How to find IDOR (for beginners)

Hello super ethical hackers and bug bounty hunters. I hope you are well in this pandemicContinue reading on Medium »
Read more...

16 year old wants to be a pen-tester
https://www.reddit.com/r/Pentesting/comments/nmjsfz/16_year_old_wants_to_be_a_pentester/

Hello, My name is Joel, And I would like to ask what are some ways or steps I should take to get into the IT industry to set me up to be a pen-tester in the future. I have already started to gain some skills but, I am not sure if it will be enough to get employed. Especially since I'm a minor (16) :/. However, I still want to try but not sure how to go about it. ​ Some of my qualifications: ​ A cybersecurity student at the University of Miami Currently studying for my A+ and shortly my Network+ Basic IT skills Basic knowledge of Computer Networking Basic knowledge of Linux Basic coding skills ​ Its all on my Linkedin account: https://www.linkedin.com/in/joel-jiron-20a912212/ ​ At the moment, I would prefer to get a full-time job during the summer. Then, I would sadly have to continue with high school and go part-time. Any and all advice helps. Recommended Agency(Florida)? Recommended entry Job positions? recommended certs? Thanks! :) submitted by /u/IForGotMyName_ (https://www.reddit.com/user/IForGotMyName_)
[link] (https://www.reddit.com/r/Pentesting/comments/nmjsfz/16_year_old_wants_to_be_a_pentester/) [comments] (https://www.reddit.com/r/Pentesting/comments/nmjsfz/16_year_old_wants_to_be_a_pentester/)

___________________________
@hacking_Attack
@Hacking_Video

Dystopia - Low To Medium Multithreaded Ubuntu Core Honeypot Coded In Python
http://www.kitploit.com/2021/05/dystopia-low-to-medium-multithreaded.html

___________________________
@hacking_Attack
@Hacking_Video

Low to medium Ubuntu Core honeypot (https://www.kitploit.com/search/label/HoneyPot) coded in Python.
Features
Optional Login (https://www.kitploit.com/search/label/Login) Prompt Logs commands used and IP addresses Customize MOTD, Port, Hostname and how many clients can connect at once (default is unlimited) Save and load config Add support to a plethora of commands
Todo
Packet Capture Better Logging Service Geolocation Email Alerts Insights such as charts & graphs Add Default Configurations Optimize / Fix Code
How to run
sudo apt update && sudo apt upgrade -y
python3 dystopy.py
Command Line Arguments
bind to --motd MOTD, -m MOTD specify the message of the day --max MAX, -M MAX max (https://www.kitploit.com/search/label/Max) number of clients allowed to be connected at once. --username USERNAME, -u USERNAME username for fake login prompt and the user for the honeypot session --password PASSWORD, -p PASSWORD password for fake login prompt --hostname HOSTNAME, -H HOSTNAME hostname of the honeypot --localhost, -L host honeypot on localhost --save SAVE, -s SAVE save config to a json (https://www.kitploit.com/search/label/JSON) file --load LOAD, -l LOAD load a config file ">usage: dystopia.py [-h] [--port PORT] [--motd MOTD] [--max MAX] [--username USERNAME] [--password PASSWORD]
[--hostname HOSTNAME] [--localhost] [--save SAVE] [--load LOAD]

Dystopia | A python honeypot.

optional arguments:
-h, --help show this help message and exit
--port PORT, -P PORT specify a port to bind to
--motd MOTD, -m MOTD specify the message of the day
--max MAX, -M MAX max number of clients allowed to be connected at once.
--username USERNAME, -u USERNAME
username for fake login prompt and the user for the honeypot session
--password PASSWORD, -p PASSWORD
password for fake login prompt
--hostname HOSTNAME, -H HOSTNAME
hostname of the honeypot
--localhost, -L host honeypot on localhost
--save SAVE, -s SAVE save config to a json file
--load LOAD, -l LOAD load a config file

How to add Support for More Commands
You can add support to new commands by editing the file "commands.json". The format is command:output
for eg
{
"dog":"Dog command activated!"
}

___________________________
@hacking_Attack
@Hacking_Video

Download Dystopia (https://github.com/Drew-Alleman/dystopia)

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/9ccfa33mbq171.png?width=640&crop=smart&auto=webp&s=d3d68866033e96862ddfee965a7dad0833feff5b submitted by /u/bluuumoo
[link] [comments]

hacking: security in practice
Third thumb build?

Check this awesome project! Does anyone know if there is a Ressource of how to build one on your own?

https://www.daniclodedesign.com/thethirdthumb

submitted by /u/filmpromunich
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
People living very unsecure life these days. Always avoid public computers.

https://external-preview.redd.it/TnyfRke9FUwORWBgnEVKYuFuf1VtnFEVIq6e6Ndq27o.jpg?width=320&crop=smart&auto=webp&s=3b5eb47efb8524e90df35ca743489aec3b64d735 submitted by /u/bugswriter
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How was this News Hack Done?

https://www.youtube.com/watch?v=eOZpQq_VYcI

submitted by /u/Huge_Feeling_5074
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

"Maintaining access" Phase
https://www.reddit.com/r/Pentesting/comments/nmlo5a/maintaining_access_phase/

Currently learning about pen testing and there is a phase called "Maintaining access" I can understand why a unethical hacker would like to maintain access but not a ethical hacker/pen tester for a company? Could anyone explain this for me thank you submitted by /u/Axolotlfc (https://www.reddit.com/user/Axolotlfc)
[link] (https://www.reddit.com/r/Pentesting/comments/nmlo5a/maintaining_access_phase/) [comments] (https://www.reddit.com/r/Pentesting/comments/nmlo5a/maintaining_access_phase/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
I downloaded a file from anonfiles.com, is there a chance of getting into legal trouble?

I downloaded a rar, and it was a video I stopped few sec later when I realized it was CP/hurtcore (actually a part of daisys destruction), I cant tell how sick I feel right now. Ofc I deleted it from my device and sent a request immediately to anonfiles to delete it over their abuse report system. But now Im anxious, I could get into legal trouble anyways. Terms of use on the site says „We are strong advocates of privacy & do not log downloads.“ Am I safe?

submitted by /u/notathrowawaynr167
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What do you define as a script kiddie?

I see a lot of security professionals using Burp Suite and Nmap, but I wonder are they script kiddies?

submitted by /u/Least_Protection_288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malvertising Campaign On Google Distributed Trojanized AnyDesk Installer

https://external-preview.redd.it/0lW663gYvMnqjUD5MdIiYe3pnroW577J1vbMr0OwOYw.jpg?width=640&crop=smart&auto=webp&s=77e25fb1ebd48f1ddef5a6ec2986ca2d4a9aa504 submitted by /u/CodePerfect
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it actually possible to hack the servers at area 51?

Like how would you even start if you did?

submitted by /u/VSK-1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Where can I find pentest reports similar to reports from Cure53?
https://www.reddit.com/r/Pentesting/comments/nmpkx9/where_can_i_find_pentest_reports_similar_to/

Cure53 published a lot of their pentest reports on their website. Can someone recommend me other team that make their pentest reports public too. submitted by /u/trieulieuf9 (https://www.reddit.com/user/trieulieuf9)
[link] (https://www.reddit.com/r/Pentesting/comments/nmpkx9/where_can_i_find_pentest_reports_similar_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/nmpkx9/where_can_i_find_pentest_reports_similar_to/)

___________________________
@hacking_Attack
@Hacking_Video