submitted by /u/coffeecakeordeath (https://www.reddit.com/user/coffeecakeordeath)
[link] (https://i.redd.it/ckg0m53l4tga1.png) [comments] (https://www.reddit.com/r/Pentesting/comments/10w8p1z/hi_guys_im_having_some_trouble_figuring_out_how/)

Preferred C2 Framework and Why?
https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/

<!-- SC_OFF -->Hey gang!, completely opinion-based post. What is YOUR preferred C2 of Choice on an engagement? I'm currently going through the CRTO and getting some hands on experience with Cobalt Strike, which is fantastic for learning the terminology and opsec craft, but I'd like to hear what everyone else is using out there. Thanks a bunch! <!-- SC_ON --> submitted by /u/Sir_Scrubs_Alot (https://www.reddit.com/user/Sir_Scrubs_Alot)
[link] (https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/) [comments] (https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/)

“FREE 350+ Tryhackme Rooms”
https://medium.com/@samantabanti056/free-350-tryhackme-rooms-4f44cfdf640b?source=rss------bug_bounty-5

Hey Guys, I am banti samanta, a Security Researcher and a Bug Bounty Hunter. In this blog, I will be sharing a list of 350+ Free Tryhackme…Continue reading on Medium » (https://medium.com/@samantabanti056/free-350-tryhackme-rooms-4f44cfdf640b?source=rss------bug_bounty-5)

Bypassing API Restrictions for Fun and Profit
https://arnavtripathy98.medium.com/bypassing-api-restrictions-for-fun-and-profit-c9ab746b67be?source=rss------bug_bounty-5

Recently, I downloaded and started testing an application locally which provided dashboard access along with rest API endpoints for it’s…Continue reading on Medium » (https://arnavtripathy98.medium.com/bypassing-api-restrictions-for-fun-and-profit-c9ab746b67be?source=rss------bug_bounty-5)

Reveal the Cloud with Google Dorks
https://infosecwriteups.com/uncover-hidden-gems-in-the-cloud-with-google-dorks-8621e56a329d?source=rss------bug_bounty-5

Find sensitive data in Amazon AWS, Google Cloud, and moreContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/uncover-hidden-gems-in-the-cloud-with-google-dorks-8621e56a329d?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
New Banking Trojan Targeting 100M Pix Payment Platform Accounts

New malware demonstrates how threat actors are pivoting toward payment platform attacks, researchers say.

Dark Reading: Attacks/Breaches
Ongoing VMware ESXi Ransomware Attack Highlights Inherent Virtualization Risks

The global assault on vulnerable VMware hypervisors may have been mitigated by updating to the latest version of the product, but patch management is only part of the story.

Dark Reading: Attacks/Breaches
With TikTok Bans, the Time for Operational Governance Is Now

Emerging risks and trends need to be monitored, but cybersecurity challenges can be fixed with a focus on the fundamentals.

Dark Reading: Attacks/Breaches
Backdoor in Dingo Cryptocurrency Allows Creator to Steal (Nearly) Everything

A tax variable in the software implementing the Dingo Token allows the creators to charge 99% in fees per transaction, essentially stealing funds, an analysis finds.

Any one can please suggest me Active Directory machines in HTB for oscp exam.
https://www.reddit.com/r/Pentesting/comments/10wbkv7/any_one_can_please_suggest_me_active_directory/

submitted by /u/Nice-Cantaloupe-6566 (https://www.reddit.com/user/Nice-Cantaloupe-6566)
[link] (https://www.reddit.com/r/Pentesting/comments/10wbkv7/any_one_can_please_suggest_me_active_directory/) [comments] (https://www.reddit.com/r/Pentesting/comments/10wbkv7/any_one_can_please_suggest_me_active_directory/)

List of 41 Frequently Occurring Web Application Vulnerabilities
https://medium.com/@gokulelango1040/list-of-41-frequently-occurring-web-application-vulnerabilities-7e9e24489914?source=rss------bug_bounty-5

These are all considerably more crucial vulnerabilities and are employed in bug bounty programmes.Just add into your list and gather much…Continue reading on Medium » (https://medium.com/@gokulelango1040/list-of-41-frequently-occurring-web-application-vulnerabilities-7e9e24489914?source=rss------bug_bounty-5)