Hacking on Medium
Game Zone tryhackme walkthrough

https://cdn-images-1.medium.com/max/829/1*Rb-aaaEyWjOlRt_aGKY2uw.png
Game Zone is a box that is hosted on tryhackme. The main challenges are SQLi, using SQLmap, password cracking, metasploit usage and…

Continue reading on Medium »

Hacking on Medium
When the state sheltered hackers: Nation-State hacking

https://cdn-images-1.medium.com/max/660/0*huaC9CyIKh2Z8Bqw
As soon as we say hacker, we see the image of a person or a group of people who are wrapped up in everything in the world and sit for…

Continue reading on TechsTalks »

Deep Web
Can I browse deep/dark web without a vpn and just tor?

I don’t plan to buy or download anything, just do some sightseeing. I have a mac which apparently is secure enough, but I’m not sure if there’s anything in particular that could get me in trouble for just looking at it and leaving. I swear i’m not into THAT stuff, just a morbidly curious kid who has yet to learn their lesson. Anyway, can I surf without any vpn or am I already screwed..? Also idk if this is the right sub to ask this to but i dont know any others sorry :[

submitted by /u/rivchamp
[link] [comments]

hacking: security in practice
How to upload YouTube videos without copyright claim?

Im trying to upload episodes but YouTube removes it. How do you avoid that because some YouTube channels are able to do so

submitted by /u/williewallnuts
[link] [comments]

hacking: security in practice
banning people of a country from internet

Iran's government has made a group with 18 members and unlimited power in the managing country and they've done a lot of horrible things in the country; and who is harmed? their people. unfortunately, we can't do anything about them.
But now, they decided to ban their people from any non-Iranian server. what does that mean? that means we only can use the internet on the internal server. which means nobody can ever use Instagram, WhatsApp, and any app that its server isn't in Iran(we only can use telegram and youtube with IP changer apps, for now). that means breakdown, that means depression, that means panic. did they filter it? no! if that law is enforced, we still can those apps, but with 1 bit per second speed. which makes people forget those good memories.
I know that a lot of you won't read it because it's too long, and won't care about some stupid people that can't even do anything in this situation; but I only want 1 thing, a solution to bypass this filter, IN ANY WAY. and I want you to suggest me some solutions.
sincerely
-a strange guy

submitted by /u/kixlegamer
[link] [comments]

Not valid bug that leads to us a multiple Valid Report in Facebook
https://medium.com/@Kntjrld/not-valid-bug-that-leads-to-us-a-multiple-valid-report-in-facebook-25a3fb8cb51?source=rss------bug_bounty-5

I’m here again to share my 2nd and 3rd valid report. It’s all about page admin disclosure in Facebook Lite. In my Initial report, Facebook…Continue reading on Medium » (https://medium.com/@Kntjrld/not-valid-bug-that-leads-to-us-a-multiple-valid-report-in-facebook-25a3fb8cb51?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Pathprober - Probe And Discover HTTP Pathname Using Brute-Force Methodology And Filtered By Specific Word Or 2 Words At Once

http://3.bp.blogspot.com/-C5afKkVBYGQ/YPidrOYAmLI/AAAAAAAAjTE/PWxxLdRfCyU5_2Tu1CorxgOIbPVx7UCXACK4BGAYYCw/w640-h152/pathprober_3_sample-722251.jpeg
Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once.
Purpose

Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration test, because it could validate the directories using specific-word or 2 words at once and the results will more accurate.

It will help you to find:

* Web administrator/login panel
* Credential in some paths
* Third-party token
* Etc

Installation

git clone https://github.com/xchopath/pathprober
cd pathprober/


Requirements

pip3 install -r requirements.txt


Support

* Multiple URL targets (in a file separated by newline) or single URL target
* Multiple paths (in a file separated by newline) or single path
* 1 word or 2 words (filter)
* Save valid results to another file
* Multi-threading

Sample usage

Multiple target, multiple path, and multiple words:

python3 pathprober.py -T target.txt -P path.txt -w "APP_NAME" -w2 "DB_PASSWORD"


Single target, multiple path, and single word:

python3 pathprober.py -t https://redacted.com/ -P path.txt -w "APP_NAME"


Multiple target, single path, multiple words, and save output to file:

python3 pathprober.py -T target.txt -p /.env -w "APP_NAME" -w2 "TWILIO" -o output.txt


Need more help?

bash:~/pathprober$ python3 pathprober.py --help

___ ____ ___ _ _ ___ ____ ____ ___ ____ ____
|__] |__| | |__| |__] |__/ | | |__] |___ |__/
| | | | | | | | \ |__| |__] |___ | \
Probe HTTP pathname filtered by words

usage: pathprober.py [-h] [-t https://example.com] [-p pathname] [-T target.txt] [-P path.txt] [-w Word] [-w2 Word] [-o output.txt]

PathProber - Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

optional arguments:
-h, --help show this help message and exit
-t https://example.com
Single website target
-p pathname Single pathname
-T target.txt Multiple target separated by newline
-P path.txt Multiple pathname separated by newline
-w Word A word that you want to find in a path
-w2 Word A secon d word that you want to find in a path
-o output.txt Save the results to file


