hacking: security in practice
How are hackers paying for Google ads

How are hackers paying for Google ads to push their website which allows people to download fake .exe files in the name of legit sites such as Rufus, VLC etc..

Why is Google not able to stop them effectively

Although I am aware that Google is doing this, I keep seeing more and more websites being replaced by the old ones. I know they might be using fraudulent Stolen Credit cards and Google ad credits along with money laundering to hide their ways but are there any other ways that they are able to do this ?

submitted by /u/Snoo_42096
[link] [comments]

hacking: security in practice
Reset a Samsung Galaxy S7 and now I can't get past the Google Play services.

Google Play services stopped working and I can't get past that initial setup. I can't access the settings because I can't even look at the app screen. I reset many times and still nothing. Any advice? Can I find a way past this wall? No way to get into settings? Any way to get to my settings? The phone was free.

submitted by /u/propheticguy
[link] [comments]

Hacking on Medium
Major sudo vulnerabilty

CVE-2021-3156 is a critical vulnerability that affects the sudo command on Linux and macOS systems.

Continue reading on Medium »

Hacking on Medium
Post Exploitation- Windows AD

https://cdn-images-1.medium.com/max/600/1*xzJR41-PXdIjFGedGbRK7w.png
#mimikatz #bloodhound #powerview #Goldentickets

Continue reading on Medium »

Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/23 to 01/27/2023

https://cdn-images-1.medium.com/max/1000/0*Kf72g2s8R5gounAl
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…

Continue reading on Hunter Strategy »

Hacking on Medium
U.S. Federal Agencies Fall Victim to Cyber Attack Utilizing Legitimate RMM Software

https://cdn-images-1.medium.com/max/1689/0*0ozcxN28DF9tefEU
At least two federal agencies in the U.S. fell victim to a “widespread cyber campaign” that involved the use of legitimate remote…

Continue reading on Medium »

Analyzing javascript files(Part -2)
https://medium.com/@indhumathi19973/analyzing-javascript-files-part-2-4b9b13c474c1?source=rss------bug_bounty-5

Using waybackurlsContinue reading on Medium » (https://medium.com/@indhumathi19973/analyzing-javascript-files-part-2-4b9b13c474c1?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Why Most Companies Still Don’t Know What’s on Their Network

Chris Kirsch, CEO of runZero, sits down with Dark Reading’sTerry Sweeney for a Fast Chat on the importance of asset discovery.

Dark Reading: Attacks/Breaches
On Data Privacy Day, Organizations Fail Data Privacy Expectations

Data Privacy Day rolls around year after year, and data privacy breaches likewise. Two-thirds of data breaches result in data exposure.

Analyzing javascript files(Part -2)

Using waybackurlsContinue reading on Medium »
Read more...

hacking: security in practice
Am I chasing a rabbit? (JS in plain text)

Hello,

I'm fairly new to pen testing ~ 6 months of working through junior pentester on THM and about 90% done. Have a basic understanding of networking yadda yadda.

I don't expect to find anything, but ever since learning Burp Suite, I thought it would be important to see real world examples and to get out of the CTF style picture perfect set ups.

Long story short, Company X offers free range for bug bounties and the thing I was testing was in scope and I figured great practice for me with Burp Suite. So I trimmed down to 50 promising sub domains and begin kinda just going through and researching along the way what some of the HTLM meant and tinkering with altering the packets etc

Didn't find anything for like 6 hours but my last session of tinkering I found something I hadn't seen all day...

When I captured a request that worked with a widget, I got this pretty bulky JavaScript code in the packet in plaintext.

The programmers added a bunch of comments too it and it looks like a bunch of mumbo jumbo to me since I'm a novice programmer but I noticed that there were references to GitHub with usernames source code links and even tables of hashes.

Is this normal? Should I keep investigating this? Is it worth even mentioning to the company or will I get laughed at?

submitted by /u/CptCuddleCakes
[link] [comments]

hacking: security in practice
Kali Linux VM vs Kali Linux Live

What would you guys recommend for a burner laptop? Kali Linux Live on a USB flash drive or normal Kali Linux on a vm. Also, what are the pros and cons

submitted by /u/DaitoAnonymous
[link] [comments]