IntroductionContinue reading on Medium » (https://medium.com/@rajdipdeysarkar7/my-journey-to-nokia-hall-of-fame-in-just-10-minutes-4869c78c37e7?source=rss------bug_bounty-5)

hacking: security in practice
Think I've found my new favorite way to make Google Dorks.

Came across this dork builder the other day, was pretty fun to play around with. I was able to come up with some pretty unique Dorks.

Has anyone else been using the platform?

Its: https://dorkgenius.com/

submitted by /u/WordofDoge
[link] [comments]

hacking: security in practice
Got robbed by spear fishing, how to avoid further harm (e.g. black mailing)

I got robbed for all the money on my account. I was stupid and fell for a well-timed targeted phishing attack. I logged in on the phishing site with bank credentials. After that, my money intantly disappeared.

Not long after, I got a call from my bank (later turned out it wasn't them, so probably the attacker). They knew my address. They asked me to go to a bank to freeze everything, then go to a SPECIFIC police station (the station in the district I live in). By then, We've already dealt with the bank, so - naïvely - we went to that specific police station.

Nothing happened since then. I probably lost the money, I accepted that, but what I'm worried about is the call and that specific police station. I'm not sure about the purpose of it. Only winning time by manipulating me into not calling but travelling to the police? Or maybe more, he knew my address after all. What do you think? Should I be afraid? Maybe he was there and collected some more data about me?

What should I do to prevent further harm? They probably have some very personal data of me, my address for sure, who knows what else? I don't have anything left, but what if they start targeting my loved ones, old people especially? Is there a realistic chance to this? How can I protect myself?

Any advice is very welcome! Thank you for reading!

submitted by /u/Joblivion24
[link] [comments]

hacking: security in practice
can 2fa be bypassed?

I've been wondering for the past couple of days seeing how every day new ways to scam and harm people online are being discovered, that can someone hack an account that is protected by a 2-factor authenticator.

submitted by /u/abdullah_khalil
[link] [comments]

hacking: security in practice
Securing credentials in Python program?

What good practices is there to secure credentials within Python program?

submitted by /u/Fc5vko58-o_jjlAwg6bl
[link] [comments]

https://preview.redd.it/y5uwffiw5pqa1.jpg?width=640&crop=smart&auto=webp&s=d7b953cb7420223f0b4ffcc576b6ce10a3365add Only started to get into cyber security recently, following being hacked actually. Horrendous experience. Absolutely slammed the brakes on my ecommerce ambitions. But - fantasy land here, few bits 'recommended' by Sir Bombal. Reason for the remote control cars are the servo's. If I'd really put the effort in I'd have dug out the ol DJI..

But I've had a few interesting ideas (that I'm never going to do - because I'm white hat an not a crim....) but part of me loves an hr or 2 watching FBI files or Coffee house crime. Pure fantasy land like. But I've thought on everything in the pic. I'm handing it over to you guys (the experts!)

submitted by /u/Clear-Illustrator-28
[link] [comments]

hacking: security in practice
Are there any attacks which target MFA codes, such as those generated by authenticator apps?

Was just wondering if an attack was possible where the attacker could note each code that is generated every 30 seconds and from that sequence of codes, somehow figure out the key(?) required to put it into another authenticator so that they could generate their victim's MFA codes?

submitted by /u/melthamlewis
[link] [comments]

Dark Reading: Attacks/Breaches
Microsoft Security Copilot Uses GPT-4 to Beef Up Security Incident Response

Microsoft's new AI assistant tool helps cybersecurity teams investigate security incidents and hunt for threats.

Deep Web
List of different tor subreddits

As you might already know, centralized information and depending on just 1 subreddit is bad, best to join multiple different Tor subreddits as well.

Here is a small list of some Tor subreddits:

1.
/r/tor_noobs

2.
/r/onionfields

3.
/r/tor

4.
/r/deepweb
submitted by /u/Fragrant_Bag_4180
[link] [comments]

Hacking on Medium
Securing Organizations From Cyber Threats

With the increased use of technology, organizations are at risk of cyber-attacks. Cyber threats in the form of malware, phishing, and…

Continue reading on Medium »

Hacking on Medium
Stocker — Hack The Box

https://cdn-images-1.medium.com/max/690/0*fP54CF8nHuIQNzO9.png
In this writeup, we will solve a box on hackthebox called Stocker.

Continue reading on Medium »

Hacking on Medium
Interface — Hack The Box

https://cdn-images-1.medium.com/max/700/0*rR4P8EWwJOaUBdSE.png
In this writeup, we will solve a box on hackthebox called Interface.

Continue reading on Medium »