hacking: security in practice
CISA: Multiple APTs exploited U.S. Government IIS Server, had access to a "federal civilian agency" from August to January 2023

https://external-preview.redd.it/4O6b4Dcel8Z0NiYizPUaWwpgmRnTx_kMNubxsewyibw.jpg?width=640&crop=smart&auto=webp&s=c9bcbca64c9fb6ae9a676c219ea9cf215ea86ade submitted by /u/misconfig_exe
[link] [comments]

hacking: security in practice
KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks

https://external-preview.redd.it/usdCPZphfsAuquLqU7eN4_ifcbScgMBVc97v7nOMQEg.jpg?width=640&crop=smart&auto=webp&s=0417a2ea975f0b81e5816d95be43647c45f8ed78 submitted by /u/SCI_Rusher
[link] [comments]

hacking: security in practice
Nmap keeps returning different results?

sudo nmap -Pn -p- -A -vvv IP_ADDRESS

The same nmap command has told me that: 10 ports are open (but not 6379 for Redis), that 3 ports are open including 6379 for Redis, and that every single port is closed.

I’m doing a CTF so I don’t expect a firewall to be messing with my results, and this is against a Windows machine if it matters (hence the -Pn). I’ve tried varying the command a bit as well, but I still get inconsistent results.

TL;DR

Since defensive measures are unlikely, what could cause nmap to behave unpredictably? Could it be related to heavy traffic from other users? Is this somehow related to Windows, since I’ve only ever had this happen when scanning Windows machines?

I appreciate any input

submitted by /u/Agent-BTZ
[link] [comments]

hacking: security in practice
What can be done with hosts stored in the Metasploit database?

Just been using Metasploit a bit recently and was just wondering what the point was of the database feature?

More specifically, can you use the hosts and their services which have been saved in the database (from an imported Nmap scan for example) to search for exploits which may be able to work on any of the hosts/services?

submitted by /u/melthamlewis
[link] [comments]

Dark Reading: Attacks/Breaches
Mirai Hackers Use Golang to Create a Bigger, Badder DDoS Botnet

With HinataBot, malware authors have created a beast many times more efficient than even the scariest botnets of old, packing more than 3Tbit/s DDoS speeds.

Dark Reading: Attacks/Breaches
AI Has Your Business Data

No-code has lowered the barrier for non-developers to create applications. AI will completely eliminate it.

Dark Reading: Attacks/Breaches
Cops Nab BreachForums Boss in New York

The alleged mastermind of hacker forum Breach Forums, "pompompurin," has been arrested in New York City, according to court documents.

Hacking on Medium
IANS Hacking Tool

https://cdn-images-1.medium.com/max/679/1*bi7-h8emR8Y8ct4FP-PAlQ.png
Introduction

Continue reading on Medium »

Hacking on Medium
Discover the Custom Keto Plan tailored specifically to your body and lifestyle.

https://cdn-images-1.medium.com/max/640/1*aoxOqfCkSAdUCzueQ1jf7g.jpeg
Incorporating bodyweight exercises into your fitness routine is a great way to complement your keto diet and improve overall health. Here…

Continue reading on Medium »

Hacking on Medium
Stocker HTB Writeup [Detailed]

https://cdn-images-1.medium.com/max/884/1*9jtKg1JIG93B31QzwqFZLg.png
Machine IP: 10.10.11.196

Continue reading on Medium »

Hacking on Medium
Protect your Android app code

https://cdn-images-1.medium.com/max/800/1*-PaMm_UGrFaEUYenYp_zKQ.jpeg
How to make your app safer against decompilation? Here my experiences.

Continue reading on Medium »

https://a.thumbs.redditmedia.com/t0vF-WJDCyJjUg_HXz07F5VWQs9IplE2pIS3ZGba2n0.jpg Hey hackers, I'm trying to perform SQL injection on OWASP's "VulnerableApp" project, but struggling with their SQL injection because I think it uses an AJAX call which I haven't worked with before. Can anyone give me pointers on how to exploit this vulnerability? Here are some screenshots:

​

​

Vulnerability Description and exploit page

javascript for the vulnerability

Thank you!

submitted by /u/TheLotusElise
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