Hacking on Medium
Eclipse Attacks: Safeguarding Bug Bounty Programs with Effective Countermeasures | 2023

https://cdn-images-1.medium.com/max/1280/0*hNrfnCm_Rxsrd25i
Shielding Bug Bounty Programs from Eclipse Attacks: A Guide for Secure Collaboration | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
[HTB] Previse 靶機 Write-Up

https://cdn-images-1.medium.com/max/1125/1*zsgL956RZ7ZVUrdLckE_NQ.png
Hack The Box Previse machine Write-Up

Continue reading on 璿的筆記 »

Hacking on Medium
Input Validation Mechanisms

https://cdn-images-1.medium.com/max/600/0*GTVVX5lo1vP4phja.png
Input validation is something that is used to limit the user input for attaining just the required functionality through input testing…

Continue reading on Medium »

Hacking on Medium
Can Someone Hack Into Your Phone by Calling You

https://cdn-images-1.medium.com/max/1024/1*pOfk7YYCiqVtNR2aCRM56g.jpeg
The thought of someone hacking into your phone may send shivers down your spine. But unfortunately, this is a reality for many people. So…

Continue reading on Medium »

Hacking on Medium
Books You Need to Read

https://cdn-images-1.medium.com/max/600/1*_Gf8TFs9xoZoHEBnQceBRQ.jpeg
The Psychology of Money: Unraveling the Emotional Relationship with Finances

Continue reading on Medium »

Hacking on Medium
Whitelisting & Blacklisting

https://cdn-images-1.medium.com/max/600/0*trhHSgxnI9ogXRSk.png
Certified Appsec Practitioner (CAP) — Study Notes

Continue reading on Medium »

Frontrunning in Reorgs
https://hatsfinance.medium.com/frontrunning-in-reorgs-7eb41e4f8f2b?source=rss------bug_bounty-5

A low severity bug report, and the importance of bug bounty programs for continuous security.Continue reading on Medium » (https://hatsfinance.medium.com/frontrunning-in-reorgs-7eb41e4f8f2b?source=rss------bug_bounty-5)

XSS Via Qr Code
https://medium.com/@A0g/xss-via-qr-code-8022a1a0309f?source=rss------bug_bounty-5

Hi Al Salam Alykum, it’s a simple XSS but with a unexpected vulnerable point, i hope the write-up is clear, if not ping me, happy hacking.Continue reading on Medium » (https://medium.com/@A0g/xss-via-qr-code-8022a1a0309f?source=rss------bug_bounty-5)

hacking: security in practice
Best hacking movies/ series to watch?

Best hacking movies/ series to watch?

submitted by /u/thecyberdork
[link] [comments]

hacking: security in practice
How to check time of change in grades? (University Portal)

I had scored near-perfect scores on all my assessments but this one professor flipped out on me because I wouldn't pay her extra(see title), so she reduced THREE FKING GRADES. I escalated this to the HOD but no can do. I really deserved that scholarship and wish I could do something about it.

I was wondering if I could somehow find the date and time at which she changed it (not visible currently as she did not use her account), I could approach the Dean regarding this, though I don't think I stand a chance.

I apologize in advance if I am violating any rules, kindly let me know so I can correct myself.

submitted by /u/WishIWasDead2004
[link] [comments]

hacking: security in practice
Got Scholarship in C|CT from EC-Council

I recently got a scholarship offer from EC council in one of their new course called Certified Cybersecurity Technician C|CT . But they need me to pay the exam fee of 199$ . As written in the website the whole course is worth 999$ . Is it worth Taking the exam . It's and entry level certification and i currently have no certification in cybersecurity

submitted by /u/cyborghawk007
[link] [comments]

Dark Reading: Attacks/Breaches
Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.

Dark Reading: Attacks/Breaches
OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.

Dark Reading: Attacks/Breaches
How Universities Can Bridge Cybersecurity's Gender Gap

It's time to invest in initiatives that engage young women in cybersecurity early and often.

Dark Reading: Attacks/Breaches
Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.