The Machine That Cannot Tell Who You Are

TL;DR Researchers at LAVA found 36,872 exposed BMCs on the public internet. Most leaked password-derived hashes before login through CVE-2013-4786, a 20-year-old IPMI 2.0 flaw rated high-severity.…

#Contexte: Betty Jayde works at Nexura LLC. We know she uses the password Texas123!@# on multiple websites, and we believe she may reuse it…

Introduction

Lets deep dive into the HaveIBeenPwned Dataset! (Obligatory: JP taught me most things I know about password cracking ♥️ )

You’ve heard the advice a thousand times: “Use a strong, unique password for every account.” It’s solid advice, but it’s also incomplete…

Lab: TryHackMe — Checkmate

At a Glance Category Details Malware Family Amatera (rebrand of ACR Stealer / AcridRain) Threat Actor Unattributed (overlaps with ErrTraffic Malware-as-a-Service ecosystem) Target or Victims Visit…

At a glance Actor or group Unidentified threat actors Activity type Password spraying Targets or victims AWS root user accounts at 150+ organizations Scale Median of two attempts per target Law-en…

Room: tryhackme.com/room/checkmate