Hacking on Medium
Article on Russian APT changing tactics

https://cdn-images-1.medium.com/max/644/1*VlsOXVd6gnXQM_au457vVA.jpeg
Russia-linked APT29 group changes TTPs following April advisories — SecurityAffairs.co, Pierluigi Paganini, 5/7/2021

Continue reading on Hybrid Analyst »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW I HACKED INTO A HOTEL WEBSITE’S DATABASE

https://cdn-images-1.medium.com/max/1126/1*QfodFufgcnS9OdxKJRW_0w.png
SIMPLE SQL INJECTION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
EE.UU. Anuncia una nueva directiva de seguridad después del hack a oleoductos críticos.

https://cdn-images-1.medium.com/max/1600/0*eMdM5njJVvDGnwkK.jpg
PUBLICADO EN 27 MAYO, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CC: Pen Testing WriteUp — TryHackMe

https://cdn-images-1.medium.com/max/1024/0*5q3VzUY5gGtHjvzO
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Writeup: KENOBI.

https://cdn-images-1.medium.com/max/1920/1*7uNJ7S6T_Bf9y7tsjqKpng.png
ENUMERATION:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to get Started in Cyber Security?

https://cdn-images-1.medium.com/max/600/1*tyzEQRZorAtRgr0pHqfa0A.jpeg
Cyberattacks are happening all the time, meaning that keeping software, hardware, and data safe and secure is more important than ever.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounty Methodology V3.0: Hunt like a rat

https://cdn-images-1.medium.com/max/1532/1*WD6Z0zQqHjOnZxUX3hyZkA.png
Over time i ran into some issues when i was following other people’s methodologies. I was testing like my mentors and my hero’s but it…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Web App Pen Testing - Learning SQL Injection
https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/

<!-- SC_OFF -->Hello Everyone, I'm on my journey to become a web app pen tester and I have started with the Portswigger Web Security Academy which I'm finding incredibly useful so far. I have started on the SQL injection topic and I've just started looking at blind SQL injection and its the first time where I have relied heavily on hints/solutions to assist me in completing the labs. What I'm struggling with is the many extra variables you may potentially have to include in order to be successful. So my question is how would you know whether to use URL encoding vs concatenation vs a comment trailer or even a combination of these? Is it simply trial and error or is there a set pattern you should always try when discovering a potential injectable field? Some examples below. Lab example with double concatenation encased in quotes TrackingId=xyz'||(SELECT ' ')||' Lab example with concatenation and comment trailer TrackingId=x'||pg_sleep(10)-- Lab example with some URL encoding and + TrackingId=x'%3BSELECT+CASE+WHEN+(1=1)+THEN+pg_sleep(10)+ELSE+pg_sleep(0)+END-- At the moment these labs feel impossible without these hints/walkthroughs so any advice would be greatly appreciated. Thanks in advance :) <!-- SC_ON --> submitted by /u/lewis20188 (https://www.reddit.com/user/lewis20188)
[link] (https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/) [comments] (https://www.reddit.com/r/Pentesting/comments/nmawn4/web_app_pen_testing_learning_sql_injection/)

Bug Bounty Methodology V3.0: Hunt like a rat
https://thexssrat.medium.com/bug-bounty-methodology-v3-0-hunt-like-a-rat-9e030fc54363?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Over time i ran into some issues when i was following other people’s methodologies. I was testing like my mentors and my hero’s but it…Continue reading on Medium » (https://thexssrat.medium.com/bug-bounty-methodology-v3-0-hunt-like-a-rat-9e030fc54363?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Demo for Mr. Beast's Self Updating Thumbnail Hack

https://external-preview.redd.it/Zj-byydGu0QD2Ijxe2jVSU2FwRFAiw86iAvg_rjm0io.jpg?width=320&crop=smart&auto=webp&s=04019f1fe1a7655152291c2626f9471e9d65d402 submitted by /u/EmergencyCloud2080
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Enterprise Scale Threat Hunting: C2 Beacon Detection with Unsupervised ML and KQL — Part 2
https://www.reddit.com/r/redteamsec/comments/nmhys3/enterprise_scale_threat_hunting_c2_beacon/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://mergene.medium.com/enterprise-scale-threat-hunting-network-beacon-detection-with-unsupervised-ml-and-kql-part-2-bff46cfc1e7e) [comments] (https://www.reddit.com/r/redteamsec/comments/nmhys3/enterprise_scale_threat_hunting_c2_beacon/)

___________________________
@hacking_Attack
@Hacking_Video

BHIS | Getting Started in Pentesting The Cloud: Azure | Beau Bullock (1-Hour)
https://www.reddit.com/r/redteamsec/comments/nmhze0/bhis_getting_started_in_pentesting_the_cloud/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://youtu.be/fCbVMWvncuw) [comments] (https://www.reddit.com/r/redteamsec/comments/nmhze0/bhis_getting_started_in_pentesting_the_cloud/)

___________________________
@hacking_Attack
@Hacking_Video