Password Reset Token Disclosure[Chilexpress]

This must be one of the most incredible vulnerabilities I have come across so far. Mainly because Chilexpress is a large company that…Continue reading on Hacking/Security »
Read more...

Password Reset Token Disclosure[Chilexpress]
https://medium.com/hacking-info-sec/password-reset-token-disclosure-chilexpress-88b53f963851?source=rss------bug_bounty-5

This must be one of the most incredible vulnerabilities I have come across so far. Mainly because Chilexpress is a large company that…Continue reading on Hacking/Security » (https://medium.com/hacking-info-sec/password-reset-token-disclosure-chilexpress-88b53f963851?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Payment Card-Skimming Campaign Now Targeting Websites in North America

"Silent Skimmer" is a technically complex campaign that has successfully targeted online businesses in the Asia Pacific region for over a year.

Dark Reading: Attacks/Breaches
Microsoft Azure Data Leak Exposes Dangers of File-Sharing Links

Shared Access Signature (SAS) link exposed a storage bucket with 38TB of private data, including passwords, Teams messages, and the backups of two Microsoft AI research employees' workstations.

Dark Reading: Attacks/Breaches
Security Conferences Keep Us Honest

Conferences are where vendors and security researchers meet face to face to address problems and discuss solutions — in public.

hacking: security in practice
what percentage of white hat hackers, ethical hackers, penetration testers, or red teamers are freelance?

So I'm thinking a freelance ethical hacking career would be perfect. I think I would strongly prefer it because I can somewhat manage by own business and clients and I don't have to stick with one company for ten whole years. I think freelance is also good for having multiple careers.

I also would be willing to do entry level help desk stuff via freelance, but I'm wondering if I even need to. Maybe I can just work on ethical hacking skills and go.

Do you think that this is valid? I'm currently learning Nmap on HTB Academy and I'm thinking of spending a year or two working on my skills to get good at hacking on two or three platforms and earn a few pentesting certs just because I think it would be a much better way to spend my time than for example a masters degree.

Please be honest. I am already CCNA and A+ certified.

Please don't give me an answer about how to get good at hacking. What I'm asking is how much market is there for freelance white hats?

submitted by /u/notburneddown
[link] [comments]

Hacking on Medium
Security Engineer role in manageing Tools

Configuration and Fine-tuning of Security Tools

Continue reading on Medium »

Hacking on Medium
Password Reset Token Disclosure[Chilexpress]

https://cdn-images-1.medium.com/max/1231/1*3YZ7_HoN-HD8Qc5qQIF2GA.png
This must be one of the most incredible vulnerabilities I have come across so far. Mainly because Chilexpress is a large company that…

Continue reading on Hacking/Security »

OTP Bypass leads to Account Creation
https://medium.com/@b.jaga17122001/otp-bypass-leads-to-account-creation-2102d3c13c53?source=rss------bug_bounty-5

Hello everyone 🤠 !!! Hope all are good and fine. Today I’m back with my fourth write-up which is OTP bypass (or) How I managed to hack…Continue reading on Medium » (https://medium.com/@b.jaga17122001/otp-bypass-leads-to-account-creation-2102d3c13c53?source=rss------bug_bounty-5)

Red team in 30 days?
https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/

<!-- SC_OFF -->Hackers, Can you please suggest some red team activities that can be done in a 30 days project? For now, I am thinking of attacking external IT infra and some simulations like Data Exfil.. <!-- SC_ON --> submitted by /u/Fantastic_Clock_5401 (https://www.reddit.com/user/Fantastic_Clock_5401)
[link] (https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/) [comments] (https://www.reddit.com/r/redteamsec/comments/16mfl60/red_team_in_30_days/)

OTP Bypass leads to Account Creation

Hello everyone 🤠 !!! Hope all are good and fine. Today I’m back with my fourth write-up which is OTP bypass (or) How I managed to hack…Continue reading on Medium »
Read more...