Hacking on Medium
TryHackMe | Startup

Hello all, It’s been a while since I posted, I’ve been hanging out on Portswigger and learning stuff. I’ve been lazy but I’ve been…

Continue reading on Medium »

Hacking on Medium
XSS is Dead. We just don’t get it.

https://cdn-images-1.medium.com/max/735/1*ic2Bhh2ek1xwYubNgdpbaA@2x.png
XSS is dead for so long now but we still don’t get it! We have all the tools and knowledge but still keep popping alerts for money! Why…

Continue reading on Medium »

Hacking on Medium
Expertos descubren varios servidores C&C vinculados al malware WellMess.

https://cdn-images-1.medium.com/max/905/0*WiRyCpwbNPWAkPZV
POR EHACKING

Continue reading on Medium »

Hacking on Medium
Chinese Threat Actor Targeting High-Profile Victims In South East Asia. — CyberWorkx

https://cdn-images-1.medium.com/max/900/0*Ru3MDen0j1C-fQLG
Researchers from Kaspersky reveals that a Chinese-speaking threat actor named “GhostEmperor” is targeting several government entities and…

Continue reading on Medium »

Spores’ Marketplace Testnet & Bug Bounty Program

Community SpaceContinue reading on Spores Network »
Read more...

XSS is Dead. We just don’t get it.

XSS is dead for so long now but we still don’t get it! We have all the tools and knowledge but still keep popping alerts for money! Why…Continue reading on Medium »
Read more...

https://b.thumbs.redditmedia.com/VIwEWDyH0pdQwSL5nUGTiU8Bnluj7owqc_B5Iw0LEeA.jpg submitted by /u/LucasFHarada
[link] [comments]

hacking: security in practice
I made an opensource Xiaomi Air Purifier Modchip

submitted by /u/the_flam1ngo
[link] [comments]

PostMessage Xss vulnerability on private program
https://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba?source=rss------bug_bounty-5

First to understand postMessage xss attack you need to understand this two things :Continue reading on Medium » (https://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba?source=rss------bug_bounty-5)

PostMessage Xss vulnerability on private program

First to understand postMessage xss attack you need to understand this two things :Continue reading on Medium »
Read more...

How I Scored 1K Bounty Using Waybackurls

Approaching a target from all anglesContinue reading on Medium »
Read more...

Noob Question Regarding Certs
https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/

<!-- SC_OFF -->I had a noob question regarding which certs, or route to take for beginners. Apologies if this is a redundant question, but I can't seem to find one regarding this specifically. As a beginner, would it be possible to just go straight for the eJPT while doing tryhackme, hackthebox, CTFs and move up from there? I know the general consensus is to first study for the CompTIA route of the A+, Network+, then Sec+. I'm studying the A+ at the moment, but it is really difficult to find practicality for pentesting, such as troubleshooting a printer (but I could be wrong?). To be frank, it is extremely boring stuff. I've dabbled about 15 hours in tryhackme and it was very interesting. From what I've seen, the eJPT touches the relevent basics of the CompTIA certs in regards to pentesting, correct? Please let me know what you think. Tl;dr: Beginner route: 1) eJPT + tryhackme, hackthebox, CTFs, then move up. Or 2) CompTIA A+, Net+, Sec+, then move up. <!-- SC_ON --> submitted by /u/Crypto011000 (https://www.reddit.com/user/Crypto011000)
[link] (https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/) [comments] (https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/)

Hacking on Medium
Penetration Testing with Google

https://cdn-images-1.medium.com/max/620/0*p6_KqIyH9ly5B4lF.jpg
As we know, there are plenty of search engines. We have Bing, Yahoo, DuckDuckGo, Dogpile, lxquick, etc but the most popular is Google. We…

Continue reading on Medium »