Top 10 web hacking techniques of 2019 Security News & Discussion

---

• Top 10 web hacking techniques of 2019
• A friend recently got hit with Dever ransomware. The attacker appears to have been active for 14 minutes, dropping tools such as Mimikatz and Lazagne and then launching Dever ransomware which included SMB scanning, persistence mechanisms and lateral movement. See the timeline, summary and IOCs below
• How does Kerberos delegation work?
• Writing or Receiving your first pentest report
• CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem
• Themegrill vulnerability allowed unauthenticated database wipe and auth bypass. Update asap as 200k+ sites affected!
• NeverLAN CTF Full Writeups
• Build your own RDP Honeypot this weekend

Top 10 web hacking techniques of 2019 Posted: 17 Feb 2020 07:37 AM PST submitted by /u/0xdea [link] [comments]

A friend recently got hit with Dever ransomware. The attacker appears to have been active for 14 minutes, dropping tools such as Mimikatz and Lazagne and then launching Dever ransomware which included SMB scanning, persistence mechanisms and lateral movement. See the timeline, summary and IOCs below Posted: 16 Feb 2020 03:17 PM PST submitted by /u/InfoSecJim [link] [comments]

How does Kerberos delegation work? Posted: 17 Feb 2020 04:21 AM PST submitted by /u/Zer1t0 [link] [comments]

Writing or Receiving your first pentest report Posted: 17 Feb 2020 10:25 AM PST submitted by /u/ZephrX112 [link] [comments]

CVE-2019-18683: Exploiting a Linux kernel vulnerability in the V4L2 subsystem Posted: 16 Feb 2020 10:18 PM PST submitted by /u/digicat [link] [comments]

Themegrill vulnerability allowed unauthenticated database wipe and auth bypass. Update asap as 200k+ sites affected! Posted: 17 Feb 2020 01:55 AM PST submitted by /u/ded1cated [link] [comments]

NeverLAN CTF Full Writeups Posted: 16 Feb 2020 02:46 PM PST submitted by /u/boshdajosh [link] [comments]

Build your own RDP Honeypot this weekend Posted: 15 Feb 2020 06:46 AM PST New mini-series on setting up your own RDP Honeypot within a weekend with PCAP captures and sharing intel via a Twitter & Pastebin bot. 3-Step RDP Honeypot: Introduction Free links for those without a medium membership: Introduction Step 1 | RDP Honeypot Service Setup Step 2 | Processing PCAPs Step 3 | Operationalizing Intelligence submitted by /u/chapinb [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States