Dumping LSASS by CrowdStrike Falcon and Windows Defender
https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/

<!-- SC_OFF -->I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo
https://github.com/D1rkMtr/DumpThatLSASS <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/)

Smbmap creates directory to check write privileges on SMB Share
https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/

<!-- SC_OFF -->When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ ​ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 ​ Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 ​ ​ https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 <!-- SC_ON --> submitted by /u/JustAnotherRedTeamer (https://www.reddit.com/user/JustAnotherRedTeamer)
[link] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/)

Create your own tools to hunt bugs, a power often neglected

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups »
Read more...

Create your own tools to hunt bugs, a power often neglected
https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
T-Mobile Breached Again, This Time Exposing 37M Customers' Data

This time around, weak API security allowed a threat actor to access account information, the mobile phone giant reported.

Dark Reading: Attacks/Breaches
Ransomware Profits Decline as Victims Dig In, Refuse to Pay

Two new reports show ransomware revenues for threat actors dropped sharply in 2022 as more victims ignored ransom demands.

Dark Reading: Attacks/Breaches
Compromised Zendesk Employee Credentials Lead to Breach

Zendesk has alerted customers to a successful SMS phishing campaign that has exposed "service data," but details remain scarce.

Dark Reading: Attacks/Breaches
GPT Emerges as Key AI Tech for Security Vendors

Orca Security is one of the companies integrating conversational AI technology into its products.

Does anyone have any good resources for learning android application pen testing?
https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/

<!-- SC_OFF -->As title it's something I want to get into more. Some labs would be good, beginners guides etc. Thanks. <!-- SC_ON --> submitted by /u/RB9k (https://www.reddit.com/user/RB9k)
[link] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/) [comments] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/)

Sliver C2 Leveraged by Many Threat Actors
https://www.reddit.com/r/redteamsec/comments/10hacen/sliver_c2_leveraged_by_many_threat_actors/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.cybereason.com/blog/sliver-c2-leveraged-by-many-threat-actors) [comments] (https://www.reddit.com/r/redteamsec/comments/10hacen/sliver_c2_leveraged_by_many_threat_actors/)

hacking: security in practice
How to install any software on work laptop?

All right guys, I"m not a hacker by any means, so I'm looking to get some help here. I got a laptop from work and all the admin privileges are not available, I can't even change the background, let alone install something like software or a game.

I've tried some of the solutions online, like using CMD to find out the password and username but it didn't work for me, as well as a myriad of other choices I found on YT or Google.

I was thinking that maybe installing another OS would help since. Will I have admin privileges there? Can the company still monitor what I do on a laptop if I have another OS? I would love to get some insight on this.

submitted by /u/DusanIII
[link] [comments]

hacking: security in practice
If I connected to a wifi with a phone then disconnected and forgot the wifi in the settings, if someone got a hold of the phone can they find out where the wifi was connected?

I know it's kinda random but I'm just curious. If anyone knows anything about this I'd be happy to hear about it.

submitted by /u/Bakpao777
[link] [comments]

hacking: security in practice
Did my mother buy an illegal IPTV Box?

She bought a box for 150 bucks and pays some guy 10 bucks a month for free cable. What is this? How does it work? Where can I learn more? Thank you.

submitted by /u/nEwB_LeWb
[link] [comments]

Privilege Escalation Attacks

Attacks known as privilege escalation attempt to gain increased access to important systems, applications, and networks by taking…Continue reading on Medium »
Read more...

CSRF + Stored XSS to Leading to Full Account Takeover

This write-up is about my findings of CSRF + XSS and using them both to get a full account takeover. Wish u like it ❤Continue reading on Medium »
Read more...

Privilege Escalation Attacks
https://medium.com/@gokulelango1040/privilege-escalation-attacks-28a9ef226abb?source=rss------bug_bounty-5