Recon always winsContinue reading on Medium » (https://anirudhmakkar.medium.com/authentication-bypass-easy-p1-in-10-minutes-54d5a2093e54?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I made United Nations Hall of Fame in 3 minutes
https://renganathanofficial.medium.com/how-i-made-united-nations-hall-of-fame-in-3-minutes-b5c87a42c0ee?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I’m Renganathan. I don’t want to waste your time by Introducing myself. If you would like to know me personally, this is my Instagram…Continue reading on Medium » (https://renganathanofficial.medium.com/how-i-made-united-nations-hall-of-fame-in-3-minutes-b5c87a42c0ee?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Thank You for the Introduction. This is some criticism meant well.

This is the introduction to the sub:

https://old.reddit.com/r/hacking/comments/a3oicn/how_to_start_hacking_the_ultimate_two_path_guide/

The post is archived. No new responses are allowed. People might want to point out new information to include.

First Paragraph Last Section:

This isn't for your reckless amusement and shot at recognition with your friends. This is for the betterment of human civilisation. Use your knowledge to solve real-world issues.

Well said. This is not why most are interested in hacking. It is to gain an advantage, a coup, to find something out, to undo a wrong. Could be to fix (teachers often unfairly grade students) school grades. This happens, especially if one is a minority, and the teacher has a bias, it can tick teachers off when the students are smarter and more confident. Or an employer makes payroll mistakes, or pays one less than others for the same work (this is a huge problem that goes back many years). Or from browsing the internet some of the targeted advertisements seem offputting and insulting, one might want to examine the file that is used to serve ads, and to tinker with it to get ads that are entertaining and enjoyable to watch. There likely are many more examples on why someone would get into hacking (aside from stealing which is a big reason).

The intention of hacking is not information security, it is to find out stuff, to 'count coup', to interfere in the activity of the other, to monitor the other, to redress issues, to hurt the other, it is not to improve the other, now there could be some do-good-know-it-alls that do this last bit, and who the fuck tries to improve the other??? so this one could be a problem.

If what was meant was this sub's purpose is 'information security', then make that clear. Do not ignore that the 'dark side' does exist as a reason for hacking to those interested in finding out about hacking.

Third Paragraph and Fourth Paragraph.

Kali is boring. Better to start with renaming your computer PaulRevere and ping the pentagon for a few weeks. They might send something your way without putting you on a watch list. Do not do this unless you are an American, find some other way to start. Back to Kali. Kali can be done by oneself. What is described in the 'team hacking section' might be fun. It requires knowledge that using Kali might provide.

A third point is that the introduction post should be done every six months so that new comments can be made. Redditors new to the sub might have insights that fit in the introduction post.

I suggest you rewrite the introduction with these points in mind.

Again, it is well written, thank you for reading this.

VT

submitted by /u/vteead
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I’m desperate, admin password win 10

Hello, I’ve been trying for hours but I need help, I can’t do it. The pc I use is my school property, so I can use it as I want but I can’t install some programs because I do not know admin password. Does anybody know how to find it or how to set a new one? I really need some of these programs and the school’s technicians won’t notice if the password is different because they won’t use it.

submitted by /u/lbr_crl
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Wordlists

An all in one bug bounty wordlists repository
Read more...

Gundog - Guided Hunting In Microsoft 365 Defender

Gundog provides you with guided hunting in Microsoft 365 Defender. Especially (if not only) for Email and Endpoint Alerts at the moment.Functionality You provide an AlertID (you might received via Email notification) and gundog will then hunt for as much as possible associated data. It does not give you the flexibility of advanced hunting like you have in the portal, but it will give you a quick, first overview of the alert, all associated entities and some enrichment. All the hunting it does is based on the alert timestamp – so we only care about events shortly before, or after the alert. It also provides you with PowerShell objects for each entity it hunted for – like $Network for everything it found related to this alert in the Microsoft 365 Defender DeviceNetworkEvents table. gundog also comes up with some other features that make your life easier: per default, only the most relevant data is displayed (this is the way) it gives you context wherever possible: last AAD Sign-Ins & user’s AAD address network connections can be automatically filtered to display more relevant connections only (get rid of connections to Office 365 e.g.) network connections are enriched with geo location (country & city) in the variables section you can easily adjust most parameters like advanced hunting timeframe of every query In addition it searches for IOCs at other services like abuse.ch, urlscan.io or ip-api.com. I ask you to apply for their paid services if you use them commercially. After first evaluations with gundog, you can continue in the portal to dig deeper into the rabbit hole. Feel free to extend gundog and send me pull requests! For the best psychodelic experience, use Windows Terminal Dracula theme with gundog. Quick usage mandatory parameters:- TenantID- ClientID- ClientSecretOptional parameters:- forgetIncidents(Background: the first thing gundog is doing is to query all incidents and alerts from the incident API from the last 30 days. These are saved to a global variable. If you restart gundog, it will not query all incidents again, unless you set forgetIncidents to true.) Requirements Register an new App in AAD and give it the following permission: (How to register an app) Threat Protection - AdvancedHunting.ReadAll - Incident.Read.All Windows Defender ATP - AdvancedQuery.Read.All - Alert.Read.All - File.Read.All - Ip.Read.All - Url.Read.All - User.Read.All - Vulnerability.Read.All ">Microsoft Graph- Directory.Read.All- IdentityRiskEvent.Read.All- IdentityRiskyUser.Read.All- SecurityEvents.Read.All- User.ReadMicrosoft Threat Protection- AdvancedHunting.ReadAll- Incident.Read.AllWindows Defender ATP- AdvancedQuery.Read.All- Alert.Read.All- File.Read.All- Ip.Read.All- Url.Read.All- User.Read.All- Vulnerability.Read.All For more information visit: https://emptydc.com/2021/02/25/gundog/ Download Gundog
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Story of Google Hall of Fame and Private program bounty worth $$$$
https://basu-banakar.medium.com/story-of-google-hall-of-fame-and-private-program-bounty-worth-53559a95c468?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Infosec Community myself Basavaraj, this my 2nd writeup, the first one is about Hacking scammers(click here to read), I seen many…Continue reading on Medium » (https://basu-banakar.medium.com/story-of-google-hall-of-fame-and-private-program-bounty-worth-53559a95c468?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cross Site Scripting(XSS) In Hidden Parameter.
https://0xshantanukul.medium.com/cross-site-scripting-xss-in-hidden-parameter-47e41f08424e?source=rss------bug_bounty-5

