ӉѦСҠіИԌ ҬЄѦӍ СѦИѦL ѺҒіСіѦL DіҒԱՏіóИ

Forwarding Traffic Through SSH https://www.blackhillsinfosec.com/forwarding-traffic-through-ssh/

The Anti-Recon Recon Club (using ReconFTW) https://www.jhaddix.com/post/the-anti-recon-recon-club-using-reconftw

La diferencia entre http y https Con más personas que se unen a la escena de Internet cada día, es importante que su seguridad sea.Bueno, tiene que ser bueno.Por supuesto, todo puede ser pirateado y esa es la forma en que funcionan los piratas informáticos.Saben que hay una vulnerabilidad, pero no saben el resto.En este artículo intentaré explicar la gran diferencia entre HTTP y HTTPS. Http HTTP significa Protocolo de transferencia de texto Hyper.Cada vez que abrimos un sitio web usamos este protocolo.El cliente le pide al servidor que abra la comunicación en el puerto 80. El servidor lo hace y abre el puerto 80 y en el lado del cliente se abren varios puertos aleatorios. ¿HTTP es seguro? HTTP no es absolutamente seguro.Si alguien usara un ataque MITM (hombre en el medio) y busque con Wireshark, el atacante fácilmente obtendría acceso a su cuenta. Los datos de paquetes envío con HTTP no están encriptados.Es por eso que es tan fácil en una sesión usando MITM y Wireshark. Https HTTPS es una combinación de HTTP (protocolo de transferencia de texto Hyper) y SSL (protocolo de capa de enchufe seguro) / TLS (seguridad de la capa de transporte).HTTPS se usa principalmente para la banca por Internet, las transacciones de pago y las páginas de inicio de sesión. Su objetivo es proporcionar la máxima seguridad para las páginas web que envían información segura.HTTPS funciona igual que HTTP pero tiene cifrado además. ¿HTTPS es seguro? HTTPS es seguro.Si alguien usara el mismo método que con HTTP (MITM + Wireshark), entonces el atacante solo obtendría información encriptada como se vio anteriormente. #HackingTeam

MacStealer: Wi-Fi Client Isolation Bypass MacStealer can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522) to intercept (steal) traffic toward other clients at the MAC layer https://github.com/vanhoefm/macstealer

Spyware vendors use 0-days and n-days against Android and iOS https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/

ARM TrustZone: pivoting to the secure world https://thalium.github.io/blog/posts/pivoting_to_the_secure_world/

Chinese Pinduoduo app exploited system vulnerabilities to escalate privileges to download and execute backdoors and gain unauthorized access to user data, notifications and files. The app was also removed from Google Play Store. Original research: https://mp.weixin.qq.com/s/P_EYQxOEupqdU0BJMRqWsw Context article: https://krebsonsecurity.com/2023/03/google-suspends-chinese-e-commerce-app-pinduoduo-over-malware/ New analysis report: https://github.com/davincifans101/pinduoduo_backdoor_detailed_report/blob/main/report_en.pdf

XSS vulnerability discovered in Android and iOS WordPress app plugin WPMobile.App (CVE-2023-22702) https://patchstack.com/database/vulnerability/wpappninja/wordpress-wpmobile-app-android-and-ios-mobile-application-plugin-11-13-cross-site-scripting-xss-vulnerability

☃️Awesome Web Security☃️ This repo contains a very well curated list of Web Security materials and resources such as ➡️ Cheatsheets ➡️ Blogs ➡️ Tools and much more... #bugbounty #cybersecurity #infosec https://github.com/qazbnm456/awesome-web-security

MFASweep MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled. Depending on how conditional access policies and other multi-factor authentication settings are configured some protocols may end up being left single factor. It also has an additional check for ADFS configurations and can attempt to log in to the on-prem ADFS server if detected. https://github.com/dafthack/MFASweep

#LockBit #ransomware #Entrust Tor link :http://lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion/entrust.com/entrust-datacard/ magnet:?xt=urn:btih:d19daf6e690d5374b17d869c56239ab958f0ef04&dn=entrust.com&tr=udp://tracker.openbittorrent.com:80&tr=udp://tracker.opentrackr.org:1337/announce

🔥Must Read Articles for Every Hacker🔥 (Part 2) ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ ✅ Learn to Hack With Google (Google Dorks Free Guide) 🔗Link: https://pentestingguide.com/google-dorks/ ✅ How to get Cyber Security Internship 🔗Link: https://pentestingguide.com/how-to-get-cyber-security-internship/ ✅ How to Get RDP for Free (Hacker's Secret Method) 🔗Link: https://pentestingguide.com/how-to-get-rdp-for-free/ ✅ How to get Cyber Security Job at Google 🔗Link: https://pentestingguide.com/how-to-get-google-cyber-security-jobs/ ✅ Top 10 Laptops for Cyber Security 🔗Link: https://pentestingguide.com/best-laptops-for-cyber-security/ Learn ¦ Share ¦ Support

Ethical Hacking Tutorials: 🔥Must Read Articles for Every Hacker🔥 (Part 1) ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ ✅ RoadMap to Become Ethical Hacker/Penetration Tester 🔗Link : https://pentestingguide.com/penetration-tester-roadmap/ ✅ How to Learn Cyber Security Fast 🔗Link : https://pentestingguide.com/fastest-way-to-learn-cyber-security/ ✅ How to Become Successful Bug Bounty Hunter (RoadMap) 🔗Link : https://pentestingguide.com/how-to-become-a-bug-bounty-hunter/ ✅ How to Bypass 2FA & MFA 🔗Link : https://pentestingguide.com/how-to-bypass-2fa-and-mfa/ ✅ Complete Tutorial of CTF (Beginner to Advance) 🔗Link : https://pentestingguide.com/ctf-for-beginners/ Learn ¦ Share ¦ Support 🔥Must Read Articles for Every Hacker🔥 (Part 2) ▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁ ✅ Learn to Hack With Google (Google Dorks Free Guide) 🔗Link: https://pentestingguide.com/google-dorks/ ✅ How to get Cyber Security Internship 🔗Link: https://pentestingguide.com/how-to-get-cyber-security-internship/ ✅ How to Get RDP for Free (Hacker's Secret Method) 🔗Link: https://pentestingguide.com/how-to-get-rdp-for-free/ ✅ How to get Cyber Security Job at Google 🔗Link: https://pentestingguide.com/how-to-get-google-cyber-security-jobs/ ✅ Top 10 Laptops for Cyber Security 🔗Link: https://pentestingguide.com/best-laptops-for-cyber-security/ Learn ¦ Share ¦ Support

Vulnerabilidad en sudo - Aviso de seguridad | QNAP https://www.qnap.com/en/security-advisory/qsa-23-11?s=08

Desarticulada una organización criminal por estafar mediante ataques informáticos más de 5 millones de euros a empresas de todo el mundo https://www.guardiacivil.es/es/prensa/noticias/8528.html?s=08

QNAP lanza el nuevo sistema operativo QTS 5.1.0 con muchas novedades https://www.redeszone.net/noticias/lanzamientos/qnap-nas-sistema-qts-5-1-0-novedades/