Hello everyone. I hope everyone is doing great :)Continue reading on Medium » (https://anishkashukla.medium.com/an-easy-html-injection-c1c6ab6ff05?source=rss------bug_bounty-5)
An easy HTML Injection
Hello everyone. I hope everyone is doing great :)Continue reading on Medium »
Read more...
Hello everyone. I hope everyone is doing great :)Continue reading on Medium »
Read more...
How do you get your first internship in cyber security?
Hello there, everyone. I hope you’re all doing well. If you are a college student looking for an internship, this blog can assist you in…Continue reading on Medium »
Read more...
Hello there, everyone. I hope you’re all doing well. If you are a college student looking for an internship, this blog can assist you in…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Robo de contraseñas 101 — Windows
https://cdn-images-1.medium.com/max/600/1*vkI2c02M1i8DmoAGtlc2Ag.jpeg
La contraseña de Windows es un buen punto de partida para empezar con el crackeado de contraseñas
Continue reading on Medium »
Robo de contraseñas 101 — Windows
https://cdn-images-1.medium.com/max/600/1*vkI2c02M1i8DmoAGtlc2Ag.jpeg
La contraseña de Windows es un buen punto de partida para empezar con el crackeado de contraseñas
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Certificaciones enfocadas en la seguridad web
eWPT: https://elearnsecurity.com/product/ewpt-certification/
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Certificaciones enfocadas en la seguridad web
eWPT: https://elearnsecurity.com/product/ewpt-certification/
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Certificaciones enfocadas en la seguridad web
eWPT: https://elearnsecurity.com/product/ewpt-certification/
How do you get your first internship in cyber security?
https://vasuyadav0786.medium.com/how-do-you-get-your-first-internship-in-cyber-security-131d70945463?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://vasuyadav0786.medium.com/how-do-you-get-your-first-internship-in-cyber-security-131d70945463?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
How do you get your first internship in cyber security?
Hello there, everyone. I hope you’re all doing well. If you are a college student looking for an internship, this blog can assist you in…
Hello there, everyone. I hope you’re all doing well.
If you are a college student looking for an internship, this blog can assist you in…Continue reading on Medium » (https://vasuyadav0786.medium.com/how-do-you-get-your-first-internship-in-cyber-security-131d70945463?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
If you are a college student looking for an internship, this blog can assist you in…Continue reading on Medium » (https://vasuyadav0786.medium.com/how-do-you-get-your-first-internship-in-cyber-security-131d70945463?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
How do you get your first internship in cyber security?
Hello there, everyone. I hope you’re all doing well. If you are a college student looking for an internship, this blog can assist you in…
hacking: security in practice
Typical story become intriguing
Hi, that's quite a typical story but there is a catch and I didn't find a better place to post this and I'm curious as how someone did that, if you think of an idea.
Someone connected to my FB account, he used it, changed PP and proceed to add some friends.
I receive a notification about an unusual activity.
I connect to my account, change my password (by something completely different but that i already used in the past) and disconnect all devices thinking that would be enough.
But I get a notification the same day saying he connected again (same IP same location same user-agent). There I start to be doubtful but simply thought that he got the older one and tried it.
I proceed to connect again, change my password (again with something different (and this time that I never used anywhere else) and proceed to enable 2FA through SMS thinking I would be definitely done with this problem.
But there it's even more confusing, I again get a notification that he connected.
I'm only using 2 devices at the moment, an Android phone and a chromebook. All of them are quite well managed and my password is only stored on device and sync through my google account. My google account is well secured and only those 2 devices are connected to it (google activity).
My SMS stays on my phone and I don't use any third party app for SMS (nor you can see them on telecom website). There is 5 apps having access to my SMS and they all are from android stock (messenger is not one of them if you wonder).
I now changed my password again and switched to third party authenticator but i'm curious if you have any idea how this was done ?
Also what measure do your recommend me to take about my 100+ others accounts ?
submitted by /u/Bjr49000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Typical story become intriguing
Hi, that's quite a typical story but there is a catch and I didn't find a better place to post this and I'm curious as how someone did that, if you think of an idea.
Someone connected to my FB account, he used it, changed PP and proceed to add some friends.
I receive a notification about an unusual activity.
I connect to my account, change my password (by something completely different but that i already used in the past) and disconnect all devices thinking that would be enough.
