Source In a recent threat hunt, Datadog Security Labs uncovered sophisticated attacker activity stemming from a leaked, long-term AWS access key (AKIA*). Within a mere 150-minute window, five distinct IP addresses were observed attempting to leverage this compromised key, executing various malicious techniques, tactics, and procedures (TTPs). This incident brought to light several previously unreported Read More …
Tag: hacking
The Open-Source Arsenal of Ivanti CSA Attackers
Recent forensic investigations by Synacktiv’s CSIRT have shed light on the common open-source tools leveraged by threat actors in incidents stemming from compromised Ivanti Cloud Services Appliance (CSA) devices. While initial access often exploited zero-day vulnerabilities in Ivanti CSA (CVE-2024-8963, CVE-2024-8190, CVE-2024-9380, CVE-2024-9379), subsequent attack stages frequently utilized publicly available, and sometimes “noisy,” tools for Read More …
Tools – BlackCat: Azure Security Validation
For those stepping into the dynamic field of information security, staying abreast of new tools and methodologies is crucial. One such tool gaining traction, particularly for professionals working within Microsoft Azure environments, is “BlackCat.” Developed by ‘azurekid,’ BlackCat is a PowerShell module designed to help validate and enhance the security posture of Azure deployments. What Read More …
The Dawn of Autonomous Warfare
The landscape of modern warfare is undergoing a profound transformation, driven by the rapid advancements in artificial intelligence (AI) and the proliferation of autonomous weapons systems. This shift, often likened to the advent of the Maxim gun which revolutionized battlefields, signals a potential end to traditional manned mechanized combat. At its core, autonomous warfare involves Read More …
Hacker TV – Tradecraft Course
Tradecraft is a course on red team operations. Learn to execute a targeted attack as an external actor with Cobalt Strike.
TARA – Threat Analysis and Risk Assessment
Threat Analysis and Risk Assessment (TARA) is a critical process in cybersecurity that helps organizations identify, evaluate, and prioritize potential threats to their information systems and data. As cyber threats continue to evolve, understanding TARA is essential for protecting sensitive information and maintaining the integrity of systems. This summary will provide an overview of TARA Read More …
Hacker TV – How I Would Learn Cyber Security If I Could Start Over
How I Would Learn Cyber Security If I Could Start Over Want to learn all about cyber-security and become an ethical hacker? His thoughts on the basics and fundamentals is so right on. Networking, User or Desktop support, Server maintenance, whatever. I firmly believe that the best security people started in IT originally. Experience on Read More …
LazyOwn: CRIMEN
For offensive security experts, LazyOwn: CRIMEN is an advanced, Python-based framework meticulously designed to streamline and automate complex penetration testing and vulnerability analysis tasks, particularly for red team operations. Far more than a simple collection of scripts, LazyOwn aims to be a comprehensive toolkit, integrating a vast array of functionalities to mimic sophisticated cyber adversaries. Read More …
Hacker TV – Start Web App Pentesting
Looking to step up your web app pentesting and bug bounty skills? In this video, Alex from TCM Security walks you through some of the best FREE tools and resources to help you sharpen your AppSec knowledge and techniques. Whether you’re just starting out or looking to boost your skill set, these tools are must-haves!
hacker TV – Understanding buffer overflow exploitation
The fascinating interplay of CPU, stack, C-compiler and shellcode in a nutshell Everything started with Aleph One’s paper “Smashing the Stack for Fun and Profit”. These techniques are still the basis for modern exploitation of buffer, heap and format string vulnerabilities. We will give a swift overview about C functions, stack usage, assembler, gcc, gdb Read More …