I’m using a SQL based method to get and access a sever of mine to test it’s security, but I was wondering how you could hide yourself from being seen. I already have a proxy chain is there anything else I should try? Kile Lenox
submitted by /u/maximumstorm_yt
[link] [comments]
Dariy Pankov, a Russian VXer behind the NLBrute malware, has been extradited to the United States from Georgia. The Russian national Dariy Pankov, aka dpxaker, is suspected to be the author of the NLBrute malware. The man has been extradited to the United States from Georgia. “Pankov, a citizen and resident of Russia, was taken […]
The post The alleged author of NLBrute Malware was extradited to US from Georgia appeared first on Security Affairs.
submitted by /u/misconfig_exe [link] [comments]
Hey everyone,
I was just wondering if AV vendors have the possibility to add signatures based on the structure of how a program is set up?
For instance, I’ve recently done some tests on obfuscating the source code of a widely-known RAT found on GitHub. I’ve renamed all of the strings, methods, classes and namespaces. Disabled/commented out some functionality I don’t need, even obfuscated the DLL assemblies as well.
Though for some reason, AV vendors still detect it. Maybe I’m missing a spot in the code where another signature is, or perhaps, it’s the structure of the code itself that’s getting detected?
I don’t know how many vendors use behavioral analysis, but maybe the detection lies in that area of antivirus solutions?
How much obfuscation or code changing is enough for you guys to bypass most AV’s?
submitted by /u/Can_A_Bich
[link] [comments]
I came across a CTF where you could read another user’s /.ssh/id_rsa but couldn’t interact with anything else in their /home. I only found out about this because I looked up a write up for the CTF. Is there any way to test for something like this? I’v…
Threat actors are actively exploiting the Fortinet FortiNAC vulnerability CVE-2022-39952 a few hours after the publication of the PoC exploit code. This week, researchers at Horizon3 cybersecurity firm have released a proof-of-concept exploit for a critical-severity vulnerability, tracked as CVE-2022-39952, in Fortinet’s FortiNAC network access control solution. Last week, Fortinet has released security updates to address two […]
The post Fortinet FortiNAC CVE-2022-39952 flaw exploited in the wild hours after the release of PoC exploit appeared first on Security Affairs.
Got a Dell 7410 off an auction for cheap because the BIOS was locked and figure I could fix it and use a decent student laptop. Dell said if I had the previous owners information I could do a warranty swap and they could give me the master. Since I got…
submitted by /u/Tis_A_Fine_Barn [link] [comments]
 |
Hello, I recently started learning bettercap. My main OS is Linux mint and I don’t want to make it messy, so I decided to use Kali Linux on VM Ware. I use Bridged networking. (Local IP’s of my host computer (referred to as Mint) and my VM computer (referred to as Kali) are different) Here is the problem: On Mint, when I use bettercap, everything works as it should. But when I try it on Kali (the VM inside the Mint), the But the Kali IP normally works, you can ping it or nmap it however you want. But when I use bettercap on my Mint, it doesn’t show Kali’s IP in the (if you didn’t understand the question, here are some photos:) Thanks! submitted by /u/rorakus |
Hi If modern ebook drm is 128bit encryption so how do hackers break it ? Something in extremely fast paste (video game for example) (I hate piracy as mush as i hate drm and corporations) submitted by /u/Mindless_Debate1470 [link] …