Contributors

* @xchopath (from @zerobyte-id)
Download Pathprober

Hacking on Medium
Different Ways To Protect Your Privacy Online -Part1-

https://cdn-images-1.medium.com/max/800/1*ayZ9wixWZ1_wFA7uWNZ3Qw.png
Many of you are worried about your information getting hacked and stolen by bad guys; hence, use this data against them, but do the only…

Continue reading on Geek Culture »

Pathprober - Probe And Discover HTTP Pathname Using Brute-Force Methodology And Filtered By Specific Word Or 2 Words At Once

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration test, because it could validate the directories using specific-word or 2 words at once and the results will more accurate. It will help you to find: Web administrator/login panel Credential in some paths Third-party token Etc Installation git clone https://github.com/xchopath/pathprobercd pathprober/ Requirements pip3 install -r requirements.txt Support Multiple URL targets (in a file separated by newline) or single URL target Multiple paths (in a file separated by newline) or single path 1 word or 2 words (filter) Save valid results to another file Multi-threading Sample usage Multiple target, multiple path, and multiple words: python3 pathprober.py -T target.txt -P path.txt -w "APP_NAME" -w2 "DB_PASSWORD" Single target, multiple path, and single word: python3 pathprober.py -t https://redacted.com/ -P path.txt -w "APP_NAME" Multiple target, single path, multiple words, and save output to file: python3 pathprober.py -T target.txt -p /.env -w "APP_NAME" -w2 "TWILIO" -o output.txt Need more help? bash:~/pathprober$ python3 pathprober.py --help _ _ _ _ _ _ _ _ _ _ _ |_] |_| | |_| |_] |_/ | | |_] |_ |_/ | | | | | | | | \ |_| |_] |_ | \ Probe HTTP pathname filtered by wordsusage: pathprober.py -h -t https://example.com -p pathname -T target.txt -P path.txt -w Word -w2 Word -o output.txtPathProber - Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at onceoptional arguments: -h, --help show this help message and exit -t https://example.com Single website target -p pathname Single pathname -T target.txt Multiple target separated by newline -P path.txt Multiple pathname separated by newline -w Word A word that you want to find in a path -w2 Word A secon d word that you want to find in a path -o output.txt Save the results to file Contributors @xchopath (from @zerobyte-id) Download Pathprober
Read more...

Pathprober - Probe And Discover HTTP Pathname Using Brute-Force Methodology And Filtered By Specific Word Or 2 Words At Once
http://www.kitploit.com/2021/07/pathprober-probe-and-discover-http.html

Probe and discover (https://www.kitploit.com/search/label/Discover) HTTP pathname using brute-force (https://www.kitploit.com/search/label/Brute-force) methodology and filtered by specific word or 2 words at once.
Purpose
Brute-forcing website (https://www.kitploit.com/search/label/Website) directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration test, because it could validate the directories using specific-word or 2 words at once and the results will more accurate.
It will help you to find:
Web administrator/login panel Credential in some paths Third-party token Etc
Installation
git clone https://github.com/xchopath/pathprober
cd pathprober/

Requirements
pip3 install -r requirements.txt

Support
Multiple URL targets (in a file separated by newline) or single URL target Multiple paths (in a file separated by newline) or single path 1 word or 2 words (filter) Save valid results to another file Multi-threading
Sample usage
Multiple target, multiple path, and multiple words: python3 pathprober.py -T target.txt -P path.txt -w "APP_NAME" -w2 "DB_PASSWORD"
Single target, multiple path, and single word: python3 pathprober.py -t https://redacted.com/ -P path.txt -w "APP_NAME"
Multiple target, single path, multiple words, and save output to file: python3 pathprober.py -T target.txt -p /.env -w "APP_NAME" -w2 "TWILIO" -o output.txt

Need more help?
bash:~/pathprober$ python3 pathprober.py --help

___ ____ ___ _ _ ___ ____ ____ ___ ____ ____
|__] |__| | |__| |__] |__/ | | |__] |___ |__/
| | | | | | | | \ |__| |__] |___ | \
Probe HTTP pathname filtered by words

usage: pathprober.py [-h] [-t https://example.com] [-p pathname] [-T target.txt] [-P path.txt] [-w Word] [-w2 Word] [-o output.txt]

PathProber - Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

optional arguments:
-h, --help show this help message and exit
-t https://example.com
Single website target
-p pathname Single pathname
-T target.txt Multiple target separated by newline
-P path.txt Multiple pathname separated by newline
-w Word A word that you want to find in a path
-w2 Word A secon d word that you want to find in a path
-o output.txt Save the results to file

Contributors
@xchopath (https://github.com/xchopath) (from @zerobyte-id (https://github.com/zerobyte-id))

Download Pathprober (https://github.com/xchopath/pathprober)

Deep Web
Onion Websites

hello, is there a hacking way for onion websites? You can help with documents and links.

submitted by /u/0__Parzival__0
[link] [comments]

Not valid bug that leads to us a multiple Valid Report in Facebook

I’m here again to share my 2nd and 3rd valid report. It’s all about page admin disclosure in Facebook Lite. In my Initial report, Facebook…Continue reading on Medium »
Read more...

DNS, Subdomains & a tale of Takeovers
https://mrigendrasoni.medium.com/dns-subdomains-a-tale-of-takeovers-99b50297abac?source=rss------bug_bounty-5