Hacking on Medium
IoT Hacks: Real-Life Examples of How Hackers are Targeting Connected Devices

https://cdn-images-1.medium.com/max/2600/0*U8Bts_kEtLIIU7gV
The Internet of Things (IoT) has revolutionized the way we live and work, connecting billions of devices to the internet.

Continue reading on Medium »

Hacking on Medium
Don’t get hacked!

https://cdn-images-1.medium.com/max/2600/0*yNmxW1mXtISsi8cz
A poem

Continue reading on Medium »

🚨 Docker Full Privilege Escalation (CVE-2022-25365): "Breaking Docker Named Pipes SYSTEMatically" 🚨
https://www.reddit.com/r/Pentesting/comments/10u7xnw/docker_full_privilege_escalation_cve202225365/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1) [comments] (https://www.reddit.com/r/Pentesting/comments/10u7xnw/docker_full_privilege_escalation_cve202225365/)

🔥 PipeViewer: A new tool for viewing Windows Named Pipes and searching for insecure permissions. 🔥
https://www.reddit.com/r/redteamsec/comments/10u7nco/pipeviewer_a_new_tool_for_viewing_windows_named/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/PipeViewer) [comments] (https://www.reddit.com/r/redteamsec/comments/10u7nco/pipeviewer_a_new_tool_for_viewing_windows_named/)

🚨 Docker Full Privilege Escalation (CVE-2022-25365): "Breaking Docker Named Pipes SYSTEMatically" 🚨
https://www.reddit.com/r/redteamsec/comments/10u7u3c/docker_full_privilege_escalation_cve202225365/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1) [comments] (https://www.reddit.com/r/redteamsec/comments/10u7u3c/docker_full_privilege_escalation_cve202225365/)

How I Was Able to Takeover User Accounts via CSRF on an E-Commerce Website

We’ll discuss the topic of cross-site request forgery (CSRF) vulnerabilities and how it can lead to a one-click account takeContinue reading on Medium »
Read more...

https://external-preview.redd.it/txhDiGRgzo5X66hasvzcFZsx6OwM4MPliqJh7Ve5I-M.jpg?width=320&crop=smart&auto=webp&s=40d9c5f31638acaecaf8e22df09ca32347227707 Hello everybody!

I'm a software developer with tiny understanding in networks.

Few months ago I entered a gaming site which is called - slither.io which runs on http port 80.
Since then (after months) every time when I reset my laptop and then run the command "netstat" I see connection established to foreign address "slither:<high" sometimes its 19200 and sometimes its 49800 (but it's always high ports - not the first 1024 ones).


​

Whenever I run the command "netstat -ano" I can see the process (PID) that runs/is connected to this established connection - which is always something like 6620 or 7208 etc... when I got to the task manager under details, I see that it is always connected to mysqld.exe process (which is really installed on my computer for software development reasons).

Whenever I "end task" of this PID - the established connections are gone. but whenever I reset my laptop - the established connections to slither.io are back with different ports and different PID.

I tried to add slither.io into my hosts file in system/etc - and it really blocked it (and I cannot reach out to it through the browser or http request) but it is still keep on coming back and appearing in my netstat results screen. I wonder what kind of virus / trolling act could it be ?

Be glad to get some help how to remove those established connections to my laptop whenever I reset and open it.

​

​

netstat command

​

​

netstat -ano command (where i can see PID 7208)

​

​

MYSQLD.EXE PID 7208 connected to this established connection of slither.

submitted by /u/B73xIt4111
[link] [comments]

hacking: security in practice
Uses of a Flipper Zero?

I mean there are many uses & I really thinking about to buy one.. but what are the features that compensate the high price in the daily use?.. i don’t want to spend 160€ to have something that is laying in my desk for no reason and need

submitted by /u/NordicThunder420
[link] [comments]

How I Was Able to Takeover User Accounts via CSRF on an E-Commerce Website
https://medium.com/@k_kisanak/how-i-was-able-to-takeover-user-accounts-via-csrf-on-an-e-commerce-website-1e2dcf740c3d?source=rss------bug_bounty-5

We’ll discuss the topic of cross-site request forgery (CSRF) vulnerabilities and how it can lead to a one-click account takeContinue reading on Medium » (https://medium.com/@k_kisanak/how-i-was-able-to-takeover-user-accounts-via-csrf-on-an-e-commerce-website-1e2dcf740c3d?source=rss------bug_bounty-5)

Winevt\_Logs\_Analysis - Searching .Evtx Logs For Remote Connections

Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder. The winevt/Logs folders and the script must have identical file path. Execution Example Result Example Download Winevt_Logs_Analysis
Read more...

Hacking on Medium
Os mitos na segurança da informação

https://cdn-images-1.medium.com/max/1080/1*x73laHRo-Y2J6U7ZNsFMTg.png
Os mitos da segurança da informação vão ser explicações sobre algumas coisas que as pessoas acreditam mas de fato, não acontecem.

Continue reading on Medium »