Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium » (https://shrirangdiwakar.medium.com/how-a-simple-hey-can-turn-into-your-worst-nightmare-stored-xss-d5a02b136506?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁
hacking: security in practice
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the better but just an list of must do will be much appreciated.
I am aware there is one online I came across I thought it was a bit out dated wondering if there is more updated one?
Thank you
submitted by /u/WeaknessGlass
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the better but just an list of must do will be much appreciated.
I am aware there is one online I came across I thought it was a bit out dated wondering if there is more updated one?
Thank you
submitted by /u/WeaknessGlass
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Oscp best HTB rooms?
Hey everyone I was wondering if anyone can share a list of must do rooms to help prepare and cover the contents of oscp? I know more rooms the...
hacking: security in practice
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so damn annoying obviously I can’t change my password anymore because I don’t even fucking know it since he hacked me and changed it.
Is there any hope for me at all or am I completely fucked? How do I get him to stop texting me please I need y’all help
submitted by /u/sadpinkgirl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so damn annoying obviously I can’t change my password anymore because I don’t even fucking know it since he hacked me and changed it.
Is there any hope for me at all or am I completely fucked? How do I get him to stop texting me please I need y’all help
submitted by /u/sadpinkgirl
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
My apple iCloud ID got hacked
My crazy abusive toxic ex bf that I just broke up with hacked my iCloud ID and so I blocked him and he is still able to message me and it’s so...
XSS Attacks via SVG images
https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
XSS Attacks via SVG images
Hola Guys!!!
Hola Guys!!!Continue reading on Medium » (https://naveenroy008.medium.com/xss-attacks-via-svg-images-a2835c0cb7c9?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
XSS Attacks via SVG images
Hola Guys!!!
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Cool Things Google Search Can Do | You Should Know!
🔅 Go to Google Images, type “Atari Breakout ”, hit the Search button, wait for a second for the game to start.
Continue reading on Medium »
Cool Things Google Search Can Do | You Should Know!
🔅 Go to Google Images, type “Atari Breakout ”, hit the Search button, wait for a second for the game to start.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Did the Pandemic mess up the world’s Cybersecurity?
https://cdn-images-1.medium.com/max/1600/0*BegYklag5Vk3iOCy
Everything was at a standstill in the wake of the pandemic.
Continue reading on rootissh »
Did the Pandemic mess up the world’s Cybersecurity?
https://cdn-images-1.medium.com/max/1600/0*BegYklag5Vk3iOCy
Everything was at a standstill in the wake of the pandemic.
Continue reading on rootissh »
hacking: security in practice
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press don’t allow before the notification disappeared from the screen.
I’m a little confused and worried this has never happened before. Any advice?
submitted by /u/Username18392993
[link] [comments]
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press don’t allow before the notification disappeared from the screen.
I’m a little confused and worried this has never happened before. Any advice?
submitted by /u/Username18392993
[link] [comments]
reddit
Someone hacked into my computer??
It came up that some person (I won’t say the username) wanted to access my files out of nowhere on my Mac. I didn’t even get the chance to press...
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
#whoamiContinue reading on Medium » (https://ja1sharma.medium.com/bugbounty-idor-how-i-was-able-to-exfiltrate-any-users-credit-coupons-49631d9f3bc8?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium »
Read more...
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁Continue reading on Medium »
Read more...
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoamiContinue reading on Medium »
Read more...
#whoamiContinue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics
https://1.bp.blogspot.com/-7vYDB2fkbAk/YP8x-wfbGhI/AAAAAAAAozA/4VrZlJb9OAom4UpZSnKa9fOFQDNQdRV6gCNcBGAsYHQ/w640-h258/Disk%2BForensics.jpg
A PowerShell script to collect memory and (triage) disk forensics for incident response investigations.
The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection.
Permission requirements for said directory will be dependent on the nuances of the environment and what credentials are used for the script execution (interactive vs. automation)
In the demonstration code, a network location of \Synology\Collections can be seen. This should be changed to reflect the specifics of your environment.
Collections folder needs to include:
* subdirectory KAPE; copy the directory from existing install
* subdirectory MEMORY; 7za.exe command line version of 7zip and winpmem.exe
CSIRT-Collect
* Maps to existing network drive -
*
* Subdir 1: “Memory” – Winpmem and 7zip executables
*
* Subdir 2: ”KAPE” – directory (copied from local install)
* Creates a local directory on asset
* Copies the Memory exe files to local directory
* Captures memory with Winpmem
* When complete, ZIPs the memory image
* Renames the zip file based on hostname
* Documents the OS Build Info (no need to determine profile for Volatility)
* Compressed image is copied to network directory and deleted from host after transfer complete
* New temp Directory on asset for KAPE output
* KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx]
* VHDX transfers to network
* Removes the local KAPE directory after completion
* Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB:
* CSIRT-Collect_USB.ps1
* folder (empty to start) titled 'Collections'
* folders for KAPE and Memory - same as above
Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect
CSIRT-Collect - PowerShell Script To Collect Memory And (Triage) Disk Forensics
https://1.bp.blogspot.com/-7vYDB2fkbAk/YP8x-wfbGhI/AAAAAAAAozA/4VrZlJb9OAom4UpZSnKa9fOFQDNQdRV6gCNcBGAsYHQ/w640-h258/Disk%2BForensics.jpg
A PowerShell script to collect memory and (triage) disk forensics for incident response investigations.
The script leverages a network share, from which it will access and copy the required executables and subsequently upload the acquired evidence to the same share post-collection.
Permission requirements for said directory will be dependent on the nuances of the environment and what credentials are used for the script execution (interactive vs. automation)
In the demonstration code, a network location of \Synology\Collections can be seen. This should be changed to reflect the specifics of your environment.
Collections folder needs to include:
* subdirectory KAPE; copy the directory from existing install
* subdirectory MEMORY; 7za.exe command line version of 7zip and winpmem.exe
CSIRT-Collect
* Maps to existing network drive -
*
* Subdir 1: “Memory” – Winpmem and 7zip executables
*
* Subdir 2: ”KAPE” – directory (copied from local install)
* Creates a local directory on asset
* Copies the Memory exe files to local directory
* Captures memory with Winpmem
* When complete, ZIPs the memory image
* Renames the zip file based on hostname
* Documents the OS Build Info (no need to determine profile for Volatility)
* Compressed image is copied to network directory and deleted from host after transfer complete
* New temp Directory on asset for KAPE output
* KAPE !SANS_Triage collection is run using VHDX as output format [$hostname.vhdx]
* VHDX transfers to network
* Removes the local KAPE directory after completion
* Writes a “Process complete” text file to network to signal investigators that collection is ready for analysis.
CSIRT-Collect_USB
Essentially the same functionality as CSIRT-Collect.ps1 with the exception that it is intented to be run from a USB device. The extra compression operations on the memory image and KAPE .vhdx have been removed. There is a slight change to the folder structure for the USB version. On the root of the USB:
* CSIRT-Collect_USB.ps1
* folder (empty to start) titled 'Collections'
* folders for KAPE and Memory - same as above
Execution: -Open PowerShell as Adminstrator -Navigate to the USB device -Execute ./CSIRT-Collect_USB.ps1
Download CSIRT-Collect