After having compromised on-premise for many years, there is now also the cloud! Now your configuration mistakes can be accessed by anyone on the internet, without that fancy next-gen firewall saving you. With this talk I’ll share my current research on Azure privileges, vulnerabilities and what attackers can do once they gain access to your cloud, or how they can abuse your on-premise cloud components. We start with becoming Domain Admin by compromising Azure AD Sync, sync vulnerabilities that allow for Azure admin account takeover and insecure Single Sign On configurations. Up next is cloud roles and privileges, backdooring Azure AD with service accounts, escalating privileges as limited admin and getting past MFA without touching someone's phone. Then we finish with cloud integrations, also known as "how a developer can destroy your whole infrastructure with a single commit": Exploring Azure DevOps, backdooring build pipelines, dumping credentials and compromising Azure Resource Manager through connected services.…

Cross-origin Resource Sharing (CORS). Certain "cross-domain" requests, notably Ajax requests, are forbidden by default by the same-origin security policy.

https://www.meetup.com/ru-RU/OWASP-Moscow/events/266925142/

Спецификация устанавливает нормы, которым должны соответствовать NFC-устройства для приема оплаты.

Fast web fuzzer written in Go. Contribute to ffuf/ffuf development by creating an account on GitHub.

Sync Stop, USB Condoms, Xipiter, phone Charging Station, USB Cables, Juice Jacking, accidental syncing, phone malware, charge only cable, prevent phone data theft, iphone, ios, android, blackberry

По мере того, как нам все активнее закрывают доступ к различным ресурсам в сети, все актуальнее становится вопрос обхода блокировок, а значит все актуальнее стан...

00:55 - Start of recon02:30 - Running GoBuster to discover the /monitoring directory03:50 - Running hydra to try to brute force the HTTP Authentication (Does...

Счас вы будете громко ржать. Я уже пара раз писал о бывшем муже Натальи Касперской, Евгении, владельце Kaspersky Lab и его успехе в США. Тогда мне в каменты прибежала уйма умников, которые рассказывали, как успешно идут дела у Касперского. Не знаю насчет него, но вот насчет его бывшей жены, тоже…

Use HTTP Smuggling Lab to learn HTTP Smuggling. Contribute to ZeddYu/HTTP-Smuggling-Lab development by creating an account on GitHub.

What operating system do hackers use for ethical hacking, pentesting, ...?

Gynvael's Windows Setup: https://www.youtube.com/watch?v=OHGysGcRFFI
Gynvael's English Channel: https://www.youtube.com/user/GynvaelEN
Digital Ocean*: https://m.do.co/c/826f195e2288

-=[ 🔴 Stuff I use ]=-

→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/…

In this video I just want to explain how to approach CTFs for learning. It's not about solving challenges and not about winning.

CTFtime: https://ctftime.org/
What is CTF? An introduction to security Capture The Flag competitions: https://www.youtube.com/watch?v=8ev9ZX9J45A

-=[ 🔴 Stuff I use ]=-

→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.f…

Безопасность СмартТВ — дело важное, даже ФБР рассказывает, что нужно делать по этому поводу и как обезопаситься от этого гаджета, и встроенных в телевизоры микрофонов, камер и проч.
https://www.fbi.gov/contact-us/field-offices/portland/news/press-releases/tech-tuesdaysmart-tvs/layout_view

Windows 10 UAC bypass for all executable files which are autoelevate true .  - sailay1996/UAC_Bypass_In_The_Wild

Tracking/Exposing America’s Most Wanted Using OSINT (Part 1)

an implant w/ remote download & in-memory execution

С течением времени появляется все больше защитных технологий, из-за которых хакерам приходится туже затягивать пояса. Однако у этой медали две стороны: защитные...