Hacking tutorials

#OSCP | Increasing security awareness, teaching the basics of security, pentesting and ethical hacking. #hacking #infoSec

[Virtual Hacking Labs @vhackinglabs]

🚀 Exciting News! The VHL IoT Penetration Testing Essentials course is launching before the end of the month!

Are you ready to dive deep into the world of IoT security and penetration testing?

Sign up for our newsletter and get an exclusive discount! 💰
https://t.co/6uSikr28aa

[Hacking tutorials @HackingTutors]

SniffROM: A tool for passive data capture and reconnaissance of serial flash chips. It is used in conjunction with a Saleae logic analyzer to reconstruct flash memory contents and extract contextual information about device operations.
https://t.co/MjVO8btvlI

[Hacking tutorials @HackingTutors]

A Comprehensive Guide on Android Penetration Testing with Frida.

https://t.co/jlQEAr5J3t

[Virtual Hacking Labs @vhackinglabs]

New course launch soon!

https://t.co/ECpfUS5zfc

[Hacking tutorials @HackingTutors]

Very clear explanation of the issue: https://t.co/7rvo8ergcB

[Hacking tutorials @HackingTutors]

curl - SOCKS5 heap buffer overflow - CVE-2023-38545

Affected versions: libcurl 7.69.0 to and including 8.3.0
Not affected versions: libcurl < 7.69.0 and >= 8.4.0
Solution: upgrade to curl 8.4.0 https://t.co/KXAibE0lfR

[Hacking tutorials @HackingTutors]

Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11 · curl/curl · Discussion #12026 · GitHub https://t.co/ME4l2PyM13

[Bert-Jan 🛡️ @BertJanCyber]

🚨 In two days the high severity curl vulnerability (CVE-2023-38545) will be disclosed.
The #KQL queries below create an inventory of all systems that run curl. This will allow you to react quickly once a patch has been pushed, to prevent exploitation.
https://t.co/JTyo3o8H5P

[Germán Fernández @1ZRR4H]

🚨 Hundreds of Citrix VPN instances exploited via CVE-2023-3519 are harvesting corporate credentials in cleartext.

At this time, Shodan shows 406 compromised instances with malicious JavaScript code injected into the login page: https://t.co/1049tPschM (URL shortener because Twitter didn't like my direct links).

Also, I noticed that there is a relatively new and active domain, which is not mentioned in the X-Force report on this campaign (https://t.co/d2siKJ6gvv).

C2/Exfil domain: cloud-js[.]cloud

[inversecos @inversecos]

1\ How to prove an iphone was wiped 🔎👇
#dfir #mobileforensics

When a user wipes their phone, it generally results in the creation of a file ".obliterated". This file is located:

/private/var/root

This isn't enough to identify the timestamp of when the wipe occurred (...cont)

[Hacking tutorials @HackingTutors]

Red Wizard is an open-source tool designed to provide repeatable, OPSEC-safe infrastructure for Red Teaming operations. https://t.co/SMNziGw7bx

[Hacking tutorials @HackingTutors]

Hackers compromise 3CX desktop app in a supply chain attack https://t.co/YBji44c1iQ

[Hacking tutorials @HackingTutors]

Penetration Testing REST APIs Using Burp Suite - Part 2 https://t.co/MVWIGcLFrJ

[Hacking tutorials @HackingTutors]

Penetration Testing REST APIs Using Burp Suite - Part 1 https://t.co/TQ2Wl4ASLI

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

This is docker-compose file for the infra of an application
The application allows users to sign up and log in
Show us how you'd take over a victim's account in the comments 👇

The best explanation gets a 25€ SWAG voucher!🎫

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

Show us how you'd get the flag from the server in the comments 👇

The best explanation gets a 25€ SWAG voucher! 👕

[Hacking tutorials @HackingTutors]

GitHub - madhuakula/kubernetes-goat: Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀 https://t.co/soxYRKMX9e

[Hacking tutorials @HackingTutors]

GitHub - OWASP/crAPI: completely ridiculous API (crAPI) https://t.co/TiemGy5sfH

[Hacking tutorials @HackingTutors]

Hacking (with) Grafana, the most widely used solution for monitoring https://t.co/2Ctvy7LBEY

[Hacking tutorials @HackingTutors]

Penetration Testing REST APIs Using Burp Suite - Part 1 https://t.co/TQ2Wl4ASLI