Hello hunters,Continue reading on Medium » (https://medium.com/@the.bugcrowd.testerpawan/carelessness-leads-to-duplicate-bug-bounty-tips-95b481daabef?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
(S)illy (S)erver (R)obs (F)olks
https://cdn-images-1.medium.com/max/804/1*ciLuJkfcdHzNVxAcHCjk0w.png
SSRF — Server-Side Request Forgery
Continue reading on Medium »
(S)illy (S)erver (R)obs (F)olks
https://cdn-images-1.medium.com/max/804/1*ciLuJkfcdHzNVxAcHCjk0w.png
SSRF — Server-Side Request Forgery
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
A little guidance for the Bug Hunter
Web applications and some tips
Continue reading on Medium »
A little guidance for the Bug Hunter
Web applications and some tips
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Rogue Libraries: Malicious Links that Live on Your Desktop
https://cdn-images-1.medium.com/max/681/1*MX9AWa0I2nTG5lmiLtNeUw.png
“Phishing” has become a household term. And for good reason too: Well over half of all cyberattacks involve human manipulation.
Continue reading on Medium »
Rogue Libraries: Malicious Links that Live on Your Desktop
https://cdn-images-1.medium.com/max/681/1*MX9AWa0I2nTG5lmiLtNeUw.png
“Phishing” has become a household term. And for good reason too: Well over half of all cyberattacks involve human manipulation.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Exploring a Lesser-Known Blockchain Vulnerability: Blockchain Forking Attacks | Karthikeyan Nagaraj
https://cdn-images-1.medium.com/max/600/0*6_5I26U9GX2XVHy0.jpg
Understanding the Working Principle, Exploitation Methods, Prevention Strategies, and Impact of Blockchain Forking Attacks | 2023
Continue reading on Medium »
Exploring a Lesser-Known Blockchain Vulnerability: Blockchain Forking Attacks | Karthikeyan Nagaraj
https://cdn-images-1.medium.com/max/600/0*6_5I26U9GX2XVHy0.jpg
Understanding the Working Principle, Exploitation Methods, Prevention Strategies, and Impact of Blockchain Forking Attacks | 2023
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
PolyCam: an amazing app to hack
https://cdn-images-1.medium.com/max/2560/1*X2BRqqtYWaHU2sSVu_w2ow.png
well, I don’t know if I should call myself an expert hacker but managed to get the GLB file from the website, With a little investigation…
Continue reading on Medium »
PolyCam: an amazing app to hack
https://cdn-images-1.medium.com/max/2560/1*X2BRqqtYWaHU2sSVu_w2ow.png
well, I don’t know if I should call myself an expert hacker but managed to get the GLB file from the website, With a little investigation…
Continue reading on Medium »
Black Hat Ethical Hacking
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)Post Views: 67 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes Kali Linux 2023.2 ReleaseKali Linux 2023.2 has arrived, building upon the momentum of its 10 year anniversary. Whether you are a new user or have an existing installation, you can swiftly download the latest version or upgrade your current setup.
The changelog highlights over the last few weeks since March’s release of 2023.1 is:
* New VM image for Hyper-V – With “Enhanced Session Mode” out of the box
* Xfce audio stack update: enters PipeWire – Better audio for Kali’s default desktop
* i3 desktop overhaul – i3-gaps merged with i3
* Desktop updates – Easy hashing in Xfce
* GNOME 44 – Gnome Shell version bump
* Icons & menus updates – New apps and icons in menu
* New tools – As always, various new packages added
We will explore the key highlights from the latest release.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses New Hyper-V VM ImageWith this release, they welcome a new member in the family of pre-built VM images! They now provide an image for Microsoft Hyper-V.
For those familiar with the matter, let’s jump straight into the details. This is a GEN2 image for Hyper-V, pre-configured for Enhanced Session Mode. All you need to do is to download the image, unpack it, then run the script install-vm.bat. Afterwards open the Hyper-V Manager and start the VM. Hyper-V should automatically propose to connect via Enhanced Session Mode (aka. xRDP over HvSocket), thereby greatly improving the user experience.
https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/kali-hyperv-connect-1024x820.png
Before that, enabling Enhanced Session Mode required some manual steps, both on Windows and in the Kali VM, and it was not super easy. Now, zero configuration is required.
More details about this new image can be found in their documentation, on the page Import Pre-Made Kali Hyper-V VM. Xfce & PipeWireWith this release, they changed the audio stack for Kali’s default desktop: PipeWire now replaces PulseAudio.
Some background information: PipeWire is a “server for handling audio, video streams, and hardware on Linux”. It was initially released in 2017, is actively developed, and is poised to become the de-facto sound server in pretty much every Linux distribution out there, therefore replacing PulseAudio. The GNOME desktop already uses PipeWire by default in most Linux distributions, including Kali Linux since version 2022.4 . Most users never noticed the change.
But let’s get back to Kali’s default desktop environment: Xfce. Xfce does not really “support” PipeWire per se, but it does not need to. PipeWire provides a compatibility layer, under the form of the pipewire-pulse daemon. And that’s what make the magic happens: applications that were meant to work with PulseAudio keep working as if nothing happened, blissfully unaware of the change.
