Hacking on Medium
Russian SolarWinds Hackers Launch new Attack as Scientists Reveal The Most Detailed Dark Matter Map…

https://cdn-images-1.medium.com/max/2600/0*Gyz4ZgIiPg7QSEPX
Nobelium, the Russian-based group behind the massive SolarWinds hack, launches a new campaign that appears to target over 150…

Continue reading on students x students »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Would you be interested in an ancient IBM RS/6000 HDD image from a fortune 100 company?

My hobby is collecting vintage computer equipment, mostly ancient UNIX workstations. I recently purchased an old IBM rs/6000 from Ebay and to my surprise the HDD was still in there and not whipped clean. I managed to gain access to the root account with some recovery tools and found out to that this workstations once belonged to Honeywell International. To be more precise it belonged to the European branch of Honeywell ,judging from the workstation's set domain "honeywelleurope.com".

So are any of you here interested on getting your hands on that HDD image before I erase the disk?

I know this is a "grey" area ,but the data sitting on that HDD is 24 - 25 year old by now and also this exact Honeywell domain seems to be dead ,so I don't believe that sharing such data is illegal or harmful towards anyone.

submitted by /u/prussian_rock
[link] [comments]

hacking: security in practice
Quation about personal data

Context: A Instagram celebrity in my country got harassed by a hater. She had enough and set a ~1000$ bounty for the hater's personal information.

Does this count as dxing even if the personal data isn't publicly shared?

Edit: the title supposed to be "Question"

submitted by /u/Zierim
[link] [comments]

hacking: security in practice
OfferUp scam

So I got scammed out of 200$ on OfferUp I have pictures and a general location is there anything somebody can do

submitted by /u/aboldachi
[link] [comments]

Hunting for Bugs in Password Reset Feature -2021

Hey Guys!! This is my first post, In this blog post I will explain Hunting for password reset related bugs of an application. So, before…Continue reading on Medium »
Read more...

Hunting for Bugs in Password Reset Feature -2021
https://sm4rty.medium.com/hunting-for-bugs-in-password-reset-feature-2021-3def1b391bef?source=rss------bug_bounty-5

Hey Guys!! This is my first post, In this blog post I will explain Hunting for password reset related bugs of an application. So, before…Continue reading on Medium » (https://sm4rty.medium.com/hunting-for-bugs-in-password-reset-feature-2021-3def1b391bef?source=rss------bug_bounty-5)

Hacking on Medium
HTB: HTB Console [Pwn]

https://cdn-images-1.medium.com/max/600/1*7C4MAd-w-q19OfD-W8wRNg.png
HTB Console is a retired pwn challenge of Hack The Box.

Continue reading on Medium »

Hacking on Medium
Hunting for Bugs in Password Reset Feature -2021

https://cdn-images-1.medium.com/max/800/0*EJFLsCGcgt1SX2CZ
Hey Guys!! This is my first post, In this blog post I will explain Hunting for password reset related bugs of an application. So, before…

Continue reading on Medium »

We’re growing a pen test team and looking for ideas for hash cracking rig. What are others using for HW/SW cracking rigs? Thx
https://www.reddit.com/r/Pentesting/comments/novs8z/were_growing_a_pen_test_team_and_looking_for/

submitted by /u/acidopera (https://www.reddit.com/user/acidopera)
[link] (https://www.reddit.com/r/Pentesting/comments/novs8z/were_growing_a_pen_test_team_and_looking_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/novs8z/were_growing_a_pen_test_team_and_looking_for/)

Clarification on Black Box Pentesting
https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/

<!-- SC_OFF -->Friends, Little Confused about Black Box Pentesting. In black box Penetration tester won't be getting any information about the target except an URL or an IP right? If the URL contains only just a Login Panel.
What steps he can do next. Social engineering or Bruteforcing. What Next? Can anyone tell me what to do in BlackBox at this situation. <!-- SC_ON --> submitted by /u/SecSolutions_16 (https://www.reddit.com/user/SecSolutions_16)
[link] (https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/noxxxn/clarification_on_black_box_pentesting/)

HTTP PARAMETER POLLUTION
https://vardhanchalla652.medium.com/http-parameter-pollution-20b6fd8d53b8?source=rss------bug_bounty-5

Kali Linux Tutorials
Mediator : An Extensible, End-To-End Encrypted Reverse Shell With A Novel Approach To Its Architecture

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a “mediator” server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create plugins to expand the functionality of the […]

The post Mediator : An Extensible, End-To-End Encrypted Reverse Shell With A Novel Approach To Its Architecture appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

Automating Burp Suite -1 | Capturing CSRF Token Via Macro

Using Burp’s Session Handling Rules with anti-CSRF Tokens
Read more...

Hacking on Medium
what is a vpn ? and why do you need it ?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video