The HAQ.NEWS podcast is brought to you by Jared & Gracie Folkins. It is a daily blog post of information security [tradecraft] tooling news. It's grown into Gracie Folkins reading the [news] daily while Jared Folkins chats with Hackers of all type in the industry, via phone, and with permission he shares the recordings of their conversations. Head over to https://haq.news to learn more!
Language
🇺🇲
Publishing Since
2/8/2024
See how your podcast performs across key metrics
Recommendations available
Unlock the full report to see detailed tips
Unlock comprehensive insights including:
See how your show performs across every key metric
High authority scores make your podcast more attractive to industry leaders and influencers who want to appear on credible shows.
Sponsors look for podcasts with proven authority and engagement. Your score demonstrates your podcast's value to potential partners.
Understanding your strengths and weaknesses helps you make data-driven decisions to expand your listener base effectively.
Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.
April 18, 2024
<div data-contents="true"> <div data-rbd-draggable-context-id="0" data-rbd-draggable-id= "fc0fv"> <div class="" data-block="true" data-editor="62tv6" data-offset-key="fc0fv-0-0"> <div class= "public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="fc0fv-0-0"><span data-offset-key= "fc0fv-0-0"><span data-text="true">Hey!<br /> <br /> The other day I gave my good friend HackerFantastic</span></span> <span data-offset-key="fc0fv-2-0"><span data-text="true">call. We chatted a bit about his family and he also dropped a sweet war story. You should give it a listen! </span></span></div> </div> </div> <div data-rbd-draggable-context-id="0" data-rbd-draggable-id= "2eh35"> <div class="" data-block="true" data-editor="62tv6" data-offset-key="2eh35-0-0"> <div class= "public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="2eh35-0-0"><span data-offset-key= "2eh35-0-0"> <br /> <a href= "https://twitter.com/hackerfantastic">https://twitter.com/hackerfantastic</a><br /> <br /></span></div> <div class= "public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="2eh35-0-0"><span data-offset-key= "2eh35-0-0"><a href= "https://hacker.house/">https://hacker.house/</a><br /> <br /></span></div> </div> </div> <div data-rbd-draggable-context-id="0" data-rbd-draggable-id= "229mf"> <div class="" data-block="true" data-editor="62tv6" data-offset-key="229mf-0-0"> <div class= "public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="229mf-0-0"><span data-offset-key= "229mf-0-0"><span data-text="true">ps don't forget my daughter & I created a fun challenge where you can win a laptop.<br /> <br /> details -></span></span> <span style= "color: rgb(29, 155, 240);"><span data-offset-key= "229mf-1-0"><span data-text="true"><a href= "https://haq.news/2024/04/12/">https://haq.news/2024/04/12/</a><br /> <br /> <br /></span></span></span></div> <div class= "public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="229mf-0-0"> </div> </div> </div> </div>
April 12, 2024
<p>A <strong>cybersecurity</strong> researcher, k0shl, discussed methods for exploiting a <strong>Windows telephony</strong> service issue, which could control memory wrongly. A malware called <strong>Nitrogen</strong> tricks users into downloading fake apps leading to <strong>ransomware</strong> but can be prevented with various strategies. On <strong>Reddit</strong>, there’s talk about the dangers of batch files in <strong>Windows</strong> due to argument escaping issues. The <strong>C2 Cloud</strong> project lets testers control compromised systems efficiently. A <strong>Proof of Concept</strong> showed a flaw in <strong>Jasmin Ransomware’s</strong> web panel, allowing unauthorized file access. Carlos Polop’s <strong>guide</strong> covers penetration testing extensively. Use Countik, an online tool, for analyzing <strong>TikTok</strong> accounts. An article guides on <strong>OSINT</strong> for map investigations. <strong>Shortemall</strong> v3.0, released on April 5, 2024, scans for hidden content in short URLs.</p>
April 11, 2024
