The differences between the same-site and the same-origin :
https://micr0.medium.com/the-differences-between-the-same-site-and-the-same-origin-120aef17564?source=rss------bug_bounty-5

Hi, I will talk about the differences between the same-site and the same-origin First let’s know the site and the origin? the definition…Continue reading on Medium » (https://micr0.medium.com/the-differences-between-the-same-site-and-the-same-origin-120aef17564?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
The Case for a Federal Cyber-Insurance Backstop

By stepping in to provide aid, the federal government could help protect companies, insurers, and the economy from the impact of a widespread, catastrophic cyberattack.

Dark Reading: Attacks/Breaches
Cisco Touts New AI-Based Security, SSE Features

Cisco laid out its plans for artificial intelligence (AI) and a vision for unified cloud security during Cisco Live 2023.

hacking: security in practice
Brute Force WordPress by using Metasploit Framework

https://external-preview.redd.it/Tjxe2BqrPAtKcsXQOx-j-nnSPYIMn0W3flUHqmdtOqg.jpg?width=320&crop=smart&auto=webp&s=c99fda4cf705166b8d3afbcea122f19a38132604 submitted by /u/Dankshiki
[link] [comments]

hacking: security in practice
Hello, insight on prison hacking?

I'm in a house with cameras, possibly hidden. Hidden audio, kids (mine) Several amps, speakers, cctv things.... Of course it appears like a 70 year old woman's home but she passed away and her son now inhabits it. Spent time in prison. There's a lot more to it but I would like to know what's going on. Something is off. It doesn't feel normal to me. He always knows too much. He said there's no wifi on anymore. He has Bluetooth devices everywhere. Watches that beep placed amongst the house. This dude is so cocky. He claims to not know anything besides basic stuff. He acts like he's stupid. The last woman he had went crazy and took apart all the electronics and cameras supposedly.... I think he was just swapping her out for me. I've been pretty isolated. Lost my job. In some trouble. Now, I think I'm being crazy thinking more is going on. They have little boards with stuff rigged up on them. So I don't know if I'm in the right spot or not.

Question ❓⁉️ Could the cameras be streamed on the blackweb? He has devotees help rig stuff up... I could really use some insight or help on getting to the bottom of this. I ain't tech savvy but I have an idea of what things are and their intended purpose but not a full knowledge based to know what CAN be done with them.

This morning all the cameras that were on the monitor are showing they aren't recording. They usually don't show that. Last night I saw him looking at footage of (I think me) and he wouldn't show it to me. But he told me the camera in the bedroom is broken. I think he took the camera and put a little one inside it. There's charging chords and card readers... Conversion chords HDMI to usb-c type shit.

I'm sorry if I posted in the wrong section.

Edit: Another question which goes to my title 🤦🏼‍♀️ Do people learn this stuff in prison? I've been working with him for 10 years since he got out. He claims he doesn't know how to read. I tried to get his court records but I couldn't. They weren't public. I'm just wondering if he was doing this stuff before or after.

submitted by /u/Crafty-Blackberry-66
[link] [comments]

hacking: security in practice
CVE-2023-34362 is not just SQLi - they reversed it and found full RCE as well...

https://external-preview.redd.it/iBQqoaYDt5AGaIJryU4ocDuCzGu73GUZy49wZNEtqJc.jpg?width=108&crop=smart&auto=webp&s=b1b4092a93cc70b76b927b623126ce800fb11af4 submitted by /u/DrinkMoreCodeMore
[link] [comments]

Cacheblaster - A web cache poisoning DoS tool
https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/

<!-- SC_OFF -->Hey hackers, today I’m introducing a tool - Cacheblaster for testing web cache poisoning DoS attacks. The details of the payload, attack and tool can be found here here: https://github.com/n0mi1k/cacheblaster The attack goes like this: By forcing an error using manipulated HTTP headers forces an error response, and if the server caches it, it will cause a DoS for other users accessing the site as they receive the error response. <!-- SC_ON --> submitted by /u/n0mi1k (https://www.reddit.com/user/n0mi1k)
[link] (https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/) [comments] (https://www.reddit.com/r/Pentesting/comments/143edwx/cacheblaster_a_web_cache_poisoning_dos_tool/)

Information disclosure
https://chanukyapl.medium.com/information-disclosure-3f30d24448cf?source=rss------bug_bounty-5

Check points for Information disclosureContinue reading on Medium » (https://chanukyapl.medium.com/information-disclosure-3f30d24448cf?source=rss------bug_bounty-5)

Path traversal to RCE — Openfire — CVE-2023–32315
https://learningsomecti.medium.com/path-traversal-to-rce-openfire-cve-2023-32315-6a8bf0285fcc?source=rss------bug_bounty-5

The article contains analysis on how remote code execution was achieved from Path traversal vulnerability on Openfire — CVE-2023–32315.Continue reading on Medium » (https://learningsomecti.medium.com/path-traversal-to-rce-openfire-cve-2023-32315-6a8bf0285fcc?source=rss------bug_bounty-5)

Hacking on Medium
Top 10 Certifications in Digital Forensics: A Guide to Getting Started in This Growing Field |…

https://cdn-images-1.medium.com/max/1400/0*3AZ-3BKKJo3zVN3F.jpg
These certifications can help you gain the skills and knowledge you need to build a successful career in digital forensics

Continue reading on Medium »

Hacking on Medium
How Ethical Hacking and Cybersecurity Careers becoming Guardians of the Digital Age?

The article delves into the rising significance of ethical hacking and cybersecurity careers in the digital age. As technology becomes…

Continue reading on Medium »