Hacking on Medium
A large selection of cool tools for hacker and security

https://cdn-images-1.medium.com/max/764/1*nfz7rjqU_rDMRDlcrm8G6w.jpeg
I am not calling anyone to anything, the article was written for informational purposes!

Continue reading on Medium »

Hacking on Medium
An Interesting Account Takeover!

https://cdn-images-1.medium.com/max/1024/1*9WIbqoPV50cFc9GaZZ5r-w.png
IDOR and Weak encryption leads to Account Takeover

Continue reading on Medium »

Hacking on Medium
Here be dragons: Reverse Engineering using Ghidra and WindDBG 101

https://cdn-images-1.medium.com/max/616/1*LpVIIEg0-7PKZCYoViFFXg.jpeg
Hardcoded string/password challenge.

Continue reading on Medium »

Hacking on Medium
Mimecast descubre que los piratas informáticos de SolarWinds robaron parte de su código fuente.

https://cdn-images-1.medium.com/max/938/1*eJ-_4iadmrA0CEdvpiQWWA.jpeg
La firma de seguridad de correo electrónico Mimecast reveló el martes que los piratas informáticos de SolarWinds patrocinados por el…

Continue reading on Medium »

Hacking on Medium
How To Become a Hacker - Find out how to learn to fish

https://cdn-images-1.medium.com/max/2000/0*LfmZHMb3Q2gPoct5.jpg
Step 1:

Continue reading on Medium »

xDai STAKE Hosts $2,000,000 Bug Bounty on Immunefi

Stable payments blockchain xDai STAKE is hosting a $2,000,000 smart contract bug bounty on Immunefi for its OmniBridge project, making it…Continue reading on Immunefi »
Read more...

Here Are The 5 Things You Need To Do To Have A Successful Bug Bounty Program

Before founding Inspectiv, I spent about four years building out the security engineering group at Verizon Media. The properties within…Continue reading on Inspectiv »
Read more...

Here Are The 5 Things You Need To Do To Have A Successful Bug Bounty Program
https://blog.inspectiv.com/here-are-the-5-things-you-need-to-do-to-have-a-successful-bug-bounty-program-6c59962ff9ef?source=rss------bug_bounty-5

Before founding Inspectiv, I spent about four years building out the security engineering group at Verizon Media. The properties within…Continue reading on Inspectiv » (https://blog.inspectiv.com/here-are-the-5-things-you-need-to-do-to-have-a-successful-bug-bounty-program-6c59962ff9ef?source=rss------bug_bounty-5)

hacking: security in practice
High-schooler and her mother hacked school records to steal homecoming queen election, police say

https://b.thumbs.redditmedia.com/oWpGhHIhFskDst4jg7yXxlO5ZKVQ7iBm6LG-V4vvP9E.jpg submitted by /u/CrankyBear
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Is there a way to speed up the decryption of PDF if you have a page?

Hi,

I have a PDF that is encrypted with $pdf$56256-10281*16. It would take years to brute force it (the password is 10-16 long I guess) with hashcat. If I have another PDF with the same first page, is there a way to hack it faster? Is there a way to create a decryption "key" if I know the first page?

Or is there an easier/faster way than brute force? I read about PDFex, but I didn't found a way how to do it or if it does still work.

submitted by /u/ChocoFruit
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Would like some help with a CTF challenge

https://b.thumbs.redditmedia.com/yMT7ZcwgXbns8VWkjPZRzWIYL0HrTQiDyYRb-A_aXNA.jpg First off, i recently started exploring cyber security.

​

So, i'm trying this CTF challenge where i have to read the flag from a .txt file which i dont have permission to. However, the machine spawns with a program that has SUID, which i know the source code of (atleast i'm assuming, since there was a ExploitMe.c file in the same directory):

At first, i tried changing the source, so that it didn't check for pass == 1. But when i recompile i (obviously in hindsight) loose the SUID on that executable.

Also, an executable called bbsuid has SUID, but it checks for root access upon execution, so i guess that leads to nowhere? :I

​

I really hope someone can point me in the right direction :)

Picture of C source

submitted by /u/malthemorsing
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

Dark Reading: Attacks/Breaches
Beware the Package Typosquatting Supply Chain Attack

Attackers are mimicking the names of existing packages on public registries in hopes that users or developers will accidentally download these malicious packages instead of legitimate ones.