Hacking on Medium
Exploring Your Network’s Vulnerabilities: Can You Hack It?

https://cdn-images-1.medium.com/max/2000/1*VDJ65hRgvH-ZNxcYZlJUow.png
In this article, I’d like to show you some simple and slightly more complex network attacks and tell you how to protect your resources.

Continue reading on Medium »

Hacking on Medium
Warrior and King — book two Rebel and Traitor s

https://cdn-images-1.medium.com/max/600/1*kvW0Kr3OHlT3uSG906bK-A.jpeg
Warrior and King –

Continue reading on Medium »

Hacking on Medium
Villain C2 : Reverse Shell Obfuscation.

https://cdn-images-1.medium.com/max/1920/1*Asebk0GkycLv4IKANS7A6A.png
Explore Alternative Payload Obfuscation Methods in Villain C2 for Reverse Shell Access. Using UUID to Obfuscate Payload for Improved…

Continue reading on Medium »

From Hall of Failure’s to Hall of Fame’s
https://medium.com/@mehtashobhit98/from-hall-of-failures-to-hall-of-fame-s-4462ca5bfa17?source=rss------bug_bounty-5

Hello reader’s, this blog is not the technical vulnerability poc that you are actually looking for, but its about the 5 key ingredients…Continue reading on Medium » (https://medium.com/@mehtashobhit98/from-hall-of-failures-to-hall-of-fame-s-4462ca5bfa17?source=rss------bug_bounty-5)

Path Normalization Crash Course 101

path normalization crash courseContinue reading on Medium »
Read more...

Hacking on Medium
Learning Linux: File and Directory Permissions

https://cdn-images-1.medium.com/max/768/1*uEhUztwkzo29EYq4uZClsA.jpeg
To understand the Linux operating system, it is helpful to break it down into three parts:

Continue reading on Medium »

Hacking on Medium
Path Normalization Crash Course 101

https://cdn-images-1.medium.com/max/1640/1*bpRuIuO7OL722CFgerbX3Q.png
path normalization crash course

Continue reading on Medium »

Hacking on Medium
Protecting the Integrity of the Israeli Military Intelligence Cyber Challenge: A Case Study

https://cdn-images-1.medium.com/max/1440/1*299KJJe7dByd_Jq4Knqu1A.png
How vigilance and proactive measures averted potential security threats in a prestigious recruitment competition

Continue reading on Medium »

hacking: security in practice
Catching Threat Actors using honeypots!

Hey guys, it's me again!

Today I want to tease my new research project. In this research project, I will analyse the data of 20+ honeypots running for 30 days.

However, since the honeypots generated hundreds of GB of data, I will have to split it into multiple parts.

In the first part, I mostly talk about the architecture and installation of the honeypots.

Feel free to ask questions and critique the post.

Cheers!

https://burningmalware.com/Catching-Threat-Actors-using-honeypots!-(Part1)//)

submitted by /u/TachiPy
[link] [comments]

hacking: security in practice
Google chrome passwords (Login data file) PROTECTION

Hi,

my question is - can i somehow protect the chrome password manager file located in my Appdata/Local folder?

I know that a free basic stealer from github can steal them even if google said its "encrypted" and read them easily so - is there a way to protect that file?

​

Thanks!

submitted by /u/mlodyfluder
[link] [comments]

Tips for allocating budget for tooling
https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/

<!-- SC_OFF -->In security, we are always short on budget for tools and people. I'm curious what tips and tricks anyone has in order to get more budget for red team purposes? I was hoping for a budget of 50-100K/year for tools. Am I being unreasonable? <!-- SC_ON --> submitted by /u/Low-Suspect-2356 (https://www.reddit.com/user/Low-Suspect-2356)
[link] (https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/) [comments] (https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/)

Kali Linux Tutorials
Blackbird – OSINT Tool to Find Accounts Using Username

Blackbird is a user name enumeration tool developed by Cyber Hunter Lab. This is one of the OSINT tools to find usernames across social media websites.

What is OSINT?

Open-source intelligence (OSINT) methods involve collecting, analyzing, and disseminating publicly available information to address specific intelligence requirements.

This information is gathered from diverse sources and distributed to the appropriate audience at the appropriate time.

Using these tools enables the comprehensive analysis and collection of information about a particular topic. However, the process can be laborious and time-consuming.

Blackbird Tool

This new user enumeration tool was developed by Cyber Hunter Lab and allowed to use only for Educational purposes.

The tool will check for over 581 websites within a second for a given username and display a graphical result.
https://raw.githubusercontent.com/p1ngul1n0/src/master/blackbird_web.png
The tool was found to be developed in React JS and is available to use with Linux, Mac, and Windows platforms.

According to the developers, the tool has over 1000 UserAgents to cross the information from the social media for the targeted username.

The tool can also extract data such as bio, location, and profile picture along with the username.

Features

* Implement Flask Web Server to optimize UX
* Export results in PDF
* Implement metadata extraction
* Publish a docker image
* Deploy on Cloud
* Export results in CSV

Installation

git clone https://github.com/p1ngul1n0/blackbird
cd blackbird

Install requirements

pip install -r requirements.txt

Usage

Search by username
python blackbird.py -u username

To Find Supported Websites

python blackbird.py –list-sites

To Use proxy

python blackbird.py -u crash –proxy http://127.0.0.1:8080
To Clone
Please consider following and supporting us to stay updated with the latest information.

All About Nuclei Vulnerability Scanner
https://blog.bugzero.io/all-about-nuclei-vulnerability-scanner-763663482d90?source=rss------bug_bounty-5