ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
GitHub

Challenge Lab 1 MEDTECH.txt

Challenge Lab 1: MEDTECH: You have been tasked to conduct a penetration test for MEDTECH, a recently formed IoT healthcare startup. Your objective is to find as many vulnerabilities and ...
Linux Journal

Hacking Made Easy: A Beginner's Guide to Penetration Testing with Kali Linux

Penetration testing, often referred to as pen testing, is a critical practice in the field of cybersecurity. It involves simulating cyber-attacks on a system, network, or web application to identify ...
GitHub

Pentest TeamCity using Metasploit

This is a comment from the vendor (JetBrains TeamCity team) by Yegor Yarko: Majority of the content of the article describes how malicious users can abuse TeamCity if they are rightfully granted ...