Exploit Collector
CommScope Ruckus IoT Controller 1.7.1.0 Undocumented Account

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Let's Stop Blaming Employees for Our Data Breaches

Assuming employees want to steal trade secrets pits them against your security teams, creates stress and reduces productivity.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BrightScan #ThreatIntelThursday | DNS Spoofing

https://cdn-images-1.medium.com/max/1920/1*7HBI02DmuROlpebcAd3efQ.png
By: Ted Udelson

Continue reading on OpenAVN »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Article on Russian APT changing tactics

https://cdn-images-1.medium.com/max/644/1*VlsOXVd6gnXQM_au457vVA.jpeg
Russia-linked APT29 group changes TTPs following April advisories — SecurityAffairs.co, Pierluigi Paganini, 5/7/2021

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW I HACKED INTO A HOTEL WEBSITE’S DATABASE

https://cdn-images-1.medium.com/max/1126/1*QfodFufgcnS9OdxKJRW_0w.png
SIMPLE SQL INJECTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
EE.UU. Anuncia una nueva directiva de seguridad después del hack a oleoductos críticos.

https://cdn-images-1.medium.com/max/1600/0*eMdM5njJVvDGnwkK.jpg
PUBLICADO EN 27 MAYO, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CC: Pen Testing WriteUp — TryHackMe

https://cdn-images-1.medium.com/max/1024/0*5q3VzUY5gGtHjvzO
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Writeup: KENOBI.

https://cdn-images-1.medium.com/max/1920/1*7uNJ7S6T_Bf9y7tsjqKpng.png
ENUMERATION:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to get Started in Cyber Security?

https://cdn-images-1.medium.com/max/600/1*tyzEQRZorAtRgr0pHqfa0A.jpeg
Cyberattacks are happening all the time, meaning that keeping software, hardware, and data safe and secure is more important than ever.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounty Methodology V3.0: Hunt like a rat

https://cdn-images-1.medium.com/max/1532/1*WD6Z0zQqHjOnZxUX3hyZkA.png
Over time i ran into some issues when i was following other people’s methodologies. I was testing like my mentors and my hero’s but it…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Web App Pen Testing - Learning SQL Injection
https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/

<!-- SC_OFF -->Hello Everyone, I'm on my journey to become a web app pen tester and I have started with the Portswigger Web Security Academy which I'm finding incredibly useful so far. I have started on the SQL injection topic and I've just started looking at blind SQL injection and its the first time where I have relied heavily on hints/solutions to assist me in completing the labs. What I'm struggling with is the many extra variables you may potentially have to include in order to be successful. So my question is how would you know whether to use URL encoding vs concatenation vs a comment trailer or even a combination of these? Is it simply trial and error or is there a set pattern you should always try when discovering a potential injectable field? Some examples below. Lab example with double concatenation encased in quotes TrackingId=xyz'||(SELECT ' ')||' Lab example with concatenation and comment trailer TrackingId=x'||pg_sleep(10)-- Lab example with some URL encoding and + TrackingId=x'%3BSELECT+CASE+WHEN+(1=1)+THEN+pg_sleep(10)+ELSE+pg_sleep(0)+END-- At the moment these labs feel impossible without these hints/walkthroughs so any advice would be greatly appreciated. Thanks in advance :) <!-- SC_ON --> submitted by /u/lewis20188 (https://www.reddit.com/user/lewis20188)
[link] (https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/) [comments] (https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/)