Story of my first cash bounty on hackerone.
https://infosecwriteups.com/story-of-my-first-cash-bounty-on-hackerone-acad282ae962?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello again bugbounty community! My name is Vedant(Also known as Vegeta on Twitter😁) and I’m a cybersecurity enthusiast and an aspiring…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/story-of-my-first-cash-bounty-on-hackerone-acad282ae962?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection — WAF Bypass!
https://dewangpanchal98.medium.com/sql-injection-waf-bypass-f546f6fdf5ef?source=rss------bug_bounty-5

After getting lots of requests for bypass WAF in my DMs about my previous writeup. I decided to make writeup. “Knowledge is free”. Without…Continue reading on Medium » (https://dewangpanchal98.medium.com/sql-injection-waf-bypass-f546f6fdf5ef?source=rss------bug_bounty-5)

SQL Injection — WAF Bypass!

After getting lots of requests for bypass WAF in my DMs about my previous writeup. I decided to make writeup. “Knowledge is free”. Without…Continue reading on Medium »
Read more...

Hacking on Medium
THE BRILLIANCE OF iOS.

https://cdn-images-1.medium.com/max/2000/1*JUnEoQ8_R8CbBDeC0UxEIg.png
“An iPod, a phone, an internet mobile communicator... these are NOT three separate devices! And we are calling it iPhone! Today Apple is…

Continue reading on Code TECHNIQ »

Hacking on Medium
JWT Tokens Structure CheatSheet

https://cdn-images-1.medium.com/max/1080/1*yCTBl-Q_xnwa1aH_Squd-A.png
https://hacksheets.in/2021/06/07/jwt-token-structure-quicksheet/

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Solution and explanation of tips for Intigriti’s 0521 XSS challenge — by @GrumpinouT
https://grumpinout.medium.com/solution-and-explanation-of-tips-for-intigritis-0521-xss-challenge-by-grumpinout-7544bad98e59?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This month’s (May 2021) XSS challenge by Intigriti was created by me (with some additions by Inti). In this article, I will explain my…Continue reading on Medium » (https://grumpinout.medium.com/solution-and-explanation-of-tips-for-intigritis-0521-xss-challenge-by-grumpinout-7544bad98e59?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone know how to decrypt luac files

Its a game file used in cocos2d its original extension is lua and it uses sort of xxtea algorithm to encrypt the file. Any reverse engineering geeks here??

submitted by /u/Bigbangstar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
ABPTTS : TCP Tunneling Over HTTP/HTTPS For Web Application Servers

ABPTTS uses a Python client script and a web application server page/package[1] to tunnel TCP traffic over an HTTP/HTTPS connection to a web application server. In other words, anywhere that one could deploy a web shell, one should now be able to establish a full TCP tunnel. This permits making RDP, interactive SSH, Meterpreter, and […]

The post ABPTTS : TCP Tunneling Over HTTP/HTTPS For Web Application Servers appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

RedWarden - Flexible CobaltStrike Malleable Redirector
http://www.kitploit.com/2021/06/redwarden-flexible-cobaltstrike.html

___________________________
@hacking_Attack
@Hacking_Video

RedWarden - Flexible CobaltStrike Malleable Redirector
(previously known as proxy2's (https://github.com/mgeeky/proxy2) malleable_redirector plugin) Let's raise the bar in C2 redirectors IR resiliency, shall we?
Red Teaming business has seen several (https://bluescreenofjeff.com/2016-04-12-combatting-incident-responders-with-apache-mod_rewrite/) different (https://posts.specterops.io/automating-apache-mod-rewrite-and-cobalt-strike-malleable-c2-profiles-d45266ca642) great (https://gist.github.com/curi0usJack/971385e8334e189d93a6cb4671238b10) ideas on how to combat incident responders and misdirect them while offering resistant C2 redirectors network at the same time. This work combines many of those great ideas into a one, lightweight utility, mimicking Apache2 in it's roots of being a simple HTTP(S) reverse-proxy. Combining Malleable C2 profiles understanding, knowledge of bad IP addresses pool and a flexibility of easily adding new inspection and misrouting logic - resulted in having a crafty repellent for IR inspections.

___________________________
@hacking_Attack
@Hacking_Video