hacking: security in practice
Has anyone used O.MG cable? What is it capable of?

I saw video where the attacker sends commands to the target device and for example "Rick "Rolls" the person. And I know there are also keylogger capabilities. But can it be used to actually let the attacker navigate the through your phone, open apps, etc.? And would they be able to do this on their end without you knowing about it?

submitted by /u/buku-o-rama
[link] [comments]

hacking: security in practice
Cybercrime job ads on the dark web pay up to $20k per month

https://external-preview.redd.it/eyt9uUrbI_a-aP_zBzUb9d84qXAibyCgCu0xKQhukAM.jpg?width=640&crop=smart&auto=webp&s=7fcd0f7ae243619ed162eec0cb352475df048e96 submitted by /u/DrinkMoreCodeMore
[link] [comments]

Hacking on Medium
So You Want To Get Into Cyber Security

I often get asked for a half-hour meeting by people who are interested in getting into security. It’s in demand, pays well and, let’s face…

Continue reading on Medium »

Hacking on Medium
Why does Google prepend while(1); to their (private) JSON responses?

https://cdn-images-1.medium.com/max/2600/0*AiSXfWeLu7XFMitW
Why does Google prepend while(1); to their (private) JSON responses?

Continue reading on RE:Stacked »

Hacking on Medium
The Power of Python: Unlock Your Potential with 3DSS!

Python is one of the most popular programming languages in the world, and for good reason. It’s versatile, easy to learn, and has a vast…

Continue reading on Medium »

Hacking on Medium
An IDOR vulnerability often hides many others

https://cdn-images-1.medium.com/max/720/1*LK-17j6OFA76MBqTfPKxrg.jpeg
Some errors are occasional, others result from poor design, in this case, finding a vulnerability allows you to find many others…

Continue reading on InfoSec Write-ups »

Hacking on Medium
Setting you up for failure: Exploring 2FA bypasses in web application settings page functionality

https://cdn-images-1.medium.com/max/827/1*vPqONGnwzzaayuc5Iyirsw.png
In January it was reported in the mainstream media a 2FA Bypass was discovered in Facebook involving their new account center APIs.

Continue reading on Medium »

Hacking on Medium
Brain: the world’s first computer virus

https://cdn-images-1.medium.com/max/2600/0*0AfNNWYmm2A7b6Wz
Revealing the lasting impact of the first computer virus Brain: How it set the stage for modern cybersecurity measures

Continue reading on Geek Culture »

Hacking on Medium
QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates

https://cdn-images-1.medium.com/max/1076/0*SICEkurjCrMcZ50J
Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices…

Continue reading on Medium »

Phishing Tips?
https://www.reddit.com/r/redteamsec/comments/10qgajf/phishing_tips/

<!-- SC_OFF -->Hey all, I have an upcoming physical/phishing engagement. Unfortunately I was tasked very short notice to develop a phishing campaign with custom domains. My boss is VERY adamant that this remains hush-hush so no whitelisting. (We are a PE firm testing some portfolios companies.) So far I have the domains bought, SPF, DKIM, and DMARC have been configured. I’ve tested my email configuration against mail tester and it’s 10/10. I have tried various combinations of O365 and SMTP APIs but everything I have tried ends up hitting the spam filter. Do you all have any recommendations on how to build IP/Domain reputation fast? Have any of you had success with an inbox warmer? I realize that this might not be possible on such short notice ( <!-- SC_ON --> submitted by /u/KungFuBatman (https://www.reddit.com/user/KungFuBatman)
[link] (https://www.reddit.com/r/redteamsec/comments/10qgajf/phishing_tips/) [comments] (https://www.reddit.com/r/redteamsec/comments/10qgajf/phishing_tips/)

Dark Reading: Attacks/Breaches
How Can Disrupting DNS Communications Thwart a Malware Attack?

Malware eventually has to exfiltrate the data it accessed. By watching DNS traffic for suspicious activity, organizations can halt the damage.

Tips for Becoming a Proficient Bug Bounty Hunter
https://medium.com/@vjgnanam2002/tips-for-becoming-a-proficient-bug-bounty-hunter-dfe2559f68ee?source=rss------bug_bounty-5