2018-12-20 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #3: Learn to be Self-Reliant and to Prioritize What is Most Important
   School, work, government, and other systems have their own agendas, and their own flaws. They will be happy to tell you where to go and what to learn, but at some point you have to decide for yourself what is truly important to know.
   
   School focuses on learning math, science, and history, among other topics, but what about learning why those topics are important? They often don’t focus on the why, as much as they ask you to simply memorize facts. Survival skills are rarely taught in school, but this is another example of something that could be quite useful to learn. The point here is you need to decide for yourself what is important. Ask what you would teach if you were in charge of the school system. There is no excuse to be passive and let your education slip past you. Take those important topics and learn them for yourself.
   
   Be aware that often times in modern society, trivial things are talked about on and on as if they are important, and truly important things like world issues are rarely discussed in any deep way. Intelligent people tend to strive to find something meaningful and important to them, and they will focus on this instead of trivial issues.



NASA suffers data breach – Staff’s personal data stolen

NASA suffers data breach – Staff’s personal data stolen


#hackerstuff #HackThePlanet


Here is a list of top 25 worst passwords of 2018

Here is a list of top 25 worst passwords of 2018


#hackerstuff #HackThePlanet


Acunetix Vulnerability Scanner For Linux Now Available

Acunetix Vulnerability Scanner For Linux Now Available


#hackerstuff #HackThePlanet


MD5 instant collisions of any JPG, PNG, PDF, MP4…
https://github.com/corkami/pocs/blob/master/collisions/README.md
#hackerstuff #HackThePlanet


Another sanboxescaper 0day – by @evil_polar_bear
https://sandboxescaper.blogspot.com/2018/12/readfile-0day.html
#hackerstuff #HackThePlanet


@Amazon reveals private Alexa voice data files
https://www.heise.de/newsticker/meldung/Amazon-reveals-private-voice-data-files-4256015.html
#hackerstuff #HackThePlanet


@Amazon’s R&D lab in Kiev processing Ring’s footage
https://threader.app/thread/1075500901115154432
#hackerstuff #HackThePlanet


Advisory | MailCleaner Community Edition Remote Code Execution

Advisory | MailCleaner Community Edition Remote Code Execution


#hackerstuff #HackThePlanet


Binary Exploitation – Buffer Overflow Explained in Detail
https://0xrick.github.io/BinaryExploitation-BOF/
#hackerstuff #HackThePlanet


Project Zero: Searching statically-linked vulnerable library functions in executable code
https://googleprojectzero.blogspot.com/2018/12/searching-statically-linked-vulnerable.html
#hackerstuff #HackThePlanet


Security Controls at DoD Facilities for Protecting Ballistic Missile Defense System – Technical Information
https://media.defense.gov/2018/Dec/14/2002072642/-1/-1/1/DODIG-2019-034.PDF
#hackerstuff #HackThePlanet


RDP Man-in-the-Middle – Smile! You’re on Camera

RDP Man-in-the-Middle – Smile! You’re on Camera


#hackerstuff #HackThePlanet


You’re Not the Customer
https://ericalexander.org/posts/youre-not-the-customer/
#hackerstuff #HackThePlanet


2018-12-19 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #2: Learn From Multiple Formats or Methods
   It is true that people learn in different ways. Some learn better through reading, others through listening, seeing or doing. When learning something new, it is a good idea to start with one method of learning, perhaps your favorite first. When you come across a barrier where you don’t understand, try another way. Keep doing this until you make progress and finally understand. Even just with the Internet you can use books, Wikipedia, YouTube, and free Open Courseware. You will learn more quickly and holistically through multiple sources. Understand that the real world will not allow you to choose how to learn from it. At work you may be asked to attend conferences or to read some material. Either way, you will be expected to learn even if it isn’t your preferred way.



