BugGyaan Blog
https://bugbaseindia.medium.com/buggyaan-blog-cbd264190911?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Welcome to the BugGyaan Blog!Continue reading on Medium » (https://bugbaseindia.medium.com/buggyaan-blog-cbd264190911?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Alien Face in Antarctica

https://external-preview.redd.it/WU2kOVv1QrwptwRYoOV4LaPGqh57jIeoxDcW3OvJ-Tg.jpg?width=320&crop=smart&auto=webp&s=8f3b57a1202768e0139a4cfe0bc06cd5868009d6 submitted by /u/WickedCartoons
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hacking a windows application

I had bought a few machines from China in the year 2018. They had given us all codes and lifetime support in written document. Last week, one of the machines had a power outage and the PC installed to it stopped working.

It said unable to boot OS select media.

I'm have some basic IT knowledge to figure out the problem is with hard disc. The previous hard disk has enough problems that I cannot creat a clone or take out the software. So I installed a new hard disk with backup software.

Application is asking for registering itself by the OEM. OEM is unable to support. They say their engineer is in Shanghai,not answering message or calls. They also say they are trying but it has been 7 days already and no solution.

Can any one of you help me out ?

To prove I'm an innocent victim I can share the purchase documents of the machine and current live wechat messages and official mails sent.

submitted by /u/thirstyafterquickie
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Entendendo o SQL Injection

O que é SQL injection?Continue reading on Medium »
Read more...

hacking: security in practice
Is it secure to share website sources on Github

It's a generated site made with Hugo. I know that dynamic sites code is not safe to share but is it dangerous with static generated sites too?

submitted by /u/FoC-Raziel
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unmasking Communication Between an Android App and its Server(SSL PINNING BYPASS)

Have you ever been curious about the data an app sends from your phone to its server? You are in the right place, we are going to detail…Continue reading on Medium »
Read more...

Entendendo o SQL Injection
https://leo-teodoro.medium.com/sql-injection-f2e1990cf569?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

O que é SQL injection?Continue reading on Medium » (https://leo-teodoro.medium.com/sql-injection-f2e1990cf569?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Unmasking Communication Between an Android App and its Server(SSL PINNING BYPASS)
https://ndungunjenga96.medium.com/unmasking-communication-between-an-android-app-and-its-server-ssl-pinning-bypass-a470400e73ad?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Have you ever been curious about the data an app sends from your phone to its server? You are in the right place, we are going to detail…Continue reading on Medium » (https://ndungunjenga96.medium.com/unmasking-communication-between-an-android-app-and-its-server-ssl-pinning-bypass-a470400e73ad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Shepard - In Progress Persistent Download/Upload/Execution Tool Using Windows BITS
http://www.kitploit.com/2021/06/shepard-in-progress-persistent.html

___________________________
@hacking_Attack
@Hacking_Video

This is an IN PROGRESS persistance tool using Windows (https://www.kitploit.com/search/label/Windows) Background Intelligent Transfer Service (BITS). Functionality: File Download, File Exfiltration, File Download + Persistent Execution Usage: run shepard.exe as Administrator with the following command line (https://www.kitploit.com/search/label/Command%20Line) arguments -d remoteLocation, writePath: regular file download to a local path of your choice -e remoteLocation, localPath: regular file upload from a local path of your choice (only sends to IIS server, this is a limitation with BITS) -dr remoteLocation, writePath, [optionalFileArgs]: file download to a path of your choice, and will attempt to maintain persitance. The downloaded file will attempt to run with optionalFileArgs and BITS will check back every 30 seconds to make sure the file is still running on the compromised system. Running this executable with no arguments or an incorrect amount of arguments will cause shepard to exit cleanly.
BINDSHELL
The server (victim) is written using C#. It listens on port 6006. Usage: run shepardsbind_serv.exe with no arguments. The client (attacker) is written using Python and takes one argument: the IP address of the victim's machine. Usage: run shepardsbind_recv.py with one argument: Running shepardsbind_recv.py with no arguments will return an error. The prompt will look like: %SBS%
Using them in conjunction
The only executable that must be on the victim's machine is shepard.exe. Host the download bindshell (https://www.kitploit.com/search/label/Bindshell) executable to a publicly accessible place. Shepard will download and run the bindshell executable, and the user can now use the python reciever. If the shell is found and killed, it will restart after 30 seconds. Last steps in progress: finding out how to rerun shepard.exe to redownload in case the shell executable is deleted. Most likely will use a service

Download Shepard (https://github.com/d3adzo/shepard)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BugGyaan Blog

https://cdn-images-1.medium.com/max/600/1*XkF_HyTRl8GzXO9RLY1spA.png
Welcome to the BugGyaan Blog!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video