Mimikatz bypass for Credential Guard on latest Win10 released live at Microsoft conf
https://ift.tt/2DBh6RT
Submitted September 27, 2018 at 10:30PM by xylogx
via reddit https://ift.tt/2zAt6Pu
https://ift.tt/2DBh6RT
Submitted September 27, 2018 at 10:30PM by xylogx
via reddit https://ift.tt/2zAt6Pu
GitHub
gentilkiwi/mimikatz
A little tool to play with Windows security. Contribute to gentilkiwi/mimikatz development by creating an account on GitHub.
Upgrade Your SSH Key to Ed25519
https://ift.tt/2LwuR3K
Submitted September 28, 2018 at 02:24AM by unquietwiki
via reddit https://ift.tt/2xQ4joo
https://ift.tt/2LwuR3K
Submitted September 28, 2018 at 02:24AM by unquietwiki
via reddit https://ift.tt/2xQ4joo
Risan’s Blog
Upgrade Your SSH Key to Ed25519
When is the last time you created your SSH key? If you’re still using RSA with key-size less than 2048 bits long, It’s time for an upgrade!
How recon helped in finding a Jenkins instance from where I leveraged to perform RCE!
https://ift.tt/2DKlZZ8
Submitted September 28, 2018 at 07:49AM by security_blogs
via reddit https://ift.tt/2xHiop0
https://ift.tt/2DKlZZ8
Submitted September 28, 2018 at 07:49AM by security_blogs
via reddit https://ift.tt/2xHiop0
Medium
#BugBounty — From finding Jenkins instance to Command Execution.Secure your Jenkins Instance!
Hi Guys,
LPE on Linux - vmacache_flush_all() bug
https://ift.tt/2xKKoIu
Submitted September 28, 2018 at 02:39PM by 0v3rl04d
via reddit https://ift.tt/2zBjyDW
https://ift.tt/2xKKoIu
Submitted September 28, 2018 at 02:39PM by 0v3rl04d
via reddit https://ift.tt/2zBjyDW
reddit
r/netsec - LPE on Linux - vmacache_flush_all() bug
3 votes and 0 comments so far on Reddit
Facebook Network Breach Impacts Up to 50 Million Users
https://ift.tt/2OjeQ5L
Submitted September 28, 2018 at 10:24PM by steakmane
via reddit https://ift.tt/2QiGH3D
https://ift.tt/2OjeQ5L
Submitted September 28, 2018 at 10:24PM by steakmane
via reddit https://ift.tt/2QiGH3D
Nytimes
Facebook Security Breach Exposes Accounts of 50 Million Users
The attack added to the company’s woes as it contends with fallout from its role in a Russian disinformation campaign.
IC3 Issues Alert on RDP Exploitation
https://ift.tt/2Qg31ee
Submitted September 28, 2018 at 10:02PM by jwarren116
via reddit https://ift.tt/2xKCYVD
https://ift.tt/2Qg31ee
Submitted September 28, 2018 at 10:02PM by jwarren116
via reddit https://ift.tt/2xKCYVD
www.us-cert.gov
IC3 Issues Alert on RDP Exploitation | US-CERT
The Internet Crime Complaint Center (IC3), in collaboration with DHS and the Federal Bureau of Investigation, has released an alert on cyber threat actors maliciously using legitimate remote administration tools, such as Remote Desktop Protocol (RDP). Threat…
Twenty years of Escaping the Java Sandbox (Phrack Paper)
https://ift.tt/2zDlQCr
Submitted September 28, 2018 at 11:19PM by overflowingInt
via reddit https://ift.tt/2R4KB18
https://ift.tt/2zDlQCr
Submitted September 28, 2018 at 11:19PM by overflowingInt
via reddit https://ift.tt/2R4KB18
phrack.org
.:: Phrack Magazine ::.
Phrack staff website.
50 million Facebook accounts owned
https://ift.tt/2zDmUXf
Submitted September 29, 2018 at 06:13AM by 1-o_o-1
via reddit https://ift.tt/2OYnOTp
https://ift.tt/2zDmUXf
Submitted September 29, 2018 at 06:13AM by 1-o_o-1
via reddit https://ift.tt/2OYnOTp
reddit
r/netsec - 50 million Facebook accounts owned
12 votes and 1 comment so far on Reddit
Auditing Bitbucket Server Data for Credentials in AWS
https://ift.tt/2QjyVqh
Submitted September 29, 2018 at 03:40AM by Kayjaywt
via reddit https://ift.tt/2NKVbwa
https://ift.tt/2QjyVqh
Submitted September 29, 2018 at 03:40AM by Kayjaywt
via reddit https://ift.tt/2NKVbwa
Sourced
Auditing Bitbucket Server Data for Credentials in AWS - Sourced
The godfather of crypto has a plan to keep digital payments and messages private
https://ift.tt/2OCvZ7n
Submitted September 29, 2018 at 07:41PM by PRIVACYx05i4shUl
via reddit https://ift.tt/2xHb3pB
https://ift.tt/2OCvZ7n
Submitted September 29, 2018 at 07:41PM by PRIVACYx05i4shUl
via reddit https://ift.tt/2xHb3pB
Quartz
The godfather of crypto has a plan to keep digital payments and messages private
As more payments take place online through apps, David Chaum warns that a rich trove of personal data is ripe for exploitation.