Mayday! NASA Warns Employees of Personal Information Breach
https://thehackernews.com/2018/12/nasa-hack-data-breach.html
#hackerstuff #HackThePlanet


Intel VISA: Through the Rabbit Hole
https://www.blackhat.com/asia-19/briefings/schedule/index.html#intel-visa-through-the-rabbit-hole-13513
#hackerstuff #HackThePlanet


Pure In-Memory (Shell)Code Injection In Linux Userland
https://blog.sektor7.net/#!res/2018/pure-in-memory-linux.md
#hackerstuff #HackThePlanet


Happy 16shop hunting
https://hackmd.io/s/HJ4AOzDlE
#hackerstuff #HackThePlanet


The 2018 SANS holiday hack challenge – KringleCon
https://www.kringlecon.com/
#hackerstuff #HackThePlanet


2018-12-18 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Today’s Principle to Follow:
Principle #1: Don’t make assumptions
   To see things as they are, avoid assuming that you know what someone is thinking, or that you know their motivations. You may have clues or ideas, but you should avoid making assumptions until you have enough information to be sure you know what is really happening. Assumptions will make you feel like a fool when you are wrong. They will also be a waste of precious brain power, as you will often analyze something that is based on a faulty assumption. If you do that, you will waste more time and resources. Focus your attention elsewhere and you will be more productive. If something is important, be direct and find out what you need to know, rather than assuming.



Twitter Discloses Suspected State-Sponsored Attack After Minor Data Breach
https://thehackernews.com/2018/12/twitter-data-breach.html
#hackerstuff #HackThePlanet


New Malware Takes Commands From Memes Posted On Twitter
https://thehackernews.com/2018/12/malware-twitter-meme.html
#hackerstuff #HackThePlanet


Everything you should know about certificates and PKI but are too afraid to ask
https://smallstep.com/blog/everything-pki.html
#hackerstuff #HackThePlanet


Hidden directories and files as a source of sensitive information about web application
https://medium.com/@_bl4de/hidden-directories-and-files-as-a-source-of-sensitive-information-about-web-application-84e5c534e5ad
#hackerstuff #HackThePlanet


Reading ASP secrets for $17,000

Reading ASP secrets for $17,000


#hackerstuff #HackThePlanet


Interactive Beginner’s Guide to ROP
https://bordplate.no/blog/en/post/interactive-rop-tutorial/
#hackerstuff #HackThePlanet


How to Make a Captive Portal of Death
https://trevphil.com/posts/captive-portal
#hackerstuff #HackThePlanet


2018-12-17 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI

Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI


#hackerstuff #HackThePlanet


Acoustic Audio Patterns Could Be Giving Away Your Passwords, Learned by Neural Nets

Why Neural Networks Mean That Your Password is Worthless


#hackerstuff #HackThePlanet


Pass-the-Cache to Domain Compromise
https://medium.com/@jamie.shaw/pass-the-cache-to-domain-compromise-320b6e2ff7da
#hackerstuff #HackThePlanet


Wicked scammers steal $1 million from Save the Children charity

Wicked scammers steal $1 million from Save the Children charity


#hackerstuff #HackThePlanet


The Practical Guide to Hacking Bluetooth Low Energy
https://blog.attify.com/the-practical-guide-to-hacking-bluetooth-low-energy/
#hackerstuff #HackThePlanet


Hack The Box – Waldo write-up by 0xRick
https://0xrick.github.io/HackTheBox-Waldo/
#hackerstuff #HackThePlanet


Tutorial: Build a lane detector
https://towardsdatascience.com/tutorial-build-a-lane-detector-679fd8953132
#hackerstuff #HackThePlanet


2018-12-14 News Feed

Categories Hacker Shit, News Feed Stuff, Random Musings, Security Stuff, Stuff To Learn

DEF CON 27 Theme!
https://defcon.org/html/links/dc-news.html#dc27theme
#hackerstuff #HackThePlanet #DEFCON27


How I got a $3k bug bounty from Twitter

$3k Bug Bounty – Twitter’s OAuth Mistakes


#hackerstuff #HackThePlanet


Exploiting XXE with local DTD files
https://mohemiv.com/all/exploiting-xxe-with-local-dtd-files/
#hackerstuff #HackThePlanet


Binder Transactions in the Bowels of the Linux Kernel
https://www.synacktiv.com/posts/systems/binder-transactions-in-the-bowels-of-the-linux-kernel.html
#hackerstuff #HackThePlanet


Hackers are Modern Witches
(Very odd analogy, but interesting read)

Hackers are Modern Witches


#hackerstuff #HackThePlanet