They do not expect any issue with this transition, actually they expect the opposite, some well-known issues should be fixed, sound should work better overall.
What should you do about it? Nothing special. For users who upgrade their Kali installation though, a reminder: the right command to upgrade your system is sudo apt update && sudo apt full-upgrade. Let us put the emphasis on full-upgrade, rather than upgrade: it matters.
Should this change cause any problem with your setup, head to the page No sound[...]
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)Post Views: 67 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes Kali Linux 2023.2 ReleaseKali Linux 2023.2 has arrived, building upon the momentum of its 10 year anniversary. Whether you are a new user or have an existing installation, you can swiftly download the latest version or upgrade your current setup.
The changelog highlights over the last few weeks since March’s release of 2023.1 is:
* New VM image for Hyper-V – With “Enhanced Session Mode” out of the box
* Xfce audio stack update: enters PipeWire – Better audio for Kali’s default desktop
* i3 desktop overhaul – i3-gaps merged with i3
* Desktop updates – Easy hashing in Xfce
* GNOME 44 – Gnome Shell version bump
* Icons & menus updates – New apps and icons in menu
* New tools – As always, various new packages added
We will explore the key highlights from the latest release.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses New Hyper-V VM ImageWith this release, they welcome a new member in the family of pre-built VM images! They now provide an image for Microsoft Hyper-V.
For those familiar with the matter, let’s jump straight into the details. This is a GEN2 image for Hyper-V, pre-configured for Enhanced Session Mode. All you need to do is to download the image, unpack it, then run the script install-vm.bat. Afterwards open the Hyper-V Manager and start the VM. Hyper-V should automatically propose to connect via Enhanced Session Mode (aka. xRDP over HvSocket), thereby greatly improving the user experience.
https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/kali-hyperv-connect-1024x820.png
Before that, enabling Enhanced Session Mode required some manual steps, both on Windows and in the Kali VM, and it was not super easy. Now, zero configuration is required.
More details about this new image can be found in their documentation, on the page Import Pre-Made Kali Hyper-V VM. Xfce & PipeWireWith this release, they changed the audio stack for Kali’s default desktop: PipeWire now replaces PulseAudio.
Some background information: PipeWire is a “server for handling audio, video streams, and hardware on Linux”. It was initially released in 2017, is actively developed, and is poised to become the de-facto sound server in pretty much every Linux distribution out there, therefore replacing PulseAudio. The GNOME desktop already uses PipeWire by default in most Linux distributions, including Kali Linux since version 2022.4 . Most users never noticed the change.
But let’s get back to Kali’s default desktop environment: Xfce. Xfce does not really “support” PipeWire per se, but it does not need to. PipeWire provides a compatibility layer, under the form of the pipewire-pulse daemon. And that’s what make the magic happens: applications that were meant to work with PulseAudio keep working as if nothing happened, blissfully unaware of the change.
They do not expect any issue with this transition, actually they expect the opposite, some well-known issues should be fixed, sound should work better overall.
What should you do about it? Nothing special. For users who upgrade their Kali installation though, a reminder: the right command to upgrade your system is sudo apt update && sudo apt full-upgrade. Let us put the emphasis on full-upgrade, rather than upgrade: it matters.
Should this change cause any problem with your setup, head to the page No sound[...]
Black Hat Ethical Hacking
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image) | Black Hat Ethical Hacking
The Kali Linux 2023.2 release introduces significant enhancements to its feature set. This latest release includes a new VM image specifically tailored for Hyper-V, featuring "Enhanced Session Mode" for an optimized virtual machine experience. Additionally…
Black Hat Ethical Hacking
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image)
Black Hat Ethical Hacking
Kali Linux 2023.2 Release (New Tools in Kali, Desktop Updates, New Hyper-V VM Image) | Black Hat Ethical Hacking
The Kali Linux 2023.2 release introduces significant enhancements to its feature set. This latest release includes a new VM image specifically tailored for Hyper-V, featuring "Enhanced Session Mode" for an optimized virtual machine experience. Additionally…
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Brute Forcing Windows Credentials
So the place I'm targeting has at max 43 million password combinations, probably far less. I have written a program to see how many combinations per second my computer can guess (17 million) but I don't have an entry point to exercise my program onto. Any suggestions?
They're all local computers, no active directory connection. Though there is a print server active on all computers using UniFlow.
(Their OneDrive passwords are the same as their local account passwords)
submitted by /u/OwO_0w0_OwO
[link] [comments]
Brute Forcing Windows Credentials
So the place I'm targeting has at max 43 million password combinations, probably far less. I have written a program to see how many combinations per second my computer can guess (17 million) but I don't have an entry point to exercise my program onto. Any suggestions?
They're all local computers, no active directory connection. Though there is a print server active on all computers using UniFlow.
(Their OneDrive passwords are the same as their local account passwords)
submitted by /u/OwO_0w0_OwO
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
How I bypassed Two-Factor Authentication 3 times on the same target
https://elgllad.medium.com/how-i-bypassed-two-factor-authentication-3-times-on-the-same-target-b157cf1814fa?source=rss------bug_bounty-5
https://elgllad.medium.com/how-i-bypassed-two-factor-authentication-3-times-on-the-same-target-b157cf1814fa?source=rss------bug_bounty-5