tpx Security ⠠⠵
@tpxSecurity
2.4K subscribers
2.31K photos
103 videos
24 files
3.97K links
Hacking, ciberseguridad e Inteligencia.
Download Telegram
About
Blog
Apps
Platform
Join
tpx Security ⠠⠵
2.4K subscribers
tpx Security ⠠⠵
Hackearon a la NASA.

Entraron a través de una raspberry pi conectada a su red (sin autorización)
Se movieron lateralmente a otros sistemas críticos
La NASA decidió desconectar varias operaciones del internet hasta resolver el problema

https://www.forbes.com/sites/daveywinder/2019/06/20/confirmed-nasa-has-been-hacked/
Forbes
Confirmed: NASA Has Been Hacked
Following an audit by the U.S. Office of the Inspector General, it has been confirmed that the Jet Propulsion Laboratory (JPL) network, part of NASA, has been hacked and the Johnson Space Center has yet to restore all communications data because of continuing…
1.35K views
tpx Security ⠠⠵
https://www.cnn.com/2019/06/17/us/mastercard-transgender-credit-cards-pride-trnd/index.html
1.22K views
tpx Security ⠠⠵
Raspberry Pi 4 is here! A tiny, dual-display desktop computer, with three RAM variants to choose from, and all the hackability you know and love. On sale now from the familiar price of $35: https://www.raspberrypi.org/blog/raspberry-pi-4-on-sale-now-from-35/ #RaspberryPi4
1.5K views
tpx Security ⠠⠵
https://www.fayerwayer.com/2019/07/broadcom-compa-symantec
FayerWayer
Broadcom está a punto de comprar a Symantec por una millonada
El fabricante de chips Broadcom está a punto de comprar la compañía de antivirus Symantec por miles de millones de dólares. Para descontento de algunos.
1.12K views
tpx Security ⠠⠵
https://www.genbeta.com/actualidad/youtube-prohibe-videos-instructivos-hacking-desata-descontento-comunidad-infosec
Genbeta
YouTube prohíbe los vídeos instructivos sobre hacking y desata el descontento en la comunidad infosec
Recientemente, YouTube actualizó sus políticas sobre contenido peligroso y perjudicial para incluir los vídeos instructivos sobre phishing y hacking dentro de su lista negra de material que no está permitido en la plataforma. A...
1.18K views
tpx Security ⠠⠵
https://www.theguardian.com/science/2019/jul/05/eurofins-ransomware-attack-hacked-forensic-provider-pays-ransom
the Guardian
Hacked forensic firm pays ransom after malware attack
Largest private provider Eurofins hands over undisclosed fee to regain control of systems
969 views
tpx Security ⠠⠵
https://liliputing.com/2019/07/debian-10-buster-is-here-gnu-linux-os-with-5-years-of-support.html
Liliputing
Debian 10 Buster is here (GNU/Linux OS with 5 years of support)
It’s been more than 25 years since the first stable released of the Debian operating system. Debian was one of the first operating systems to use a Linux kernel, and it’s come a long way in the past two and a half decades, also serving as the foundation for…
1.92K views
tpx Security ⠠⠵
Forwarded from Israel Garcia
https://www.secjuice.com/abusing-php-query-string-parser-bypass-ids-ips-waf/
1.09K views
tpx Security ⠠⠵
0-Day en Zoom!
Desactiven el acceso a la cámara al entrar a una videoconferencia https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
Medium
Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
Vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission. The flaw potentially…
1.12K views
tpx Security ⠠⠵
Forwarded from Israel Garcia
https://larepublica.pe/sociedad/2019/07/10/desarticulan-banda-teamkingnet-dedicada-a-hackear-paginas-municipales-y-pornografia-infantil/
larepublica.pe
Desarticulan “Teamkingnet”, dedicados a hackear entidades estatales y pornografía infantil
Desde el 2017, banda criminal internacional liderada por “D!OZN3TC4T” atacó a servidores de varios municipios a nivel nacional, como en Lima, Arequipa, Piura, entre otros, logrando extraer información confidencial estatal y datos personales de trabajadores.
1.03K views
tpx Security ⠠⠵
https://blog.cloudflare.com/a-gentle-introduction-to-linux-kernel-fuzzing/
The Cloudflare Blog
A gentle introduction to Linux Kernel fuzzing
For some time I’ve wanted to play with coverage-guided fuzzing. I decided to have a go at the Linux Kernel netlink machinery. It's a good target: it's an obscure part of kernel, and it's relatively easy to automatically craft valid messages.
2.21K views
tpx Security ⠠⠵
Se abre el entrenamiento: Web Penetration Tester en Linea 🌐 los días 18,19,20 de Septiembre 2019 !


