Dark Reading: Attacks/Breaches
Researchers Pioneer PoC Exploit for NSA-Reported Bug in Windows CryptoAPI

The security vulnerability allows attackers to spoof a target certificate and masquerade as any website, among other things.

Dark Reading: Attacks/Breaches
GoTo Encrypted Backups Stolen in LastPass Breach

Encrypted backups for several GoTo remote work tools were exfiltrated from LastPass, along with encryption keys.

hacking: security in practice
*FULLY ETHICAL* What is the worst that I can do with a pc connected to a school network

Before I start I just want to say that everything is ethical and my school is running a test on their network and asked me to help along with a few other people.

What could I do if a school PC was connected to a school network via ethernet, would it be possible to get the school wifi password, could I access other pcs on the network, could I enter databases inside of the school?

The pcs are also running on kali live using a usb drive.

Any help is appreciated and once again everything is ethical

submitted by /u/RedNightBlood
[link] [comments]

hacking: security in practice
King of The Hill where I should start?

I want to start playing king of the hill on tryhackme but I cant find any tutorial on this topic. Where i should to learn this skill? Or what rooms I should enroll on tryhackme?

submitted by /u/Rezvord
[link] [comments]

hacking: security in practice
I have a Galaxy S7 phone that is completely worthless unless I can put a new operating system on it.

The Google Play services never works after a new install. I need a way to force an operating system on it. Can I do this through a micro SD card or through the PC? The phone works fine except for that stupid Google Play services won't work. Reboot after reboot won't work, I need to force an operating system on this worthless phone? Help me save this brick please. I don't have the money to buy a new phone at the moment!

submitted by /u/propheticguy
[link] [comments]

hacking: security in practice
Feroxbuster, Gobuster etc. on HTTPS

Is it possible to use these kind of tools on a HTTPS website? I tried it once with proxychains but even tho i excluded wildcards that returned to the main site, I still couldnt find any directories. Does it have some sort of protection?

submitted by /u/eltico69
[link] [comments]

Dark Reading: Attacks/Breaches
Snyk Gets Nod of Approval With ServiceNow Strategic Investment

One of the most closely watched security startups continues to build bank because its platform appeals to both developers and security pros.

hacking: security in practice
Hashcat / JTR

I am current trying to crack some yescrypt hashes, last time I checked hash cat didnt support yescrypt, is this still true? I know JTR (John the ripper) supports it with with --format=crypt. However, I am trying to utilize my GPU as decrypting with my current CPU is rather slow. If anyone has any recommendations it would be appreciated.

submitted by /u/Mr-Morality
[link] [comments]

hacking: security in practice
brute force detected?

Can brute force attacks be detected or could they always have been easy to detect? And how are they detected?

submitted by /u/TheWalletDestroyer
[link] [comments]

hacking: security in practice
Whacking a cyber criminals admin panel

https://external-preview.redd.it/tQV0OEpKcJPJpkySBRFtwRxIRpdI-IQFh0RgmCoONDQ.jpg?width=640&crop=smart&auto=webp&s=8bac5b2faac628c24defb2bf3870af21c01972ed submitted by /u/thehunter699
[link] [comments]

P1 Bug Hunting — FTP Server Broken Access Control
https://thegrayarea.tech/p1-bug-hunting-ftp-server-broken-access-control-738a8a9c8280?source=rss------bug_bounty-5