Hacking on Medium
Open Redirect to Account Takeover

https://cdn-images-1.medium.com/max/829/1*mW5rDI_xpTnUVwxSXMad8A.png
Hi Everyone, this is a very first article from us. First of all, we would like to introduce ourselves. We are z3r0tru5t, a group of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crypto-Beat Down Number 2

https://cdn-images-1.medium.com/max/2600/0*mc5zlUiOeghIwuHY
My second run of bad luck with Crypto-Currency

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Behind the Scene: XSS?

Hey Cyberpunks , I hope you all are doing great in your life and if not, then you are at the right place to at least remove the queries of…Continue reading on Medium »
Read more...

Neptune Mutual Bug Bounty Program

Neptune Mutual platform explores new avenues to creating user-centric hedging products on the blockchain. We aim to attract a steady user…Continue reading on Medium »
Read more...

hacking: security in practice
Just wondering

Is there anyway too take someone’s Microsoft account with just knowing there email address and not password

submitted by /u/Iifu
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SE DOPPP KIT - a social engineering kit with 5 modules and lots of tools

https://external-preview.redd.it/9gy645wxmfzP4kG-qB0kekBZv8UiMuYJMtoajgCXN7I.jpg?width=640&crop=smart&auto=webp&s=b4515f0c5fc950747aa1749485f40f53bbd46472 submitted by /u/TorchedXorph
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
cuaght a pedo

i kniq this dosnt have much to do with hacking. i led on a pedo and got his ip and what phone he is using and all that jazz, i wanna scare the shit out of him by making him think im a pedo hunting orginzation. i have all his info so it will sound rly legit i mean imagine if a stranger on the internet could tell you what phone your using rn

submitted by /u/DismalPublic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Neptune Mutual Bug Bounty Program
https://neptunemutual.medium.com/neptune-mutual-bug-bounty-program-1ce56466ab9b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Neptune Mutual platform explores new avenues to creating user-centric hedging products on the blockchain. We aim to attract a steady user…Continue reading on Medium » (https://neptunemutual.medium.com/neptune-mutual-bug-bounty-program-1ce56466ab9b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Any good checklists for a workstation security audit?
https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/

I'm looking at potentially running a security audit for a company's internal network machines. Are there any good guides/checklists out there that help or anything you can share from your own experience as I've not done one before. In my mind I would be aiming to cover things like unauthenticated access to the network (e.g. plugging I'm a device into a network port in their office), plugging in a rubber ducky into a machine and seeing if I can get anything there. We'd also be looking at authenticated access so checking what access a user has vs what they should have to see if permissions aren't well configured. Any other things? submitted by /u/stevieboy1984 (https://www.reddit.com/user/stevieboy1984)
[link] (https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/) [comments] (https://www.reddit.com/r/Pentesting/comments/nr79og/any_good_checklists_for_a_workstation_security/)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
How no javascript on Browser makes system more secure?

In torr browser the Javascript is removed in safest mode. How no javascript makes website more secure?

submitted by /u/Cybercops786
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
BEST DNM TO EVER EXIST....

Out of these contenders, who you got?

View Poll

submitted by /u/DrDankHaze
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why should you use RustScan instead of nmap? Introduction to RustScan

Hello everyone,

I hope you all are doing great, In this video, I'll be showing you how you can use RustScan, RustScan is a modern day port scanning tool and it is a lot faster than nmap, Hope you guys learn something from it! Peace!

PS. I am very close to 1k Subs, It would be appreciated if you support the channel! Thanks!

https://www.youtube.com/watch?v=WBk9CpsC23E

submitted by /u/Vedant-Bhalgama
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses
http://www.kitploit.com/2021/06/403fuzzer-fuzz-403401ing-endpoints-for.html

___________________________
@hacking_Attack
@Hacking_Video

Fuzz 403ing endpoints (https://www.kitploit.com/search/label/Endpoints) for bypasses
Follow on twitter! @intrudir
This tool will check the endpoint with a couple of headers (https://www.kitploit.com/search/label/Headers) such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path.
e.g. /%2e/test/test2 /test/%2e/test2 /test;/test2/
Usage
usage: 403fuzzer.py [-h] [-u URL] [-m {GET,POST,PUT,PATCH}] [-d DATA_PARAMS] [-c COOKIES] [-H HEADER] [-p PROXY] [-hc HC] [-hl HL] [-sf] [--save SAVE] [-sh] [-su]

use this script to fuzz endpoints that return a 401/403

optional arguments:
-h, --help show this help message and exit
-u URL, --url URL Specify the target URL
-m {GET,POST,PUT,PATCH}, --method {GET,POST,PUT,PATCH}
Specify the HTTP method/verb
-d DATA_PARAMS, --data DATA_PARAMS
Specify data to send with the request.
-c COOKIES, --cookies COOKIES
Specify cookies to use in requests. (e.g., --cookies "cookie1=blah; cookie2=blah")
-H HEADER, --header HEADER
Add headers to your request (e.g., --header "Accept: application/json" --header "Host: example.com"
-p PROXY, --proxy PROXY
Specify a proxy to use fo r requests (e.g., http://127.0.0.1:8080)
-hc HC Hide response code from output, single or comma separated
-hl HL Hide response length from output, single or comma separated
-sf, --smart Enable the smart filter
--save SAVE Saves stuff to a file when you get your specified response code
-sh, --skip-headers Skip testing bypass headers
-su, --skip-urls Skip testing path payloads

Basic examples
python3 403fuzzer.py -u http://example.com/test1/test2/test3/forbidden.html

___________________________
@hacking_Attack
@Hacking_Video