hacking: security in practice
Files-PC

Just want to say, thank you to those of you who always help. One of, if not the most helpful group on Reddit.

If someone put a corrupt file on my PC, what access can it grant them? What type of files should I be aware of the most? I saw someone talk about a .exe file being disguised in a PDF folder. How does one actually gain access to my PC by doing that?

Note: Only recently started using Kali so still new to using the tools required to scan for files.

submitted by /u/Missthinker2_0
[link] [comments]

hacking: security in practice
Crack handshake

So i recently started to try to hack my wifi to better protect it, i have defined a password i believe its not found in any dictionary 3 old wifi passwords with dots between them, there is anyway to try to crack it without bruteforce? WPS is already disabled so no way they can enter from there

submitted by /u/kyuskuys
[link] [comments]

Bypass AV / IDS and IPS
https://www.reddit.com/r/Pentesting/comments/12ehwzg/bypass_av_ids_and_ips/

<!-- SC_OFF -->Hello fellows! I’m searching solid training regarding bypassing AV and/or other defensive tools Have already looked in offsec as well as other sources and might have overlooked but can’t find a proper program mainly focused on the matter? What would you recommend? Thanks! <!-- SC_ON --> submitted by /u/No_Dream_4588 (https://www.reddit.com/user/No_Dream_4588)
[link] (https://www.reddit.com/r/Pentesting/comments/12ehwzg/bypass_av_ids_and_ips/) [comments] (https://www.reddit.com/r/Pentesting/comments/12ehwzg/bypass_av_ids_and_ips/)

Are Clicking Links Safe?

Howdy friend, I hope all is well at your end!Continue reading on Medium »
Read more...

Hacking on Medium
Running Key Cipher: A Comprehensive Guide | 2023

https://cdn-images-1.medium.com/max/1024/0*RCIMNHkrN-_pO7H4.jpg
Understanding the Key Features, Encryption Process, Decryption Process, and Use Cases of Running Key Cipher | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Building a Budget Red Team Implant

https://cdn-images-1.medium.com/max/2048/0*GY1k9SgsF0Gbj2zk
Why Do I Need an Implant?

Continue reading on Dev Genius »

hacking: security in practice
G602 using 500mhz C-U0007 and MouseJack

submitted by /u/southsko
[link] [comments]

hacking: security in practice
Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

https://external-preview.redd.it/h4ziBNyotCMuuCofHWyOi6dVA-A2YZvsLnOgvv_zD-k.jpg?width=640&crop=smart&auto=webp&s=2b1e2446ebe90789a752dc93a3a0a6c18ff32fe4 submitted by /u/killergoose75
[link] [comments]

hacking: security in practice
Is ufonet a Trojan?

I wanted to test out botnets on virtual machines but byob didn't work on my system for some reason, so instead I got ufonet, I was scrolling through internet seeing how to use it and saw a post saying it makes you a zombie too when you install ufonet. Now I am in that dumb script kiddie phase so idk how to analyze a python file to check if it's a Trojan can someone else confirm for me pls???

submitted by /u/NetworkSame9967
[link] [comments]

hacking: security in practice
Uninstall trend micro on mac without password

I bought an used macmini but it comes with a trend micro. I tried to unistall but I dont have a password.

Any solution about that?

submitted by /u/xMoonknightx
[link] [comments]

Hacking on Medium
Dig info about the Phone number

https://cdn-images-1.medium.com/max/1707/1*IRDuS5JBhnNLFHtFcWObHg.png
Hello everyone in this blog I am going to talk about how to get information about phone numbers using PhoneInfoga and how to set it up.

Continue reading on Medium »

How exploitable sensitive information in API is able to destruct business in disruption era — Part2

Acting as a customer, the rival finds out that an API parameter, “name”, is allowed to have empty value which leads to LIKE ‘%%’ query in…Continue reading on Medium »
Read more...

How exploitable sensitive information in API is able to destruct business in disruption era — Part1
https://medium.com/@mmaulanaabdullah/how-exploitable-sensitive-information-in-api-is-able-to-destruct-business-in-disruption-era-part1-bea74f678315?source=rss------bug_bounty-5

At present day, it’s very common for all basic daily activities are helped by technology. Customers are simply able to order something…Continue reading on Medium » (https://medium.com/@mmaulanaabdullah/how-exploitable-sensitive-information-in-api-is-able-to-destruct-business-in-disruption-era-part1-bea74f678315?source=rss------bug_bounty-5)

Abusing IT Management Tools for C2
https://www.reddit.com/r/redteamsec/comments/12euap8/abusing_it_management_tools_for_c2/

<!-- SC_OFF -->In this week's video, I show you how to use standard IT management tools like, Anydesk, Teamviewer, Splashtop, Atera, and Plink to create a form of C2. Adversaries use these, so they should be table stakes in red team engagements. I will show you how to detect each of these as installed or used. Bonus these will slip by nearly any AV/EDR. Abusing IT Management Tools to Create C2 (https://youtu.be/UgqkiUbUV3g) <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/12euap8/abusing_it_management_tools_for_c2/) [comments] (https://www.reddit.com/r/redteamsec/comments/12euap8/abusing_it_management_tools_for_c2/)