#ethical-hacking — Public Fediverse posts

THE OPEN-SOURCE ANTIVIRUS POWERED BY COMMUNITY SECURITY 🛡️

#ClamAV #OpenSource #CyberSecurity #Antivirus #Malware #YARA #ThreatDetection #InformationSecurity #Linux #Windows #macOS #EthicalHacking #TechTools #TechNews #ArtestoMellivoura

THE OPEN-SOURCE ANTIVIRUS POWERED BY COMMUNITY SECURITY 🛡️

#ClamAV #OpenSource #CyberSecurity #Antivirus #Malware #YARA #ThreatDetection #InformationSecurity #Linux #Windows #macOS #EthicalHacking #TechTools #TechNews #ArtestoMellivoura

Comprehensive List of Top 10 Uses for #VPS Servers If you've ever wondered, "what are common use-cases for VPS servers?", you have come to the right place!

We have compiled a list of the ...
Continued 👉 #cloudstorage #vpsservers #gameservers #backup #ethicalhacking #scalability #vpnhosting

Comprehensive List of Top 10 U...

Caido v0.57.1 released

https://secburg.com/posts/caido-v0571-released/

#Caido #EthicalHacking #CyberSecurity #WebSecurity #InfoSec #PenTesting

Neue HiWay Podcast-Folge: „Bester Pentester Deutschlands: Vom Capture the Flag zum echten Pentesting-Auftrag" https://youtu.be/0Qv1Ronb96I
Bester Pentester Deutschlands und der Weg dahin lief nicht über einen Lehrplan. Cass Rebbelin wurde beim Talentwettbewerb des NIS-2-Congress ausgezeichnet, angetrieben vor allem von Neugier: der Frage, wie Systeme funktionieren und wo ihre Lücken liegen. Im Gespräch mit Lena Morgenroth geht es um Capture-the-Flag-Wettbewerbe, um den Moment, in dem aus dem Spiel Ernst wird, und darum, was der Berufsalltag als Pentester verlangt, worauf einen kein Zertifikat vorbereitet.
YouTube: https://youtu.be/0Qv1Ronb96I
Spotify: https://open.spotify.com/show/6FwPurxOj5ND2H7UcVizA4
Apple: https://podcasts.apple.com/us/podcast/hiway-wegweiser-f%C3%BCr-digitalisierung-und-sicherheit/id1789738836

Moderierte Expertentalks zu Themen, Trends & Herausforderungen aus
✔️ Cybersecurity
✔️ Digitale Transformation
✔️ Business Continuity & Krisenmanagement
✔️ IT-Management
✔️ Regulatorik, Compliance & Governance

Die nächste HiWay-Folge erscheint am 22. Juli.

#pentesting #cybersecurity #capturetheflag #ethicalhacking #HiWayPodcast

Neue HiWay Podcast-Folge: „Bester Pentester Deutschlands: Vom Capture the Flag zum echten Pentesting-Auftrag" https://youtu.be/0Qv1Ronb96I
Bester Pentester Deutschlands und der Weg dahin lief nicht über einen Lehrplan. Cass Rebbelin wurde beim Talentwettbewerb des NIS-2-Congress ausgezeichnet, angetrieben vor allem von Neugier: der Frage, wie Systeme funktionieren und wo ihre Lücken liegen. Im Gespräch mit Lena Morgenroth geht es um Capture-the-Flag-Wettbewerbe, um den Moment, in dem aus dem Spiel Ernst wird, und darum, was der Berufsalltag als Pentester verlangt, worauf einen kein Zertifikat vorbereitet.
YouTube: https://youtu.be/0Qv1Ronb96I
Spotify: https://open.spotify.com/show/6FwPurxOj5ND2H7UcVizA4
Apple: https://podcasts.apple.com/us/podcast/hiway-wegweiser-f%C3%BCr-digitalisierung-und-sicherheit/id1789738836

Moderierte Expertentalks zu Themen, Trends & Herausforderungen aus
✔️ Cybersecurity
✔️ Digitale Transformation
✔️ Business Continuity & Krisenmanagement
✔️ IT-Management
✔️ Regulatorik, Compliance & Governance

Die nächste HiWay-Folge erscheint am 22. Juli.

#pentesting #cybersecurity #capturetheflag #ethicalhacking #HiWayPodcast

Comprehensive List of Top 10 Uses for #VPS Servers If you've ever wondered, "what are common use-cases for VPS servers?", you have come to the right place!

We have compiled a list of the top 10 uses for VPS servers, as observed by Rad Web Hosting staff, during the course of providing VPS hosting services since 2015.

It should be noted that this compilation is not ...
Continued 👉 https://blog.radwebhosting.com/top-10-uses-for-vps-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #cloudstorage #scalability #backup #vpnhosting #gameservers #vpsservers #ethicalhacking

Comprehensive List of Top 10 Uses for #VPS Servers If you've ever wondered, "what are common use-cases for VPS servers?", you have come to the right place!

We have compiled a list of the top 10 uses for VPS servers, as observed by Rad Web Hosting staff, during the course of providing VPS hosting services since 2015.

It should be noted that this compilation is not ...
Continued 👉 https://blog.radwebhosting.com/top-10-uses-for-vps-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #vpnhosting #gameservers #backup #cloudstorage #scalability #vpsservers #ethicalhacking

Active Directory Pentest Mindmap: Complete Attack Path 🧠

🔥 Telegram: t.me/hackinarticles

The AD Pentest Mindmap is a visual roadmap that helps attackers and defenders understand the full attack lifecycle, from enumeration to domain dominance, in a structured way.

