Dark Reading: Attacks/Breaches
Google Cloud Bug Allows Server Takeover From CloudSQL Service

Researchers could access sensitive data and steal secrets by exploiting a vulnerability in GCP's security layer, eventually running rampant in the environment.

Understanding Reentrancy Vulnerabilities in Bug Bounty Programs: Tips for Ethical Hackers | 2023
https://cyberw1ng.medium.com/understanding-reentrancy-vulnerabilities-in-bug-bounty-programs-tips-for-ethical-hackers-2023-caf429f474c2?source=rss------bug_bounty-5

Unveiling the Hidden Risks: Exploring Reentrancy Vulnerabilities in Bug Bounty Programs | Karthikeyan NagarajContinue reading on Medium » (https://cyberw1ng.medium.com/understanding-reentrancy-vulnerabilities-in-bug-bounty-programs-tips-for-ethical-hackers-2023-caf429f474c2?source=rss------bug_bounty-5)

Hacking on Medium
Hack the box CTF Cyber Apocalypse 2023 writeup web challenge 3

https://cdn-images-1.medium.com/max/600/1*iQRVBP7OkqqxKtl6Agy4WA.png
Vulnerability: Insecure Direct Object Reference (GraphQL)

Continue reading on Medium »

Hacking on Medium
Going Beyond Dark Mode: Two Clicks that Make Firefox Beautifully Black

https://cdn-images-1.medium.com/max/1621/1*6b5aEN91uXJExDrFbaK4pA.png
Dark mode plugins are rife with the possibility of browser hijacking attacks. As browsers become more and more valuable, end-users are…

Continue reading on Medium »

Hacking on Medium
4 Little-Known Facts about Hackathons

https://cdn-images-1.medium.com/max/1920/1*0_y7LLTk8Ye0SljCV4EptA.jpeg
A little journey into the Hidden Realms of Hackathons

Continue reading on Medium »

Hacking on Medium
TryHackMe Pickle Rick CTF Çözümü

https://cdn-images-1.medium.com/max/1920/1*oI-mrJuUN00omQnhK7eWNw.png
“Pickle Rick” odası, popüler televizyon dizisi “Rick and Morty”den esinlenilerek oluşturulmuş bir TryHackMe odasıdır. Bu odada, diziye…

Continue reading on Medium »

Hacking on Medium
Infiltrating LAN: Smuggling Traffic Past the DMZ | How to Hack Series

https://cdn-images-1.medium.com/max/1336/1*lckQuliBoYRXHs2KpwObZQ.png
Hello security professionals! Today’s article brings to light an easy way that attackers use to smuggle traffic via SSH tunnels — that…

Continue reading on Medium »

Hacking on Medium
Learn Ethical Hacking: From Zero to Hero with 10 Essential Learning Sites

https://cdn-images-1.medium.com/max/2600/0*Z5JNe9c-yue5ESZR
Security isn’t something you buy, it’s something you do, and it takes talented people to do it right.

Continue reading on Medium »

Afrog explained for bug bounty hunters
https://medium.com/@gpiechnik/afrog-explained-for-bug-hunters-ed1497d5aaf5?source=rss------bug_bounty-5

When working as a pentester or bug hunter it is normal to want to automate some of our work.Continue reading on Medium » (https://medium.com/@gpiechnik/afrog-explained-for-bug-hunters-ed1497d5aaf5?source=rss------bug_bounty-5)

hacking: security in practice
Hashcat

Hi,

I have been trying to crack the following the hashes:

Administrator:500:

aad3b435b51404eeaad3b435b51404ee:47f13e356535b8d4b0ece26332adef1c:::

anakin_skywalker:

1011:aad3b435b51404eeaad3b435b51404ee:c706f83a7b17a0230e55cde2f3de94fa:::

artoo_detoo:

1007:aad3b435b51404eeaad3b435b51404ee:fac6aada8b7afc418b3afea63b7577b4:::

I tried to identify the type of the hash using hash-identifier and the results were MD5, NTLM, md5($salt.$pass).

I tried the following commands on Linux terminal:
hashcat a -0 -m -0 hash.txt /usr/share/wordlists/rockyou.txt

hashcat a -0 -m -20 hash.txt /usr/share/wordlists/rockyou.txt

hashcat a -0 -m -1000 hash.txt /usr/share/wordlists/rockyou.txt

​

Please notice I got the hashes after exposing Eternalblue vulnerability on Windows server 2012. Please direct me on how I can solve this because every time I run the commands the recovery is zero.

submitted by /u/Keepitupdoc
[link] [comments]