hacking: security in practice
pwninit fails to detect glibc version

I am using pwninit 3.3.0 on Kali Linux for binary exploitation. When I run pwninit it gives an error that it cannot find the version string from libc. However when I run libc.so.6, it prints the version details as it should.

submitted by /u/w3mk
[link] [comments]

hacking: security in practice
Theoretically hacking various dating apps

This was just a hypothetical that popped into my head, lots of options here. A hacker could do any number of things like gaining people's personal information , but I was thinking it would be funny to match people with terrible profiles. What type of security do places like insert dating app here. Again, purely a post for lols 😆

submitted by /u/p8ntbrush
[link] [comments]

hacking: security in practice
PwnAssistant - Controlling /home’s via a Home Assistant RCE

submitted by /u/thinkV
[link] [comments]

hacking: security in practice
Just got a phishing email from Coinbase to steal login, who’s up for lulz?

submitted by /u/odinspath
[link] [comments]

hacking: security in practice
Recs for Windows Machine to Run Labs On?

Hi, All,

I've been screwing around with web design for a bit and recently, for fun, have been starting to get into security and hacking. I've been using a Macbook M1 and have found that it's a pain to setup VMs due to compatibility issues with various hypervisors and on top of that, a cool sounding web app security course I recently got on TCM for $1 seems to be pretty much entirely Windows-oriented.

For the most part, I've been able to find workarounds for this and that (VMWare instead of Virtual Box, etc.) but at this point, I'm basically spending more time reading forums and watching YouTube videos than on the course itself and I think I've hit a bit of a wall with some of the lab setups, plus, I only have 8GB of RAM anyway...

Sorry, I'll cut to the chase - I'm basically looking to build a Windows PC with a boatload of RAM without spending more than $1k, which should be doable. I'm not a gamer whatsoever, so this machine will be pretty much entirely dedicated towards amateur dev work and virtual hacking labs.

If anyone has any general recommendations, whether it be rules of thumb or specific parts/brands to look out for, please let me know. Any advice here would be awesome!

I tried posting this in the build a pc sub, but it kept getting taken down immediately.

Thanks, folks.

submitted by /u/DanGleenutz
[link] [comments]

Dark Reading: Attacks/Breaches
How Boards Can Set Enforceable Cyber Risk Tolerance Levels

Boards love to say they have low risk tolerance, but are they willing to make the expensive and painful decisions to make it truly happen?

CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI
https://infosecwriteups.com/cve-2022-26180-qdpm-9-2-csrf-vulnerability-in-index-php-myaccount-update-uri-8f84a4dfc140?source=rss------bug_bounty-5

Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/cve-2022-26180-qdpm-9-2-csrf-vulnerability-in-index-php-myaccount-update-uri-8f84a4dfc140?source=rss------bug_bounty-5)

CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI

Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
CVE-2022–26180:qdPM 9.2 CSRF Vulnerability in index.php/myAccount/update URI

https://cdn-images-1.medium.com/max/1344/1*OF8P8WIigJNmxoFPEZlU9A.jpeg
Unauthorized actions can be performed on behalf of authenticated users, compromising the security of qdPM 9.2

Continue reading on InfoSec Write-ups »

Hacking on Medium
อะไรคือ Local File Inclusion (LFI)

https://cdn-images-1.medium.com/max/680/0*AKm-1kLjtiD3AngH.png
LFI

Continue reading on SnoopBees »

Hacking on Medium
5 Tips for Secure Coding in Python

https://cdn-images-1.medium.com/max/2240/1*YKo2B1Pj9f5bu9hytUegIA.png
Python is a widely used programming language, known for its simplicity, readability, and ease of use. While Python has many benefits, it’s…

Continue reading on Medium »