A Pentester's Guide to Source Code Review
https://www.reddit.com/r/Pentesting/comments/13rk6xq/a_pentesters_guide_to_source_code_review/

<!-- SC_OFF -->https://www.cobalt.io/blog/a-pentesters-guide-to-source-code-review <!-- SC_ON --> submitted by /u/cobalt-core-team (https://www.reddit.com/user/cobalt-core-team)
[link] (https://www.reddit.com/r/Pentesting/comments/13rk6xq/a_pentesters_guide_to_source_code_review/) [comments] (https://www.reddit.com/r/Pentesting/comments/13rk6xq/a_pentesters_guide_to_source_code_review/)

CORS Misconfiguration
https://www.reddit.com/r/Pentesting/comments/13rj4ni/cors_misconfiguration/

<!-- SC_OFF -->Hi everyone, junior pentester here, wanted some idea regarding CORS. I have detected and open CORS policy on one of our applications, however a developer said we are not vulnerable since we are using Auth Tokens for authentication and not using cookies/etc/. Is this true? <!-- SC_ON --> submitted by /u/UnLiQuery20 (https://www.reddit.com/user/UnLiQuery20)
[link] (https://www.reddit.com/r/Pentesting/comments/13rj4ni/cors_misconfiguration/) [comments] (https://www.reddit.com/r/Pentesting/comments/13rj4ni/cors_misconfiguration/)

php version checking
https://www.reddit.com/r/Pentesting/comments/13rkar7/php_version_checking/

<!-- SC_OFF -->im being tested at work and being asked to check php version info for an external site via nmap. i usually have done this with server access or external tools like nessus but this is all new to me. ive tried using the php version script in nmap but its not coming back with that info, google is not being any help. can someone give me the string that would do this. if i can get this figured out im sure i can adapt better at using this in the future. ty <!-- SC_ON --> submitted by /u/H8eater (https://www.reddit.com/user/H8eater)
[link] (https://www.reddit.com/r/Pentesting/comments/13rkar7/php_version_checking/) [comments] (https://www.reddit.com/r/Pentesting/comments/13rkar7/php_version_checking/)

Hacking on Medium
Encrypt Shellcode with XOR Algorithm

https://cdn-images-1.medium.com/max/897/1*UvQghN_mgCrLijSRisfFAA.png
Introduction

Continue reading on Medium »

Hacking on Medium
Understanding Reentrancy Vulnerabilities in Bug Bounty Programs: Tips for Ethical Hackers | 2023

https://cdn-images-1.medium.com/max/1400/0*v41AmNvzgDhfkv3Q.jpg
Unveiling the Hidden Risks: Exploring Reentrancy Vulnerabilities in Bug Bounty Programs | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
TryHackMe -Nax

https://cdn-images-1.medium.com/max/600/1*qpKzSDVxIy_enJF2IGdI0A.png
Let’s start by scanning …

Continue reading on Medium »

Hacking on Medium
Books You Need To Read 9

https://cdn-images-1.medium.com/max/600/1*64upPA1RzkrsKHNRjnYbLQ.jpeg
Profit First: A Game-Changing Approach to Financial Management

Continue reading on Medium »

Hacking on Medium
Exploring the Rising World of Biohacking: Enhancing Human Abilities through Technology

https://cdn-images-1.medium.com/max/600/1*qBZwifykn862Ysda5DfsXw.jpeg
In our rapidly advancing technological landscape, a captivating movement known as biohacking has surfaced, captivating the imaginations of…

Continue reading on Medium »

Hacking on Medium
Enhancing Productivity with the CHAT GPT AIRPM Extension Hack

https://cdn-images-1.medium.com/max/600/1*fQGx9kY2KP5hKkGuVCflDg.jpeg
Introduction:

Continue reading on Medium »

Hacking on Medium
Three Mandatory Pillars of Cyber Security

https://cdn-images-1.medium.com/max/757/1*9xsR383dQR1Vav2SA2WGUQ.png
1 Introduction

Continue reading on Medium »

Hacking on Medium
[HTB] Horizontall 靶機 Write-Up

https://cdn-images-1.medium.com/max/1440/1*tkTnhrPvzkv7oPDTw03bPA.png
Hack The Box Horizontall machine Write-Up

Continue reading on 璿的筆記 »

Hacking on Medium
Safeguarding the Digital Frontier: Exploring the Importance of Cybersecurity and Data Privacy

https://cdn-images-1.medium.com/max/2600/0*rUfBQbGfkBfeMh4x
In today’s increasingly interconnected world, where digital technologies are deeply ingrained in our daily lives, the protection of our…

Continue reading on Medium »

The premiere token airdrop of FLOKI
https://www.reddit.com/r/Pentesting/comments/13rkhmf/the_premiere_token_airdrop_of_floki/

<!-- SC_OFF -->https://linktr.ee/flokieth <!-- SC_ON --> submitted by /u/supers2345 (https://www.reddit.com/user/supers2345)
[link] (https://www.reddit.com/r/Pentesting/comments/13rkhmf/the_premiere_token_airdrop_of_floki/) [comments] (https://www.reddit.com/r/Pentesting/comments/13rkhmf/the_premiere_token_airdrop_of_floki/)

hacking: security in practice
Zphisher no longer works

Zphisher is no longer providing links that work...tried all 4 ....work arounds?

submitted by /u/KiTaMiMe
[link] [comments]

hacking: security in practice
Lookin for the apology letter cOmrade (Jonathan James) was forced to write to NASA after he was convicted for stealing international space station software.

Lookin for the apology letter cOmrade (Jonathan James) was forced to write to NASA after he was convicted for stealing international space station software.

I guess it’s kinda interesting what he wrote.

submitted by /u/tang34344
[link] [comments]

Dark Reading: Attacks/Breaches
Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

Bank of Ghana's security operations center will boost visibility into threats and enable threat intelligence sharing, it says.