But I get a notification the same day saying he connected again (same IP same location same user-agent). There I start to be doubtful but simply thought that he got the older one and tried it.
I proceed to connect again, change my password (again with something different (and this time that I never used anywhere else) and proceed to enable 2FA through SMS thinking I would be definitely done with this problem.
But there it's even more confusing, I again get a notification that he connected.
I'm only using 2 devices at the moment, an Android phone and a chromebook. All of them are quite well managed and my password is only stored on device and sync through my google account. My google account is well secured and only those 2 devices are connected to it (google activity).
My SMS stays on my phone and I don't use any third party app for SMS (nor you can see them on telecom website). There is 5 apps having access to my SMS and they all are from android stock (messenger is not one of them if you wonder).
I now changed my password again and switched to third party authenticator but i'm curious if you have any idea how this was done ?
Also what measure do your recommend me to take about my 100+ others accounts ?
submitted by /u/Bjr49000
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Typical story become intriguing
Hi, that's quite a typical story but there is a catch and I didn't find a better place to post this and I'm curious as how someone did that, if...
hacking: security in practice
Doubts
Guys, Let say there's a malware affected Android device and another non infected phone is connected for internet through that affect device's wifi hotspot. Now in this scenario, Can virus spread throughout the hotspot to non infected device?
submitted by /u/Annie_me1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Doubts
Guys, Let say there's a malware affected Android device and another non infected phone is connected for internet through that affect device's wifi hotspot. Now in this scenario, Can virus spread throughout the hotspot to non infected device?
submitted by /u/Annie_me1
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Doubts
Guys, Let say there's a malware affected Android device and another non infected phone is connected for internet through that affect device's wifi...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
GitHub’s new policies allow removal of PoC exploits used in attacks
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg GitHub’s new policies allow removal of PoC exploits used in attacksPost Views: 45
Reading Time: 1 Minute
GitHub announced on Friday their updated community guidelines that explain how the company will deal with exploits and malware samples hosted on their service.
To give some background behind the new policy changes, security researcher Nguyen Jang uploaded a proof-of-concept exploit (PoC) to GitHub in March for the Microsoft Exchange ProxyLogon vulnerability.
Soon after uploading the exploit, Jang received an email from Microsoft-owned GitHub stating that PoC exploit was removed as it violated the Acceptable Use Policies.
In a statement to BleepingComputer, GitHub said they took down the PoC to protect Microsoft Exchange servers that were being heavily exploited at the time using the vulnerability.
“We understand that the publication and distribution of proof of concept exploit code has educational and research value to the security community, and our goal is to balance that benefit with keeping the broader ecosystem safe. In accordance with our Acceptable Use Policies, GitHub disabled the gist following reports that it contains proof of concept code for a recently disclosed vulnerability that is being actively exploited.” – GitHub.
However, GitHub faced immediate backlash from security researchers who felt that GitHub was policing the disclosure of legitimate security research simply because it was affecting a Microsoft product.
See Also: Google PPC Ads Used to Deliver Infostealers GitHub releases updated guidelinesIn April, GitHub issued a ‘call for feedback‘ to the cybersecurity community regarding their policies for malware and exploits hosted on GitHub.
After a month of input, GitHub officially announced yesterday that repositories created to host malware for malicious campaigns, act as a command and control server, or are used to distribute malicious scripts, are prohibited.
However, the uploading of PoC exploits and malware are permitted as long as they have a dual-user purpose.
In the context of malware and exploits, dual-use means content that can be used for the positive sharing of new information and research while at the same time can also be used for malicious purposes.
The key changes added to the GitHub guidelines are summarized below:
* We explicitly permit dual-use security technologies and content related to research into vulnerabilities, malware, and exploits. We understand that many security research projects on GitHub are dual-use and broadly beneficial to the security community. We assume positive intention and use of these projects to promote and drive improvements across the ecosystem. This change modifies previously broad language that could be misinterpreted as hostile toward projects with dual-use, clarifying that such projects are welcome.
* We have clarified how and when we may disrupt ongoing attacks that are leveraging the GitHub platform as an exploit or malware content delivery network (CDN). We do not allow use of GitHub in direct support of unlawful attacks that cause technical harm, which we’ve further defined as overconsumption of resources, physical damage, downtime, denial of service, or data loss.