<p>A <strong>cybersecurity researcher</strong> shares techniques for crafting <strong>XSS payloads</strong> through JavaScript event handlers and HTML entities to <strong>bypass WAFs.</strong> The <strong>SiCat</strong> tool hunts for security <strong>exploits</strong> using sources including databases like <strong>Exploit-DB</strong>. There’s a case study of a hacked <strong>Confluence server</strong> outlining the intruder’s steps, utilizing <strong>Unix logs</strong> and <strong>SSH brute force</strong> tactics. <strong>Shortemall</strong> automates finding content behind <strong>Short URLs</strong>, while <strong>Damn Vulnerable RESTaurant</strong> exists for training on <strong>API vulnerabilities</strong>. Techniques for <strong>XSS attacks</strong> by modifying code to <strong>evade filters</strong> are discussed. <strong>OSINT</strong> helps in phishing <strong>scams prevention</strong> and probes. <strong>Linux by Vikku</strong> offers resources for bug bounty <strong>hunters</strong>. A <strong>SQL injection</strong> flaw in <strong>WordPress LayerSlider</strong> plugin is exposed with given <strong>detection tools</strong>. Tactics to set up <strong>rogue access points</strong> for Wi-Fi tests using <strong>Fluxion</strong> are shared. A study plan for <strong>AWS security mastery</strong> is outlined. <strong>Chimera</strong> is a PowerShell <strong>obfuscation tool</strong> to avoid <strong>AMSI</strong> and antivirus detection. <strong>A-poc/RedTeam-Tools</strong> repository features red team tools and tips. The personal security checklist advises on <strong>digital life security</strong> in various aspects. <strong>APKHunt</strong> checks Android apps against <strong>OWASP MASVS</strong>. <strong>Scanners Box</strong> offers a kit of infosec <strong>scanning tools</strong>. <strong>OpenCodeInterpreter</strong> rivals <strong>GPT-4</strong> in code abilities, topping the BigCode leaderboard. <strong>Map Developers</strong> and <strong>Google Maps Scraper</strong> aid in business data collection. <strong>Keyhole</strong> carries out social media analytics. <strong>HAR files</strong> help analyze network issues. <strong>creepyCrawler</strong> is an OSINT tool for site reconnaissance. <strong>PretendoNetwork’s SSSL</strong> patches Nintendo CA - G3. <strong>KDMapper</strong> uses <strong>Intel driver</strong> to load non-signed drivers. <strong>GhostMapperUM</strong> maps an unsigned driver into memory. <strong>GMER</strong> handles Windows <strong>kernel rootkits</strong>. <strong>EDRSandblast</strong> evades <strong>EDR systems</strong>. <strong>Plandex</strong> offers an AI coding engine aiding in software tasks. Memory dump emulation tools like <strong>Bochs</strong> assist in crash analysis and forensics. <strong>wtf</strong> is a Windows snapshot-based fuzzer by Axel Souchet. Using <strong>Ghidra</strong> for analyzing ARM firmware in <strong>KatWalk C2 treadmill</strong> is elaborated. The KAT Walk C2 VR Treadmill’s set-up and usage are described. Constructing an <strong>8-bit computer</strong> with 74xx ICs and an <strong>Ethernet adapter</strong> for networking. Ivan builds a discrete logic <strong>CPU</strong> and <strong>programming language</strong>. Upgrading a discrete logic <strong>ALU</strong> for improved computer performance. <strong>Reverst</strong> serves as a reverse-tunnel library using <strong>QUIC</strong> and <strong>HTTP/3</strong> for restricted network services.</p>
Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.
The HAQ.NEWS podcast is brought to you by Jared & Gracie Folkins. It is a daily blog post of information security [tradecraft] tooling news. It's grown into Gracie Folkins reading the [news] daily while Jared Folkins chats with Hackers of all type in the industry, via phone, and with permission he shares the recordings of their conversations.
Head over to https://haq.news to learn more!
This podcast updates daily.
This podcast is available on 6 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
Yes, this podcast regularly features guests.
Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.
All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.
We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.
While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.
By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.