HackerOne’s Post

Another great #ctf from #PwnedLabs ! In this walkthrough, we're tasked with accessing sensitive data and demonstrating the extent of impact using an IP address and some AWS Access Keys discovered on a previous engagement. Here are some cool tools and techniques we'll use! ✅ Port scanning with nmap ✅ Website enumeration with gobuster ✅ AWS S3 bucket policy abuse ✅ Password cracking with hashcat 🔗 Link in the description! #aws #awssecurity #cloudsecurity #cybersecurity

The structure of a Uniform Resource Locator (URL) typically consists of several components: 1. **Scheme**: Indicates the protocol used to access the resource (e.g., http, https, ftp). 2. **Authority**: Often includes the domain name (or IP address) and optionally, the port number. 3. **Path**: Specifies the location of the resource within the server's file system. 4. **Query**: Contains additional parameters or data to be passed to the server. 5. **Fragment**: Identifies a specific portion of the resource, usually within an HTML document. Here's an example URL and its components: ``` https://lnkd.in/dGQHxabP ``` - Scheme: `https` - Authority: `www.example.com:8080` - Path: `/path/to/resource` - Query: `?param1=value1&param2=value2` - Fragment: `#fragment` However, it's important to note that not all components are mandatory in every URL, and their presence or absence depends on the specific URL and its intended purpose. #cybercrime #cybersecurity #informationsecurity #intelligence #cybersecuritynews #networksecurity #websecurity #penetrationtesting #pentesting #hacking  #security #cloudsecurity #cloud #cloudcomputing #cloudapplications #cloudcomputing

The risk of cyberattacks can't be avoided! From SQL injection to data loss in the cloud are the potential risks. Explore more about the risk that might come to your data here: https://lnkd.in/gNQ7Wa9h #DataSecurityRisks #DataSecurity #DataPrivacy #CyberSecurity #DataSecurityTips #DataSafety #DataProtection #Fluxgate #FluxgateDigital

Looking for an early warning system for your network? This new "tripwires" feature is part of the tool used in our Managed Autonomous Testing service. It's time to leverage AI and ML as the attackers do!

Today's the day... I'm really excited to announce NodeZero Tripwires! During an Automomous Pentest, NodeZero will automatically deploy HoneyTokens onto hosts and fileshares it was able to compromise, creating an early warning network for our customers Think: While breaking into your house, we install Ring cameras on every open door and window we find. How it works: 1. Select the "Tripwires" Option when configuring a pentest 2. If NodeZero is able to compromise hosts, gain access to fileshares, etc... it will leave behind fake: - AWS Credential files - Azure Login Certificates - Kubeconfig Files - Windows Suspicious Process Monitors - (and many more items that will be shipped in subsequent releases throughout the rest of the year) 3. A real attacker that gains access to your network will discover these tripwires and likely attempt to use them, triggering alerts that will be sent to: - your SOC via webhooks - The new NodeZero alert center - (and soon integrations with your favorite SIEM) Learn more here: https://lnkd.in/gudiUF9B #infosec #cybersecurity #deception #canarytokens Horizon3.ai #aws #azure #kubernetes

🔍 🐝 Why eBPF Matters? We spoke to Jimmy Mesta 🤙, CTO & Co-Founder at RAD Security about why sometimes API calls to your AWS or Azure aren’t enough. 🐝 Beyond APIs: While AWS and Azure provide numerous APIs for users, operators, and security tools, they often fall short in detecting nuanced threats. 🐝 Logs and static configurations can only tell part of the story. Real-World Threats: Take the XZ backdoor, for instance. This wasn't just another CVE or misconfiguration. It involved a suspicious maintainer pushing out malicious code – something not easily detectable through standard API interrogation. 🐝 Deep Monitoring: eBPF shines in monitoring lower-level system calls, allowing for the detection of unexpected behaviors like reverse shells and other anomalies. This deep insight is something APIs alone can’t provide. If you are interested to learn more about eBPF, Kubernetes and Cloud Native Security, Jimmy shared some great points in this episode. Full episode linked in the comments below! #cloudnativesecurity #kubernetessecurity #ebpf

eBPF gives teams deep insight, beyond what APIs alone can provide.

Tonight I got hands on experience with an offensive security tool called Pacu, which is short for "Pentest AWS Cloud With Us." Pacu is a tool focused on identifying security vulnerabilities, misconfigurations, and potential threats within AWS environments. Following along with the lab from Cybr, I was able to enumerate an AWS user account that had a misconfigured IAM Policy which allowed me to escalate the permissions of the user to an inline admin-level policy. This was a fun lab where I got to learn more about IAM policies and why using the principle of least privilege is important. I’m hoping to do a write up soon. #IAM #CloudSecurity #CybersecurityAwarenessMonth

Cactus ransomware targets a handful of Qlik Sense CVEs Security researchers warn the threat group is ramping up exploitation of previously disclosed flaws in the cloud platform. Source: https://lnkd.in/e7-br7DR #cybersecurity #infosec #ethicalhacking #offensivesecurity #informationsecurity #cve #ransomeware #exploit #0day #pentesting #pentest #pentester #breach #databreach

Introducing Mandiant Hunt for Chronicle Security Operations. Announced at #GoogleCloudNext, this new managed threat-hunting service integrates Mandiant’s frontline expertise with Google Cloud tech to proactively search for undetected attacks. #Apigee #ZeroTrust #Bigquery #GenAi #ttec #gcpcloud #googlecloud #googlecloudready #arizona #sanfrancisco #californiabusiness #california #carbonfootprint #sustainabilty #machinelearning #googlecloudnext #googlecloudnext #googlecloudplatform #googleai