* We made clear that we have an appeals and reinstatement process directly in this policy. We allow our users to appeal decisions to restrict their content or account access. This is especially important in the security research context, so we’ve very clearly and directly called out the [...]
___________________________
@hacking_Attack
@Hacking_Video
GitHub’s new policies allow removal of PoC exploits used in attacks
https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg GitHub’s new policies allow removal of PoC exploits used in attacksPost Views: 45
Reading Time: 1 Minute
GitHub announced on Friday their updated community guidelines that explain how the company will deal with exploits and malware samples hosted on their service.
To give some background behind the new policy changes, security researcher Nguyen Jang uploaded a proof-of-concept exploit (PoC) to GitHub in March for the Microsoft Exchange ProxyLogon vulnerability.
Soon after uploading the exploit, Jang received an email from Microsoft-owned GitHub stating that PoC exploit was removed as it violated the Acceptable Use Policies.
In a statement to BleepingComputer, GitHub said they took down the PoC to protect Microsoft Exchange servers that were being heavily exploited at the time using the vulnerability.
“We understand that the publication and distribution of proof of concept exploit code has educational and research value to the security community, and our goal is to balance that benefit with keeping the broader ecosystem safe. In accordance with our Acceptable Use Policies, GitHub disabled the gist following reports that it contains proof of concept code for a recently disclosed vulnerability that is being actively exploited.” – GitHub.
However, GitHub faced immediate backlash from security researchers who felt that GitHub was policing the disclosure of legitimate security research simply because it was affecting a Microsoft product.
See Also: Google PPC Ads Used to Deliver Infostealers GitHub releases updated guidelinesIn April, GitHub issued a ‘call for feedback‘ to the cybersecurity community regarding their policies for malware and exploits hosted on GitHub.
After a month of input, GitHub officially announced yesterday that repositories created to host malware for malicious campaigns, act as a command and control server, or are used to distribute malicious scripts, are prohibited.
However, the uploading of PoC exploits and malware are permitted as long as they have a dual-user purpose.
In the context of malware and exploits, dual-use means content that can be used for the positive sharing of new information and research while at the same time can also be used for malicious purposes.
The key changes added to the GitHub guidelines are summarized below:
* We explicitly permit dual-use security technologies and content related to research into vulnerabilities, malware, and exploits. We understand that many security research projects on GitHub are dual-use and broadly beneficial to the security community. We assume positive intention and use of these projects to promote and drive improvements across the ecosystem. This change modifies previously broad language that could be misinterpreted as hostile toward projects with dual-use, clarifying that such projects are welcome.
* We have clarified how and when we may disrupt ongoing attacks that are leveraging the GitHub platform as an exploit or malware content delivery network (CDN). We do not allow use of GitHub in direct support of unlawful attacks that cause technical harm, which we’ve further defined as overconsumption of resources, physical damage, downtime, denial of service, or data loss.
* We made clear that we have an appeals and reinstatement process directly in this policy. We allow our users to appeal decisions to restrict their content or account access. This is especially important in the security research context, so we’ve very clearly and directly called out the [...]
___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking GitHub’s new policies allow removal of PoC exploits used in attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg GitHub’s new policies allow removal of PoC exploits used in…
ability for affected users to appeal action taken against their content.
* We’ve suggested a means by which parties may resolve disputes prior to escalating and reporting abuse to GitHub. This appears in the form of a recommendation to leverage an optional SECURITY.md file for the project to provide contact information to resolve abuse reports. This encourages members of our community to resolve conflicts directly with project maintainers without requiring formal GitHub abuse reports.
See Also: Offensive Security Tool: Pacu – The Amazon Web Services Exploitation Framework While dual-use content is allowed, the new GitHub guidelines around PoCs and malware states that they retain the right to remove dual-use content, such as exploits or malware, to disrupt active attacks or malware campaigns utilizing GitHub.
“In rare cases of very widespread abuse of dual use content, we may restrict access to that specific instance of the content to disrupt an ongoing unlawful attack or malware campaign that is leveraging the GitHub platform as an exploit or malware CDN. In most of these instances, restriction takes the form of putting the content behind authentication, but may, as an option of last resort, involve disabling access or full removal where this is not possible (e.g. when posted as a gist). We will also contact the project owners about restrictions put in place where possible.
