhWypQ.jpeg
Securing Your Windows: A Step-by-Step Guide to Isolation and Compartmentalization Techniques

Continue reading on Medium »

Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/16 to 01/20/2023

https://cdn-images-1.medium.com/max/1000/0*iRxNeY3RbpYSIJJZ
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…

Continue reading on Hunter Strategy »

Hacking on Medium
When Tech-Savvy Bears Attack: The DNC Hack

https://cdn-images-1.medium.com/max/600/0*PV40QIF61q9sTr4h.png
Once upon a time, in a land far, far away, there was a group of mischievous hackers known as “Fancy Bear”. These bears were not your…

Continue reading on Medium »

Dumping LSASS by CrowdStrike Falcon and Windows Defender
https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/

<!-- SC_OFF -->I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo
https://github.com/D1rkMtr/DumpThatLSASS <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/)

Smbmap creates directory to check write privileges on SMB Share
https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/

<!-- SC_OFF -->When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ ​ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 ​ Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 ​ ​ https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 <!-- SC_ON --> submitted by /u/JustAnotherRedTeamer (https://www.reddit.com/user/JustAnotherRedTeamer)
[link] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/)

Create your own tools to hunt bugs, a power often neglected

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups »
Read more...

Create your own tools to hunt bugs, a power often neglected
https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
T-Mobile Breached Again, This Time Exposing 37M Customers' Data

This time around, weak API security allowed a threat actor to access account information, the mobile phone giant reported.

Dark Reading: Attacks/Breaches
Ransomware Profits Decline as Victims Dig In, Refuse to Pay

Two new reports show ransomware revenues for threat actors dropped sharply in 2022 as more victims ignored ransom demands.

Dark Reading: Attacks/Breaches
Compromised Zendesk Employee Credentials Lead to Breach

Zendesk has alerted customers to a successful SMS phishing campaign that has exposed "service data," but details remain scarce.

Dark Reading: Attacks/Breaches
GPT Emerges as Key AI Tech for Security Vendors

Orca Security is one of the companies integrating conversational AI technology into its products.

Does anyone have any good resources for learning android application pen testing?
https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/

<!-- SC_OFF -->As title it's something I want to get into more. Some labs would be good, beginners guides etc. Thanks. <!-- SC_ON --> submitted by /u/RB9k (https://www.reddit.com/user/RB9k)
[link] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/) [comments] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/)