Hi Al Salam Alykum, it’s a simple XSS but with a unexpected vulnerable point, i hope the write-up is clear, if not ping me, happy hacking.Continue reading on Medium » (https://medium.com/@A0g/xss-via-qr-code-8022a1a0309f?source=rss------bug_bounty-5)

hacking: security in practice
Best hacking movies/ series to watch?

Best hacking movies/ series to watch?

submitted by /u/thecyberdork
[link] [comments]

hacking: security in practice
How to check time of change in grades? (University Portal)

I had scored near-perfect scores on all my assessments but this one professor flipped out on me because I wouldn't pay her extra(see title), so she reduced THREE FKING GRADES. I escalated this to the HOD but no can do. I really deserved that scholarship and wish I could do something about it.

I was wondering if I could somehow find the date and time at which she changed it (not visible currently as she did not use her account), I could approach the Dean regarding this, though I don't think I stand a chance.

I apologize in advance if I am violating any rules, kindly let me know so I can correct myself.

submitted by /u/WishIWasDead2004
[link] [comments]

hacking: security in practice
Got Scholarship in C|CT from EC-Council

I recently got a scholarship offer from EC council in one of their new course called Certified Cybersecurity Technician C|CT . But they need me to pay the exam fee of 199$ . As written in the website the whole course is worth 999$ . Is it worth Taking the exam . It's and entry level certification and i currently have no certification in cybersecurity

submitted by /u/cyborghawk007
[link] [comments]

Dark Reading: Attacks/Breaches
Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.

Dark Reading: Attacks/Breaches
OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

A cybersecurity vulnerability found in an implementation of the social login functionality opens the door to account takeovers and more.

Dark Reading: Attacks/Breaches
How Universities Can Bridge Cybersecurity's Gender Gap

It's time to invest in initiatives that engage young women in cybersecurity early and often.

Dark Reading: Attacks/Breaches
Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.

Dark Reading: Attacks/Breaches
How AI Can Help Organizations Adapt and Recover From Cyberattacks

Incident response playbooks and frameworks are leaving defenders ill-equipped to recover from the increasing number of successful cyberattacks. Developments in AI offer a new way for stretched teams to manage security incidents and heal swiftly.

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques
https://www.reddit.com/r/redteamsec/comments/13quict/volt_typhoon_targets_us_critical_infrastructure/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/VoltTyphoon) [comments] (https://www.reddit.com/r/redteamsec/comments/13quict/volt_typhoon_targets_us_critical_infrastructure/)

Hacking on Medium
Disclaimer: This blog post is for educational purposes only and is not intended to be used for any…

If you’re an enthusiast of DIY gadgets, cybersecurity, and everything in between, you’ve probably heard about the Flipper Zero, a…

Continue reading on Medium »

Hacking on Medium
Hack The Location of Phone Number with this Python lib.

https://cdn-images-1.medium.com/max/1280/1*2wnDlf1n7nh4m6NGtXx7OA.jpeg
The phonenumbers library is a popular Python library for parsing, formatting, and validating phone numbers. The library provides various…

Continue reading on Medium »

Hacking on Medium
Featured Article: Cybercrime (May 24th, 2023)

Congressional Communities is featuring one Congressional Research Service (CRS) article per day in effort to share with our readers the…

Continue reading on Medium »

윈도우 IIS 웹 서버를 노리는 Lazarus 그룹 - ASEC BLOG
https://www.reddit.com/r/redteamsec/comments/13qxo4q/%EC%9C%88%EB%8F%84%EC%9A%B0_iis_%EC%9B%B9_%EC%84%9C%EB%B2%84%EB%A5%BC_%EB%85%B8%EB%A6%AC%EB%8A%94_lazarus_%EA%B7%B8%EB%A3%B9_asec_blog/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://asec.ahnlab.com/ko/52829/) [comments] (https://www.reddit.com/r/redteamsec/comments/13qxo4q/%EC%9C%88%EB%8F%84%EC%9A%B0_iis_%EC%9B%B9_%EC%84%9C%EB%B2%84%EB%A5%BC_%EB%85%B8%EB%A6%AC%EB%8A%94_lazarus_%EA%B7%B8%EB%A3%B9_asec_blog/)