📖 Resource: https://github.com/Ignitetechnologies/Mindmap/tree/main/AD%20Pentest

#ActiveDirectory #RedTeam #Pentesting #CyberSecurity #EthicalHacking #OSCP #InfoSec

Active Directory Pentest Mindmap: Complete Attack Path 🧠

🔥 Telegram: t.me/hackinarticles

The AD Pentest Mindmap is a visual roadmap that helps attackers and defenders understand the full attack lifecycle, from enumeration to domain dominance, in a structured way.

📖 Resource: https://github.com/Ignitetechnologies/Mindmap/tree/main/AD%20Pentest

#ActiveDirectory #RedTeam #Pentesting #CyberSecurity #EthicalHacking #OSCP #InfoSec

#Hello World

Neighbour merupakan Room CTF dari Tryhackme dimana kita memanfaatkan celah kerentanan IDOR untuk dapat mengakses halaman profil administrator.

Baca selengkapnya:
https://analis-siber-purwakarta.blogspot.com/2026/07/tryhackme-neighbour-ctf-challenge-writeup.html

#tryhackme #ctf #cybersecurity #ethicalhacking #websecurity #idor #writeup #infosec #penetrationtesting

Our SQL Injection Scanner is a bit of a skeptic. It won't take a hunch for an answer.

It fires a real payload, watches how the database actually responds, and _only then_ calls it a finding.

It's free to try, and it catches:

✅ Error-based, when the database spills its structure in an error
✅ Blind, when only a true or false response gives it away
✅ Time-based, when a deliberate delay is the only tell
✅ Union-based, when someone's pulling data from tables they shouldn't touch

Every finding comes with the parameter, the payload, and the database response. Enough to reproduce it, not just believe it.

Try it as a test, no account needed. Link is here https://pentest-tools.com/website-vulnerability-scanning/sql-injection-scanner-online

#offensivesecurity #penetrationtesting #ethicalhacking

Our SQL Injection Scanner is a bit of a skeptic. It won't take a hunch for an answer.

It fires a real payload, watches how the database actually responds, and _only then_ calls it a finding.

It's free to try, and it catches:

✅ Error-based, when the database spills its structure in an error
✅ Blind, when only a true or false response gives it away
✅ Time-based, when a deliberate delay is the only tell
✅ Union-based, when someone's pulling data from tables they shouldn't touch

Every finding comes with the parameter, the payload, and the database response. Enough to reproduce it, not just believe it.

Try it as a test, no account needed. Link is here https://pentest-tools.com/website-vulnerability-scanning/sql-injection-scanner-online

#offensivesecurity #penetrationtesting #ethicalhacking

We have an XSS Scanner. It doesn't DO maybes, and on top of that, it's free to try.

Here's what it ACTUALLY does:
✅ Fires real JavaScript payloads, not pattern matches
✅ Flags a parameter only when the payload runs
✅ Catches reflected and stored XSS, logged in or out
✅ Gives you the request, payload, and response as proof

Try it as a test, no account needed. https://pentest-tools.com/website-vulnerability-scanning/xss-scanner-online

#offensivesecurity #penetrationtesting #ethicalhacking

We have an XSS Scanner. It doesn't DO maybes, and on top of that, it's free to try.

Here's what it ACTUALLY does:
✅ Fires real JavaScript payloads, not pattern matches
✅ Flags a parameter only when the payload runs
✅ Catches reflected and stored XSS, logged in or out
✅ Gives you the request, payload, and response as proof

Try it as a test, no account needed. https://pentest-tools.com/website-vulnerability-scanning/xss-scanner-online

#offensivesecurity #penetrationtesting #ethicalhacking

Comprehensive List of Top 10 Uses for #VPS Servers If you've ever wondered, "what are common use-cases for VPS servers?", you have come to the right place!

We have compiled a list of the ...
Continued 👉 #ethicalhacking #vpsservers #vpnhosting #cloudstorage #scalability #backup #gameservers

Comprehensive List of Top 10 U...

Exploitation started in March. Cisco disclosed in June. Patch landed June 10.

For roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it _freely_. Defenders had no advisory, no patch, no signal.

Matei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:

""Whoever used this vulnerability had working knowledge of it in this period while defenders had none.""

🏴‍☠️ The exploitation path is specific: an attacker already holding netadmin privileges on Cisco Catalyst SD-WAN Manager could escalate to root via a crafted CSV upload through the request tenant-upload CLI command.

That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.

From root on the SD-WAN Manager control plane, an attacker can manipulate routing, alter policy enforcement, and reduce network visibility. The architectural placement is what makes root here different from root on a workstation.

The Mandiant (part of Google Cloud) report confirms what experienced practitioners already treat as a working assumption: for high-impact vulnerabilities, in-the-wild exploitation tends to run well ahead of any public disclosure.

If you're running Cisco Catalyst SD-WAN Manager: patch against Cisco's advisory, retain audit logs before upgrading, and review them for anomalous activity from netadmin-level accounts.

📍Read the full article by Kevin Poireault: https://www.infosecurity-magazine.com/news/cisco-vulnerability-exploited/

#vulnerabilityassessment #ethicalhacking #pentesting