Price Manipulation Vulnerability: Potential Exploitation in Dating Website
https://medium.com/@cyber.jemin/price-manipulation-vulnerability-potential-exploitation-in-dating-website-d1a7438c5eeb?source=rss------bug_bounty-5

Parameter Tempering !!Continue reading on Medium » (https://medium.com/@cyber.jemin/price-manipulation-vulnerability-potential-exploitation-in-dating-website-d1a7438c5eeb?source=rss------bug_bounty-5)

hacking: security in practice
Anyone have any idea what MyIPHide does differently?

So recently I was trying to find a way to get a VPN/proxy onto my school's computers and tried running a lot of different VPNs, paid (Surfshark, Nord) and free (Proton, HotSpotShield, etc.) and some proxies and nothing worked no matter the protocol until MyIPHide. Whilst you needed to connect to a hotspot for a second and use it to log in as the MyIPHide servers were blocked, the proxy could then be used as you like. I originally tested these on a BYO laptop but then to get it onto the school PCs I pulled all the dependencies/installation files together with Enigma Virtualbox and then hid it inside an MS Word file as you couldn't download an EXE off of Google Drive onto them. This worked but once again it requires you to connect your mobile hotspot for a bit and it's quite slow.

So then another project I also tried before this was building my own Wireshark VPN over DoH/Web sockets (not really sure of the terminology here pls read the notes) as every other port is blocked in the school following these notes. This did not work, I suspect due to Deep Packet Inspection on the school's part.

Now I would like to have a go at building my own VPN/Proxy like MyIPHide but routed to my own home rather than MyIPHide's US servers, which are quite a bit further. The problem is, MyIPHide is not open-source, nor are its workings available anywhere I can find. This is where I was hoping someone here could help, does anyone have any idea what MyIPHide does to make this work? Or am I being stupid here and this project isn't possible? I'm in Y9 and quite new to networking/hacking so I think it might be the latter but would appreciate any help.

Thanks in advance!

submitted by /u/RSCoder7
[link] [comments]

hacking: security in practice
SQL Injection into a MySQL update query

I have a web app that has a vulnerability that allows sql injection into an update query.

So for example, I have

UPDATE user SET name=$newname WHERE id=999;

I can control the $newname variable.

The server doesn’t allow concatenation of a 2nd query, so I somehow need to embed a query where $newname is.

Any ideas?

submitted by /u/IrskoCzeska
[link] [comments]

hacking: security in practice
Problems ending lanschool process tree with process explorer.

So in my school we have lanschool and I want to disable it. Command prompt is disabled aswell as registry editing, and power options. I tried installing process explorer(v17.04) and I tried running it with the Ethernet plug disabled, but when I ran process explorer and tried ending the student.exe process tree it said access denied. Anyway to bypass this? Is there perhaps a third party process explorer that doesn’t require admin to install? Thanks.

submitted by /u/Hungry_Story
[link] [comments]

hacking: security in practice
What would you ask a Cybercrime Prosecutor?

I'm making a documentary about cybersecurity and hackers, white hat ones and black hat ones, for my school. And I was asked to make questions that would be useful to ask a cybercrime prosecutor, as if I were, hypothetically, going to interview one.

What do you think that person could contribute? What could I ask them?

submitted by /u/Thomasitos
[link] [comments]

hacking: security in practice
US: China-funded hackers attack critical infrastructure - Discover Politics

https://external-preview.redd.it/leFrUxFyb5x1X7JLgJ_X_gsT81RobJbYn0jDu7CDRkE.jpg?width=216&crop=smart&auto=webp&s=2d0b86811bbb9fe9a06e7e92437fa9106fdb0132 submitted by /u/v4r4d3r0
[link] [comments]

hacking: security in practice
Admin Access on work laptop.

Hey all!

I work as a receptionist and spend all day on this laptop, yet work is never busy, so I have nothing to do. The laptop has most of it's features locked unless you have admin access.

I'd like to find a way to give my account admin access.

The laptop is on a domain network for the company so logging into user accounts seems a little more complicated and protected; any advice?

submitted by /u/SW3910
[link] [comments]

Hacking on Medium
Hack Snapchat Account: Unveiling the Truth

Introduction

Continue reading on Medium »

Hacking on Medium
Overview of Mobile Game Hacking

https://cdn-images-1.medium.com/max/900/1*78IZza3Jn1WPtpC8PJHOlw.jpeg
If you are interested in learning about how users hack Android apps, the tools they employ, and the possibilities they can explore, you’ve…

Continue reading on Medium »

Hacking on Medium
Termux is the Ultimate Tool for Hacking

https://cdn-images-1.medium.com/max/640/0*a3dgc9tXPj2ejpkl.png
Termux is a powerful terminal emulator and Linux environment app that has gained popularity among hackers and cybersecurity enthusiasts.

Continue reading on Medium »

Hacking on Medium
Price Manipulation Vulnerability: Potential Exploitation in Dating Website

https://cdn-images-1.medium.com/max/600/0*MW371HWSEMrT_3hu.png
Parameter Tempering !!

Continue reading on Medium »