Continue reading on Medium » (https://0xshantanukul.medium.com/cross-site-scripting-xss-in-hidden-parameter-47e41f08424e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Gundog - Guided Hunting In Microsoft 365 Defender
http://www.kitploit.com/2021/06/gundog-guided-hunting-in-microsoft-365.html

___________________________
@hacking_Attack
@Hacking_Video

Gundog provides you with guided hunting in Microsoft 365 Defender. Especially (if not only) for Email (https://www.kitploit.com/search/label/Email) and Endpoint Alerts at the moment.
Functionality
You provide an AlertID (you might received via Email notification) and gundog will then hunt for as much as possible associated data. It does not give you the flexibility of advanced hunting like you have in the portal, but it will give you a quick, first overview of the alert, all associated entities and some enrichment. All the hunting it does is based on the alert timestamp – so we only care about events shortly before, or after the alert. It also provides you with PowerShell objects for each entity it hunted for – like $Network for everything it found related to this alert in the Microsoft 365 Defender (https://www.kitploit.com/search/label/Defender) DeviceNetworkEvents table. gundog also comes up with some other features that make your life easier: per default, only the most relevant data is displayed (this is the way) it gives you context wherever possible: last AAD Sign-Ins & user’s AAD address network connections can be automatically filtered to display more relevant connections only (get rid of connections to Office 365 e.g.) network connections are enriched with geo location (country & city) in the variables section you can easily adjust most parameters like advanced hunting timeframe of every query In addition it searches for IOCs at other services like abuse.ch, urlscan.io or ip-api.com. I ask you to apply for their paid services if you use them commercially. After first evaluations with gundog, you can continue in the portal to dig deeper into the rabbit hole. Feel free to extend gundog and send me pull requests! For the best psychodelic experience, use Windows Terminal Dracula theme with gundog.
Quick usage
mandatory parameters:

- TenantID
- ClientID
- ClientSecret

Optional parameters:

- forgetIncidents

(Background: the first thing gundog is doing is to query all incidents and alerts from the incident API from the last 30 days. These are
saved to a global variable. If you restart gundog, it will not query all incidents again, unless you set forgetIncidents to true.)

Requirements
Register an new App in AAD and give it the following permission: (How to register an app (https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp)) Threat Protection - AdvancedHunting.ReadAll - Incident.Read.All Windows Defender ATP - AdvancedQuery.Read.All - Alert.Read.All - File.Read.All - Ip.Read.All - Url.Read.All - User.Read.All - Vulnerability.Read.All ">Microsoft Graph

- Directory.Read.All
- IdentityRiskEvent.Read.All
- IdentityRiskyUser.Read.All
- SecurityEvents.Read.All
- User.Read

Microsoft Threat Protection

- AdvancedHunting.ReadAll
- Incident.Read.All

Windows Defender ATP

- AdvancedQuery.Read.All
- Alert.Read.All
- File.Read.All
- Ip.Read.All
- Url.Read.All
- User.Read.All
- Vulnerability.Read.All

For more information visit: https://emptydc.com/2021/02/25/gundog/

Download Gundog (https://github.com/jangeisbauer/gundog)

___________________________
@hacking_Attack
@Hacking_Video

PERI Finance Staking dApp Bug Bounty Program
https://medium.com/perifinance/peri-finance-staking-dapp-bug-bounty-program-40f566861ae0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

With PERI Finance dApp launching around the corner, we are starting a Bug Bounty Program to find bugs in our dApp.Continue reading on PERI Finance » (https://medium.com/perifinance/peri-finance-staking-dapp-bug-bounty-program-40f566861ae0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
HookDump : Security Product Hook Detection

HookDump is a tool for security product hook detection. Building Source In order to build this you will need Visual Studio 2019 (community edition is fine) and CMake. The batch file Configure.bat will create two build directories with Visual Studio solutions. The project may build with MinGW with the correct CMake command line, this is […]

The post HookDump : Security Product Hook Detection appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video