Hacking on Medium
MQTT (Mosquitto)

https://cdn-images-1.medium.com/max/810/1*D1v2wySfIvUQoMrGwZEZRA.png
Today we are going to take look at port 1883 mosquitto. We started off on a box and from outside the network, so I ran an NMAP scan on the…

Continue reading on System Weakness »

hacking: security in practice
Why there is no "Enter password" in BitLocker configuration? Is BitLocker's PIN option secure enough?

I intended to encrypt my SSD with BitLocker using my own strong password, but I only have the option to:

* enter a PIN
* insert a USB
* let BitLocker automatically unlock my drive

I'm wondering why I can't use a strong password to encrypt my drive, and instead, I have to use a PIN number. I am able to do this with my pendrive or other fixed data drives, but not with the one that has my operating system installed. Is this due to the TPM module?

I want to enter BitLocker password every time when PC starts to prevent it from thieves and secure my files. Is using an 8-digits PIN enough and safe option? Can't someone brute-force it?

submitted by /u/EliteSkylu
[link] [comments]

Dark Reading: Attacks/Breaches
The Ethics of Network and Security Monitoring

The chances of getting hacked are no longer low. Companies need to rethink their data collection and monitoring strategies to protect employee privacy and corporate integrity.

Dark Reading: Attacks/Breaches
Low-Budget 'Winter Vivern' APT Awakens After 2-Year Hibernation

The "underreported" APT has returned to focus after attacks promoting Russian and Belarusian government interests and going after targets with humor, zest, and scrappiness.

Dark Reading: Attacks/Breaches
Meta Proposes Revamped Approach to Online Kill Chain Frameworks

A more holistic model beyond MITRE et al is needed to help defenders better identify and understand commonalities in different online threat campaigns, the Facebook parent company says.

Blockchain Technology: The Importance of an Upgrade — By CyBirb

Blockchain technology has revolutionized the way we think about data storage and security. It has enabled the creation of a decentralized…Continue reading on Medium »
Read more...

Hacking on Medium
WinPeas Hacking Tool

https://cdn-images-1.medium.com/max/748/1*77UudmRC-Rdy7yAVJCaSDA.png
Introduction

Continue reading on Medium »

Hacking on Medium
A Comprehensive Guide to GOST R 34.11–94 Encryption | 2023

https://cdn-images-1.medium.com/max/1366/1*Qfj2SaDEJyUZmIJqI0mXXg.png
Understanding the Key Features, Strengths, and Weaknesses of GOST R 34.11–94 Encryption | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Use This Trick To Hack Any Publication and Steal The Medium Blueprint

https://cdn-images-1.medium.com/max/619/1*SvP-QXODlblyucuFcPYG-w.png
Psst! Don’t tell anyone.

Continue reading on New Writers Welcome »

Hacking on Medium
NgeSec Bebas #3 — Desktop Apps (Thick Client) C# .Net Based Pentesting

https://cdn-images-1.medium.com/max/621/1*TmrfYlZ-51_FRtfE-tfseA.png
Thick client atau juga disebut sebagai fat client, adalah aplikasi desktop yang berjalan secara lokal pada komputer pengguna. Aplikasi ini…

Continue reading on Medium »

Hacking on Medium
C&C Reddit

https://cdn-images-1.medium.com/max/1628/1*MWAmJBWGiQu1gmE6njGSag.png
Bypass XDR

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Microsoft Azure Warns on Killnet's Growing DDoS Onslaught Against Healthcare

DDoS cyberattack campaigns from the pro-Russian group have spiked significantly.