Restrictions are temporary where feasible, and do not serve the purpose of purging or restricting any specific dual use content, or copies of that content, from the platform in perpetuity. While we aim to make these rare cases of restriction a collaborative process with project owners, if you do feel your content was unduly restricted, we have an appeals process in place.” – GitHub. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat GitHub states that they continue to support community feedback regarding their policies to continue improving their policies.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-2-90x90.png Google PPC Ads Used to Deliver Infostealers3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-90x90.png Researchers Uncover Hacking Operations Targeting Government Entities in South Korea4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ransomware-payment-90x90.jpg Cyber-Insurance Fuels Ransomware Payment Surge5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/banner-2021.2-release-90x90.png Kali Linux 2021.2 Release (Kaboxer, Kali-Tweaks, Bleeding-Edge & Privileged Ports)6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ezgif.com-gif-maker-90x90.jpg Cyber attack hits JBS meat works in Australia, North America6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-1-90x90.jpg HPE Fixes Critical Zero-Day in Server Management Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/vmware-patch-90x90.jpg VMware Sounds Ransomware Alarm Over Critical Severity Bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-6-90x90.png PDF Feature ‘Certified’ Widely Vulnerable to Attack2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/vulnerability-e1621953424713-90x90.jpg Pulse Secure VPNs Get Quick Fix for Critical RCE2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-5-90x90.png 100M Android Users Hit By Rampant Cloud Leaks2 weeks ago
The post GitHub’s new policies allow removal of PoC exploits used in attacks first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
* We’ve suggested a means by which parties may resolve disputes prior to escalating and reporting abuse to GitHub. This appears in the form of a recommendation to leverage an optional SECURITY.md file for the project to provide contact information to resolve abuse reports. This encourages members of our community to resolve conflicts directly with project maintainers without requiring formal GitHub abuse reports.
See Also: Offensive Security Tool: Pacu – The Amazon Web Services Exploitation Framework While dual-use content is allowed, the new GitHub guidelines around PoCs and malware states that they retain the right to remove dual-use content, such as exploits or malware, to disrupt active attacks or malware campaigns utilizing GitHub.
“In rare cases of very widespread abuse of dual use content, we may restrict access to that specific instance of the content to disrupt an ongoing unlawful attack or malware campaign that is leveraging the GitHub platform as an exploit or malware CDN. In most of these instances, restriction takes the form of putting the content behind authentication, but may, as an option of last resort, involve disabling access or full removal where this is not possible (e.g. when posted as a gist). We will also contact the project owners about restrictions put in place where possible.
Restrictions are temporary where feasible, and do not serve the purpose of purging or restricting any specific dual use content, or copies of that content, from the platform in perpetuity. While we aim to make these rare cases of restriction a collaborative process with project owners, if you do feel your content was unduly restricted, we have an appeals process in place.” – GitHub. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat GitHub states that they continue to support community feedback regarding their policies to continue improving their policies.
Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-2-90x90.png Google PPC Ads Used to Deliver Infostealers3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-90x90.png Researchers Uncover Hacking Operations Targeting Government Entities in South Korea4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ransomware-payment-90x90.jpg Cyber-Insurance Fuels Ransomware Payment Surge5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/banner-2021.2-release-90x90.png Kali Linux 2021.2 Release (Kaboxer, Kali-Tweaks, Bleeding-Edge & Privileged Ports)6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/ezgif.com-gif-maker-90x90.jpg Cyber attack hits JBS meat works in Australia, North America6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-1-90x90.jpg HPE Fixes Critical Zero-Day in Server Management Software1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/vmware-patch-90x90.jpg VMware Sounds Ransomware Alarm Over Critical Severity Bug1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-6-90x90.png PDF Feature ‘Certified’ Widely Vulnerable to Attack2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/vulnerability-e1621953424713-90x90.jpg Pulse Secure VPNs Get Quick Fix for Critical RCE2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-5-90x90.png 100M Android Users Hit By Rampant Cloud Leaks2 weeks ago
The post GitHub’s new policies allow removal of PoC exploits used in attacks first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Story of my first cash bounty on hackerone.
https://infosecwriteups.com/story-of-my-first-cash-bounty-on-hackerone-acad282ae962?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://infosecwriteups.com/story-of-my-first-cash-bounty-on-hackerone-acad282ae962?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Story of my first cash bounty on hackerone.
Hello again bugbounty community! My name is Vedant(Also known as Vegeta on Twitter😁) and I’m a cybersecurity enthusiast and an aspiring…