Hacking on Medium
HACKING!!!

ఈ కాలం లో ఎక్కడ చుసిన ఒకటే మాట… మా ఫోన్ హాక్ అయింది,.. మా సోషల్ మీడియా అకౌంట్ హాక్ అయింది, మా బ్యాంకు అకౌంట్ హాక్ అయింది అని ఒకటే ఆందోళన .

Continue reading on Medium »

Hacking on Medium
How I Discovered Content Spoofing in PayPal in Just 15 Minutes.

https://cdn-images-1.medium.com/max/900/0*g-H-zstIankMaL57.jpg
While I was reading a write-up about a bug hunter who explained how he found CSRF in PayPal, it ended up inspiring me to search for…

Continue reading on Medium »

Yet another question about certifications
https://www.reddit.com/r/redteamsec/comments/15po2qj/yet_another_question_about_certifications/

<!-- SC_OFF -->Due to the cost of the OSCP now and no choice of 30/60/90 day labs and all the rest that comes along with that certification, I was wondering about other options. Just a little background is that I have no work experience in this industry really at all. I plan on getting the CRTP and then CRTE, then possibly Red Team Ops II and maybe a few of the advanced Sektor7 certifications for advanced malware development. With zero 'professional' experience + the certs I mentioned (Im shooting for around 4-5 total CRTP, CRTE, RTO II, 2-3 Sektor7) will I really be selling myself short to how I look to potential employers by having these but not the OSCP? Looking for anywhere from Jr. Pentester to a Redteam position I'm just curious how employers would view this sort of applicant. Thanks! <!-- SC_ON --> submitted by /u/Foreign_Tea6900 (https://www.reddit.com/user/Foreign_Tea6900)
[link] (https://www.reddit.com/r/redteamsec/comments/15po2qj/yet_another_question_about_certifications/) [comments] (https://www.reddit.com/r/redteamsec/comments/15po2qj/yet_another_question_about_certifications/)

Should I take CRTO?
https://www.reddit.com/r/redteamsec/comments/15pqgoc/should_i_take_crto/

<!-- SC_OFF -->Is it worth taking CRTO? Do companies ask for CRTO when hiring? <!-- SC_ON --> submitted by /u/Turbulent-Slip8676 (https://www.reddit.com/user/Turbulent-Slip8676)
[link] (https://www.reddit.com/r/redteamsec/comments/15pqgoc/should_i_take_crto/) [comments] (https://www.reddit.com/r/redteamsec/comments/15pqgoc/should_i_take_crto/)

hacking: security in practice
Is it legal

Curious if it’s legal for private citizens to hack your personal cell phone, read all your emails l, and message, track your location things like that ?

submitted by /u/Refrigerationok
[link] [comments]

hacking: security in practice
Hello, new to this sub

My school recently put me in a different course than i requested and refused to change it. Is there any way to exploit schoology or powerschool to make me in a different class?

submitted by /u/BelugaBoi-182
[link] [comments]

hacking: security in practice
Trying to pull an ip but don't know how.

Alright before i start talking n stuff. don't be mad at me, im not a guy who pulls people's ip's for no reason, im trying to get revenge on a person who pulled my ip from thin air. So how would i pull that person's ip. Some software like wireshark or something like that???

submitted by /u/Mob1leN00b_
[link] [comments]

How I Discovered Over 40+ Impactful Vulnerabilities Within 1 Hour, Just for Fun!

Hello, I’m Takshal, aka tojojo. I hope you all are doing well. Today, I’m excited to share my journey of finding more than 40+ impactful…Continue reading on InfoSec Write-ups »
Read more...

How I Discovered Over 40+ Impactful Vulnerabilities Within 1 Hour, Just for Fun!
https://infosecwriteups.com/how-i-discovered-over-40-impactful-vulnerabilities-within-1-hour-just-for-fun-a26eeaa75461?source=rss------bug_bounty-5

Hello, I’m Takshal, aka tojojo. I hope you all are doing well. Today, I’m excited to share my journey of finding more than 40+ impactful…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-discovered-over-40-impactful-vulnerabilities-within-1-hour-just-for-fun-a26eeaa75461?source=rss------bug_bounty-5)

Hacking on Medium
Python 101 for Hackers by Riley Kidd | TCM Security

https://cdn-images-1.medium.com/max/875/0*4lk8LOhWdG1QO3Lm
Quick Disclaimer:-
I) I do not receive any kind of compensation from anyone or any organization for sharing my experience in his blog.
 — -

Continue reading on Medium »

Improper Neutralization of Input During Web Page Generation, Stored XSS in KiwiTCMS…

Hi everyone 👋🏻, Today I would like to share a vulnerability I found in KiwiTCMS. also my first CVE (CVE-2023–36809)Continue reading on Medium »
Read more...

Improper Neutralization of Input During Web Page Generation, Stored XSS in KiwiTCMS…
https://medium.com/@mahshooq/improper-neutralization-of-input-during-web-page-generation-stored-xss-in-kiwitcms-6d798f74d71?source=rss------bug_bounty-5