Hacking Articles
Wireless Penetration Testing: Wifipumpkin3

Wifipumpkin3 is a framework that is built on python to give rogue access point attacks to red teamers and reverse engineers. In this article, we would look at how we can use this tool to create a bogus Wi-Fi access point for our victims to connect and how to exploit

The post Wireless Penetration Testing: Wifipumpkin3 appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
8 Security Tools to be Unveiled at Black Hat USA

Security researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more.

___________________________
@hacking_Attack
@Hacking_Video

Information Disclosure to Account Takeover

Hi everyone! This is Sunil Yedla, Bug bounty hunter from Andhra Pradesh, India. Hope you all are healthy and safe. Today’s writeup is my…Continue reading on Medium »
Read more...

THORChain Joins Immunefi with $500,000 Bug Bounty

THORChain, a decentralized cross-chain liquidity protocol, is joining Immunefi with a $500,000 bug bounty following two multi-million…Continue reading on Immunefi »
Read more...

Gaining Access To GCP Of Google Stadia — 500$ Bounty

Learning machine authentication, finding a needle and gaining access to the Google Cloud project of Google Stadia.Continue reading on Medium »
Read more...

My CVE that will never be — [0day write-up]

It has been over four months and I have yet to hear anything from CVE MITRE team. I have made the vendor aware of this, and they…Continue reading on Medium »
Read more...

How I found my first IDOR in HackerOne

In the name of Almighty, Allah, i begin. This write up is about how I found my first IDOR in HackerOne and got my first swag.Continue reading on Medium »
Read more...

GraphQL Top 10 Series: A1 — Broken Object-Level Authorization

Is it so hard to apply Access Controls rightly? Turns out to be true! Let me show you the most dangerous of all vulnerabilities in API…Continue reading on Medium »
Read more...

KitPloit - PenTest Tools!
CredPhish - A PowerShell Script Designed To Invoke Legitimate Credential Prompts And Exfiltrate Passwords Over DNS

http://4.bp.blogspot.com/-elK0-Q4cpm8/YQG8kRJ_3uI/AAAAAAAAozM/9MpPvJRRTjYk-XWlFy_shY1RhF2xTTmIgCK4BGAYYCw/w640-h272/CredPhish_1_credphish-752010.gif
CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests.
For a walkthrough, see the Black Hills Infosec publication.
Download CredPhish

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Самый маленький PHP shell

https://cdn-images-1.medium.com/max/1000/1*9jkvgrFN74u30i-DAaACzg.jpeg
Или атаки хакеров на PHP в 2021 году

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los piratas informáticos chinos implantan la variante PlugX en servidores MS Exchange comprometidos.

https://cdn-images-1.medium.com/max/941/0*EiBZfqOvQnvdv9Pp
POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Chill Hack — Tryhackme.com

https://cdn-images-1.medium.com/max/600/0*HAcBbY4QEIVkXLz-.png
Room link: https://tryhackme.com/room/chillhack

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
EDR Research

Notes on EDR detection, ongoing

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Any .onion forum recommendations other than the basic ones like Dread?

submitted by /u/artemis123159
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video