The World’s Most Popular Coding Language Happens to be Most Hackers’ Weapon of Choice
https://ift.tt/2y2ouzF
Submitted September 30, 2018 at 01:13PM by whitehattracker
via reddit https://ift.tt/2xPYurU
https://ift.tt/2y2ouzF
Submitted September 30, 2018 at 01:13PM by whitehattracker
via reddit https://ift.tt/2xPYurU
Blog | Imperva
The World's Most Popular Coding Language Happens to be Most Hackers' Weapon of Choice – Blog | Imperva
Python will soon be the world’s most prevalent coding language. That’s quite a statement, but if you look at its simplicity, flexibility and the relative ease with which folks pick it up, it’s not hard to see why.
An Innovative Phishing Style
https://ift.tt/2OqfZsm
Submitted September 30, 2018 at 01:04PM by Aurum2
via reddit https://ift.tt/2RbMLvN
https://ift.tt/2OqfZsm
Submitted September 30, 2018 at 01:04PM by Aurum2
via reddit https://ift.tt/2RbMLvN
Stuff with Aurum
An Innovative Phishing Style
A few weeks ago, I added one of the many scammers trying to phish people on Steam. Usually, I block them after they drop their phishing website link but this particular website was pretty innovativ…
Examining Phishing Websites and Scraping Information to Track Down Malicious Actors
https://ift.tt/2OmSrEF
Submitted September 30, 2018 at 05:18PM by elliott954
via reddit https://ift.tt/2R6l9IJ
https://ift.tt/2OmSrEF
Submitted September 30, 2018 at 05:18PM by elliott954
via reddit https://ift.tt/2R6l9IJ
Medium
Examining Phishing Websites and Scraping Information to Track Down Malicious Actors
Phishing attacks.
HCI-CPT 2019 - International conference for Human – Computer Interaction in cybersecurity
https://ift.tt/2IsedSa
Submitted September 30, 2018 at 08:03PM by Natanael_L
via reddit https://ift.tt/2Oprj89
https://ift.tt/2IsedSa
Submitted September 30, 2018 at 08:03PM by Natanael_L
via reddit https://ift.tt/2Oprj89
Container Scanning: Anchore Engine vs Aqua Microscanner vs Clair vs Dagda vs Twistlock
https://ift.tt/2xMrSQ4
Submitted September 30, 2018 at 10:23PM by stevenacreman
via reddit https://ift.tt/2zGMvOM
https://ift.tt/2xMrSQ4
Submitted September 30, 2018 at 10:23PM by stevenacreman
via reddit https://ift.tt/2zGMvOM
kubedex.com
Container Scanning - kubedex.com
Come and read Container Scanning on Kubedex.com. The number one site to Discover, Compare and Share Kubernetes Applications.
Latest Facebook hack and why 2-step verification isn't enough
https://ift.tt/2R9M1HT
Submitted October 01, 2018 at 10:34AM by adriank1410
via reddit https://ift.tt/2RePgNX
https://ift.tt/2R9M1HT
Submitted October 01, 2018 at 10:34AM by adriank1410
via reddit https://ift.tt/2RePgNX
Adrian Kwiatkowski
Latest Facebook hack and why 2-step verification isn't enough
Did you get logged out of your Facebook account around the last Friday, September 28th? Yeah, me too... Turns out, it wasn’t just an error, but a sign of data breach. Of around 50 million Facebook users. The security team decided to reset access tokens of…
Mini pwning with GL-iNet AR150
https://ift.tt/2OokZh6
Submitted October 01, 2018 at 08:56PM by EvanConover
via reddit https://ift.tt/2R9NYUF
https://ift.tt/2OokZh6
Submitted October 01, 2018 at 08:56PM by EvanConover
via reddit https://ift.tt/2R9NYUF
Erratasec
Mini pwning with GL-iNet AR150
Seven years ago, before the $35 Raspberry Pi, hackers used commercial WiFi routers for their projects. They'd replace the stock firmware wit...
How to improve your pentesting performance in Windows
https://ift.tt/2OrGrBR
Submitted October 02, 2018 at 02:33AM by agrrrdog
via reddit https://ift.tt/2NdUgiJ
https://ift.tt/2OrGrBR
Submitted October 02, 2018 at 02:33AM by agrrrdog
via reddit https://ift.tt/2NdUgiJ
Acunetix
Better Web-Pentesting in Windows with AHK | Acunetix
Article that looks at the use of AHK as a tool for pentesters. Windows is not a very popular OS for pentesters due to many reasons. Sometimes however we need to use it (at least on a virtual machine). This article shows examples on the use of hot keys to…
Original source code for MS-DOS 1.25 and 2.0 by Microsoft
https://ift.tt/2R2Krrb
Submitted October 02, 2018 at 03:38PM by CyberBullets
via reddit https://ift.tt/2zLzHGT
https://ift.tt/2R2Krrb
Submitted October 02, 2018 at 03:38PM by CyberBullets
via reddit https://ift.tt/2zLzHGT
GitHub
Microsoft/MS-DOS
The original sources of MS-DOS 1.25 and 2.0, for reference purposes - Microsoft/MS-DOS
Ethical Hacking Master Class - 100+ Hours Bundle
https://ift.tt/2NUszwR
Submitted October 02, 2018 at 04:47PM by patidarayush11
via reddit https://ift.tt/2IApe48
https://ift.tt/2NUszwR
Submitted October 02, 2018 at 04:47PM by patidarayush11
via reddit https://ift.tt/2IApe48
Teachable
The Complete Python Programming Course for Beginners
Learn Python for AI, Machine Learning, Data Science and App Development
CVE-2017-11176: A step-by-step Linux Kernel exploitation
https://ift.tt/2IwS9Gd
Submitted October 02, 2018 at 06:05PM by cfambionics
via reddit https://ift.tt/2NZBLDO
https://ift.tt/2IwS9Gd
Submitted October 02, 2018 at 06:05PM by cfambionics
via reddit https://ift.tt/2NZBLDO