🚨 Más información en https://tpx.mx/cursos/web-penetration-tester/en-linea !
1.01K views
tpx Security ⠠⠵
1998: Ethereal was first released publicly as version 0.2.0. Its creator, Gerald Combs, thought it was cool that Bob Metcalfe named Ethernet after luminiferous ether so he picked a name beginning with ether. Since 2006 the network protocol analyzer has been known as Wireshark.
2.23K views
tpx Security ⠠⠵
https://www.forbes.com.mx/reivindican-al-padre-de-la-informatica-alan-turing-aparecera-en-el-billete-de-50-libras/
Forbes México
Reivindican al padre de la informática: Alan Turing aparecerá en el billete de 50 libras • Forbes México
El billete de 50 libras es el de mayor valor en Reino Unido; activistas del movimiento LGBT celebran la selección de Turing.
1.22K views
tpx Security ⠠⠵
https://medium.com/@sansyrox/hacking-tinders-premium-model-43f9f699d44
Medium
Hacking into Tinder’s Premium Model
In this blog, I’ll be talking about how we can bypass the tinder’s premium service and convert likes into matches through a vulnerability…
2.05K views
tpx Security ⠠⠵
([a-fA-F0-9]{32}(?:[a-fA-F0-9]{8})?(?:[a-fA-F0-9]{16})?(?:[a-fA-F0-9]{8})?(?:[a-fA-F0-9]{32})?(?:[a-fA-F0-9]{32})?)
1.83K views
tpx Security ⠠⠵
979 views
tpx Security ⠠⠵
"Big announcement: after some months of continuing work, it is a pleasure to announce the Hunter Cat pre-sale. Hunter Cat is a portable skimmer detector for magnetic stripe readers."

https://twitter.com/Netxing/status/1153356128471801857
Twitter
Salvador Mendoza
Big announcement: after some months of continuing work, it is a pleasure to announce the Hunter Cat pre-sale. Hunter Cat is a portable skimmer detector for magnetic stripe readers. More details: https://t.co/U3oyKpv8dW #payments #skimmer #huntercat #infosec…
993 views
tpx Security ⠠⠵
¡Cuidado al compartir enlaces de Google Fotos!

Se descubrió un error el cual permite acceder a un enlace compartido de manera privada sin necesidad de estar logueado, basta con acceder desde una ventana de incógnito al enlace.

Mucho cuidado.
1.8K views
tpx Security ⠠⠵
Pwning child company to get access to ParentCompany's Slack Team
https://blog.parthmalhotra.com/pwning-child-company-to-get-access-to-parentcompanys-slack-team/
Parth Malhotra
Pwning child company to get access to ParentCompany's Slack Team
> Disclaimer : Prior permissions were taken before performing heavy attacks on the
targets below, you should not try this without taking prior permission.
The following was reported to a program on HackerOne, I have redacted the
company name, lets call it…
888 views
tpx Security ⠠⠵
How I found the most critical bug in live bug bounty event?
https://medium.com/@innocenthacker/how-i-found-the-most-critical-bug-in-live-bug-bounty-event-7a88b3aa97b3
Medium
How I found the most critical bug in live bug bounty event?
Hey Folks! Hope you guys are doing great.
915 views