Hacking on Medium
Uncovering the Truth: A Guide to Digital Forensics Investigation

https://cdn-images-1.medium.com/max/600/1*ZOEDT8W1iz_kpvX33iOQ8g.png
The following paper discusses various types of incidents that a digital forensics investigator may get called to respond to, and covers…

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Log4j Vulnerabilities Are Here to Stay — Are You Prepared?

Don't make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.

Dark Reading: Attacks/Breaches
North Korea's Top APT Swindled $1B From Crypto Investors in 2022

The DPRK has turned crypto scams into big business to replenish its depleted state coffers.

Dark Reading: Attacks/Breaches
Multicloud Security Challenges Will Persist in 2023

Some predictions about impending security challenges, with a few tips for proactively addressing them.

Dark Reading: Attacks/Breaches
Cybersecurity Budgets Increase for Retail & Hospitality Industry

Despite economic headwinds and layoffs in other areas, most retail and hospitality CISOs expect to add staff in 2023, according to a new report.

Dark Reading: Attacks/Breaches
BlackBerry's Inaugural Quarterly Threat Intelligence Report Reveals Threat Actors Launch One Malicious Threat Every Minute

Report identifies 1.75m cyberattacks were stopped by BlackBerry in the last 90 days.

Exploit Collector
Inout Jobs Portal 2.2.2 Cross Site Scripting

https://2.bp.blogspot.com/-MVgbYjy2n8E/WWlvDeDSliI/AAAAAAAAIK0/xNViOH31E8QoNbofn2xwVueZLLEvjlYYACLcBGAs/s1600/h130.png
Inout Jobs Portal version 2.2.2 suffers from a cross site scripting vulnerability.

SHA-256 | 6f3be2d31feb3d9c7a0c800ce5810ede460356e4aec96ec7e16f05115241db1a

Download
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
││ C r a C k E r ┌┘
┌┘ T H E C R A C K O F E T E R N A L M I G H T ││
└───────────────────────────────────────────────────────────────────────────────────────┘┘

┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ [ Vulnerability ] ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: Author : CraCkEr :
│ Website : inoutscripts.com │
│ Vendor : Inout Scripts - Nesote Technologies Private Limited │
│ Software : Inout Jobs Portal 2.2.2 │
│ Vuln Type: Reflected XSS │
│ Impact : Manipulate the content of the site │
│ │
│────────────────────────────────────────────────────────────────────────────────────────│
│ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘
: :
│ Release Notes: │
│ ═════════════ │
│ The attacker can send to victim a link containing a malicious URL in an email or │
│ instant message can perform a wide variety of actions, such as stealing the victim's │
│ session token or login credentials │
│ │
┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Greets:

The_PitBull, Raz0r, iNs, SadsouL, His0k4, Hussin X, Mr. SQL

CryptoJob (Twitter) twitter.com/CryptozJob

┌┌───────────────────────────────────────────────────────────────────────────────────────┐
┌┘ © CraCkEr 2023 ┌┘
└───────────────────────────────────────────────────────────────────────────────────────┘┘

Path: /index.php
Method: GET

URL parameter 'page' is vulnerable to XSS

https://www.website.com/index.php?page=index%2findexyar11%3cimg%20src%3da%20onerror%3dalert(1)%3ex75a9
[-] Done

Source:packetstormsecurity.com

Deep Web
Hitman-Hiring Doctor: My Life Is ‘50 Shades on Steroids’

https://external-preview.redd.it/JIj3sDF7oRUiqDVigT8ldty3jJ9G-KFjJIRhld2hCmE.jpg?width=640&crop=smart&auto=webp&s=0fb003b5c80c2219c1eecb72fcca3eeef1ba13b0 submitted by /u/Deku-shrub
[link] [comments]