Hacking Articles
Pickle Rick TryHackMe Walkthrough

Today it is time to solve another challenge called “Pickle Rick”. It is available at TryHackMe for penetration testing practice. The challenge is of easy difficulty if you have the right basic knowledge and are attentive to little details that are required in the enumeration process. The credit for making

The post Pickle Rick TryHackMe Walkthrough appeared first on Hacking Articles.

SUBDOMAIN TAKEOVER FOR BUG BOUNTY

hey guys hackingcage is here, welcome to back again another post. A subdomain takeover is taken into account a high severity threat and…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Turn the Tables: Supply Chain Defense Needs Some Offense, Fortinet Says

SPONSORED CONTENT: Watch now -- While the SolarWinds hack put fresh attention on supply chain vulnerabilities, Derek Manky of Fortinet's Fortiguard Labs suggests dismantling cybercriminals' own supply chains.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password

https://1.bp.blogspot.com/-f4oyhWKFA1s/YKrvgLQ2UwI/AAAAAAAAWQo/9Kwg97He3o8Mk1oT4UGRoGvpLa53iHJQgCNcBGAsYHQ/w640-h322/Apache%2BSolr.png
Steal Apache Solr instance Queries with or without a username and password.

DISCLAIMER: This project should be used for authorized testing and educational purposes only.
Download

git clone https://github.com/GnosticPlayers/Solr-GRAB


Usage

You can search for Apache Solr Instances via Censys, with the dork "Welcome To Solr"or "Apache Solr Admin". To grab queries, simply go to the http access point, sometimes being on port 80, 443 or 8080.

* Replace "http://URLHERE/" with a desired URL, such as "http://127.0.0.1/".
* Replace "PROJECTHERE/" with a desired project entry, such as a directory "users/".
* Replace "IDHERE" with an ID that is unique per entry in JSON on the apache solr query, such as "id"or "global_id".
* Lastly, replace "AMOUNTOFROWSHERE" with the amount of rows found in the query, such as "74332".

Now execute it with: bash index.sh.

Sometimes, you'll have an error where it's a 404 not found. If that's the case, add "/solr/"between "http://URLHERE/"& "PROJECTHERE", such as: https://127.0.0.1/solr/users/. This should fix the problem.

Author & Credits

Written by GnosticPlayers & g9648

g9648

Email: g9648@riseup.net

Gnostic Contacts

Email: dreammarket@riseup.net
Download Solr-GRAB

___________________________
@hacking_Attack
@Hacking_Video

Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password
http://www.kitploit.com/2021/05/solr-grab-steal-apache-solr-instance.html

Steal Apache (https://www.kitploit.com/search/label/Apache) Solr instance Queries with or without a username and password. DISCLAIMER: This project should be used for authorized testing (https://www.kitploit.com/search/label/Testing) and educational purposes only.
Download
git clone https://github.com/GnosticPlayers/Solr-GRAB

Usage
You can search for Apache Solr Instances via Censys, with the dork (https://www.kitploit.com/search/label/Dork) "Welcome To Solr" or "Apache Solr Admin". To grab queries, simply go to the http access (https://www.kitploit.com/search/label/Access) point, sometimes being on port 80, 443 or 8080. Replace "http://URLHERE/ (http://urlhere/)" with a desired URL, such as "http://127.0.0.1/". Replace "PROJECTHERE/" with a desired project entry, such as a directory "users/". Replace "IDHERE" with an ID that is unique per entry in JSON (https://www.kitploit.com/search/label/JSON) on the apache solr query, such as "id" or "global_id". Lastly, replace "AMOUNTOFROWSHERE" with the amount of rows found in the query, such as "74332". Now execute it with: bash index.sh. Sometimes, you'll have an error where it's a 404 not found. If that's the case, add "/solr/" between "http://URLHERE/" & "PROJECTHERE", such as: https://127.0.0.1/solr/users/. This should fix the problem.
Author & Credits
Written by GnosticPlayers & g9648
g9648
Email: g9648@riseup.net (mailto:g9648@riseup.net)
Gnostic Contacts
Email: dreammarket@riseup.net (mailto:dreammarket@riseup.net)

Download Solr-GRAB (https://github.com/GnosticPlayers/Solr-GRAB)

hacking: security in practice
phone

can anyone try to hack into my phone i wanna know its secure enough and what you can see when you hack it

submitted by /u/Head-Suit-2756
[link] [comments]

hacking: security in practice
Got multiple texts regarding password resets at 4:30 this morning - what should I do?

I hope this is the right place to ask, apologies in advance if it isn't.

I got multiple texts at 4:30am this morning regarding 2FA codes for resetting passwords of multiple different accounts of mine... This ever happened to anyone else?

I reckon someone got their hands on my info...

I'm pretty sure all my stuff is safe because they wouldn't have been able to get into my accounts, but it's still strange all the same, and kinda annoying as I had 5 calls this morning from random businesses (only one of which I actually picked up - a Citroen dealership which isn't even near where I live 😂).

submitted by /u/Hydra822
[link] [comments]

Hacking on Medium
Cybersecurity trends for 2021

https://cdn-images-1.medium.com/max/1500/1*7sfG__VJcrIwPUVO4EFH6w.png
2020 has been a year that everyone, everywhere in the world, will remember forever, a year in which all aspects of our lives have been…

Continue reading on edataconsulting »

Hacking on Medium
SUBDOMAIN TAKEOVER FOR BUG BOUNTY

hey guys hackingcage is here, welcome to back again another post. A subdomain takeover is taken into account a high severity threat and…

Continue reading on Medium »

Hacking on Medium
Fake Copyright Infringement Warnings with Googlesites URL being Used to Spread Ransomware

https://cdn-images-1.medium.com/max/1054/1*r3gIIpJQpCsmoft_pV9TzQ.png
Ransomwares can be dreadful. It is one of the topics that gives sleepless nights to many businesses. A ransomware attack can lead to huge…

Continue reading on Medium »

Hacking on Medium
Intro to IOT Hardware Hacking

https://cdn-images-1.medium.com/max/600/0*h6B7h67o4tMDXEB4.jpeg
When we talk about hardware hacking — we have physical device as attack surface, we have embedded devices to pentest on, One may try to…

Continue reading on Medium »