Hacking on Medium
Path Normalization Crash Course 101

https://cdn-images-1.medium.com/max/1640/1*bpRuIuO7OL722CFgerbX3Q.png
path normalization crash course

Continue reading on Medium »

Hacking on Medium
Protecting the Integrity of the Israeli Military Intelligence Cyber Challenge: A Case Study

https://cdn-images-1.medium.com/max/1440/1*299KJJe7dByd_Jq4Knqu1A.png
How vigilance and proactive measures averted potential security threats in a prestigious recruitment competition

Continue reading on Medium »

hacking: security in practice
Catching Threat Actors using honeypots!

Hey guys, it's me again!

Today I want to tease my new research project. In this research project, I will analyse the data of 20+ honeypots running for 30 days.

However, since the honeypots generated hundreds of GB of data, I will have to split it into multiple parts.

In the first part, I mostly talk about the architecture and installation of the honeypots.

Feel free to ask questions and critique the post.

Cheers!

https://burningmalware.com/Catching-Threat-Actors-using-honeypots!-(Part1)//)

submitted by /u/TachiPy
[link] [comments]

hacking: security in practice
Google chrome passwords (Login data file) PROTECTION

Hi,

my question is - can i somehow protect the chrome password manager file located in my Appdata/Local folder?

I know that a free basic stealer from github can steal them even if google said its "encrypted" and read them easily so - is there a way to protect that file?

​

Thanks!

submitted by /u/mlodyfluder
[link] [comments]

Tips for allocating budget for tooling
https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/

<!-- SC_OFF -->In security, we are always short on budget for tools and people. I'm curious what tips and tricks anyone has in order to get more budget for red team purposes? I was hoping for a budget of 50-100K/year for tools. Am I being unreasonable? <!-- SC_ON --> submitted by /u/Low-Suspect-2356 (https://www.reddit.com/user/Low-Suspect-2356)
[link] (https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/) [comments] (https://www.reddit.com/r/redteamsec/comments/12cxqis/tips_for_allocating_budget_for_tooling/)

Kali Linux Tutorials
Blackbird – OSINT Tool to Find Accounts Using Username

Blackbird is a user name enumeration tool developed by Cyber Hunter Lab. This is one of the OSINT tools to find usernames across social media websites.

What is OSINT?

Open-source intelligence (OSINT) methods involve collecting, analyzing, and disseminating publicly available information to address specific intelligence requirements.

This information is gathered from diverse sources and distributed to the appropriate audience at the appropriate time.

Using these tools enables the comprehensive analysis and collection of information about a particular topic. However, the process can be laborious and time-consuming.

Blackbird Tool

This new user enumeration tool was developed by Cyber Hunter Lab and allowed to use only for Educational purposes.

The tool will check for over 581 websites within a second for a given username and display a graphical result.
https://raw.githubusercontent.com/p1ngul1n0/src/master/blackbird_web.png
The tool was found to be developed in React JS and is available to use with Linux, Mac, and Windows platforms.

According to the developers, the tool has over 1000 UserAgents to cross the information from the social media for the targeted username.

The tool can also extract data such as bio, location, and profile picture along with the username.

Features

* Implement Flask Web Server to optimize UX
* Export results in PDF
* Implement metadata extraction
* Publish a docker image
* Deploy on Cloud
* Export results in CSV

Installation

git clone https://github.com/p1ngul1n0/blackbird
cd blackbird

Install requirements

pip install -r requirements.txt

Usage

Search by username
python blackbird.py -u username

To Find Supported Websites

python blackbird.py –list-sites

To Use proxy

python blackbird.py -u crash –proxy http://127.0.0.1:8080
To Clone
Please consider following and supporting us to stay updated with the latest information.

All About Nuclei Vulnerability Scanner
https://blog.bugzero.io/all-about-nuclei-vulnerability-scanner-763663482d90?source=rss------bug_bounty-5

Using cutting-edge technologies and approaches is necessary to keep ahead of threats in the constantly changing world of cybersecurity.Continue reading on Bug Zero » (https://blog.bugzero.io/all-about-nuclei-vulnerability-scanner-763663482d90?source=rss------bug_bounty-5)

Hacking on Medium
ChatGPT Hack | Jailbreaking ChatGPT

https://cdn-images-1.medium.com/max/1000/0*giqRNujezRNXh3kr.jpg
ChatGPT is a versatile language model that boasts impressive capabilities, particularly when it comes to engineering queries. It is adept…

Continue reading on Medium »

Hacking on Medium
Seven Tips for Recovering a Hacked WhatsApp Account

https://cdn-images-1.medium.com/max/600/1*LWyeJFltqn2bHssRlASQFw.jpeg
WhatsApp is one of the most widely used messaging apps in the world, with over two billion active users. Unfortunately, with such a large…

Continue reading on Medium »

Hacking on Medium
How to use Burp Suite Like a PRO?

https://cdn-images-1.medium.com/max/917/1*l2PQ2BbjXrgB2E5xsSocDQ.png
Burp Suite is a powerful tool for web application security testing and one of the most popular tools in the industry.

Continue reading on Medium »

Hacking on Medium
SushiSwap hacked for over $3.3m

https://cdn-images-1.medium.com/max/1600/0*9B7-hLiEyVaOw-nK.png
On the 8th of April, 2023, SushiSwap, a decentralized cryptocurrency exchange built on the Ethereum blockchain, was hacked for over $3.3m…

Continue reading on Medium »