Hacking on Medium
Exploiting TFT Protocol and LXD to Gain Unauthorized Access: Chaining Vulnerabilities

https://cdn-images-1.medium.com/max/1920/1*14hoTmVcFq7M9F-3s2vDEA.png
Exploring the process of exploiting a Local File Inclusion (LFI) vulnerability, Trivial File Transfer Protocol (TFTP) and the LXD API.

Continue reading on Medium »

Hacking on Medium
Silent Theft: How SIM Swapping Scammers are Stealing Cryptocurrency Right Under Your Nose

In recent years, the world has witnessed an unprecedented rise in the use of cryptocurrency. With its decentralized nature, security, and…

Continue reading on Medium »

https://preview.redd.it/sxc4716ewdpa1.png?width=640&crop=smart&auto=webp&s=4d201b15275ea66d56fdb962b2b40b4fc1a10fab Working on an interface using tkinter to use airmon-ng, for now I'm configuring this program to use it on my own system, I'm planning to make it everyone friendly when everything i want is done but will share it on my GitHub anyways so if u want to configure it for yourself go ahead XD

submitted by /u/SamuraiX13
[link] [comments]

hacking: security in practice
Hardware hacking a phone to make a tablet (OnePlus 8)?

Not sure if this is the right subreddit but I’m hoping to find a display controller board that can take the video signal off the ribbon to drive a portable display (sort of like a tablet). I’m doing this on a OnePlus 8 because I have one with a broken screen.

I did think of trying to get alt display over USB-C but I can’t see anything on the screen so I don’t think I can get that setup, unless I can change settings when plugged into a computer without activating USB debugging.

Anyway, does anyone know what are the pinouts of the ribbon cable and what do I need to drive the display; or does anyone know where to find that information?

Thank you for the help of this community.

submitted by /u/Lack_Potential
[link] [comments]

Dark Reading: Attacks/Breaches
CISA Warns on Unpatched ICS Vulnerabilities Lurking in Critical Infrastructure

The advisory comes the same week as a warning from the EU's ENISA about potential for ransomware attacks on OT systems in the transportation sector.

Dark Reading: Attacks/Breaches
$36M BEC Fraud Attempt Narrowly Thwarted by AI

With more than $36M nearly swindled away, an almost-successful BEC attempt in the commercial real estate space shows how sophisticated and convincing fraud attacks are becoming.

Hacking on Medium
Try Hack Me: MD2PDF

https://cdn-images-1.medium.com/max/853/1*j3ybxDxlTyeyF4jDNW6ZWQ.png
Today we are going to look at a machine on Try Hack Me that is vulnerable to Cross Site Scripting (XSS) to be able to read a file on the…

Continue reading on Medium »

Hacking on Medium
Cross-Site Request Forgery (CSRF): What It Is and How to Prevent It

https://cdn-images-1.medium.com/max/1200/1*GIi8H4kHX1uGv7THV6HLyA.png
Cross-Site Request Forgery (CSRF) is a type of web vulnerability that allows attackers to trick users into unknowingly executing unwanted…

Continue reading on Medium »