https://b.thumbs.redditmedia.com/VIwEWDyH0pdQwSL5nUGTiU8Bnluj7owqc_B5Iw0LEeA.jpg submitted by /u/LucasFHarada
[link] [comments]

hacking: security in practice
I made an opensource Xiaomi Air Purifier Modchip

submitted by /u/the_flam1ngo
[link] [comments]

PostMessage Xss vulnerability on private program
https://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba?source=rss------bug_bounty-5

First to understand postMessage xss attack you need to understand this two things :Continue reading on Medium » (https://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba?source=rss------bug_bounty-5)

PostMessage Xss vulnerability on private program

First to understand postMessage xss attack you need to understand this two things :Continue reading on Medium »
Read more...

How I Scored 1K Bounty Using Waybackurls

Approaching a target from all anglesContinue reading on Medium »
Read more...

Noob Question Regarding Certs
https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/

<!-- SC_OFF -->I had a noob question regarding which certs, or route to take for beginners. Apologies if this is a redundant question, but I can't seem to find one regarding this specifically. As a beginner, would it be possible to just go straight for the eJPT while doing tryhackme, hackthebox, CTFs and move up from there? I know the general consensus is to first study for the CompTIA route of the A+, Network+, then Sec+. I'm studying the A+ at the moment, but it is really difficult to find practicality for pentesting, such as troubleshooting a printer (but I could be wrong?). To be frank, it is extremely boring stuff. I've dabbled about 15 hours in tryhackme and it was very interesting. From what I've seen, the eJPT touches the relevent basics of the CompTIA certs in regards to pentesting, correct? Please let me know what you think. Tl;dr: Beginner route: 1) eJPT + tryhackme, hackthebox, CTFs, then move up. Or 2) CompTIA A+, Net+, Sec+, then move up. <!-- SC_ON --> submitted by /u/Crypto011000 (https://www.reddit.com/user/Crypto011000)
[link] (https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/) [comments] (https://www.reddit.com/r/Pentesting/comments/owmif7/noob_question_regarding_certs/)

Hacking on Medium
Penetration Testing with Google

https://cdn-images-1.medium.com/max/620/0*p6_KqIyH9ly5B4lF.jpg
As we know, there are plenty of search engines. We have Bing, Yahoo, DuckDuckGo, Dogpile, lxquick, etc but the most popular is Google. We…

Continue reading on Medium »

Hacking on Medium
HackTheBox - Chatterbox

https://cdn-images-1.medium.com/max/600/0*6vn94_Gw7P5jjb6U.png
Bu, OSCP için HackTheBox adında yayınlayacağım emekliye ayrılmış HTB makinelerinden oluşacak olan bir dizi blogun 2. blogu. TJ_Null…

Continue reading on Medium »

Hacking on Medium
Iran Railway System was Attacked By Meteor Malware. — CyberWorkx

https://cdn-images-1.medium.com/max/678/0*hRkqjv3qXynKFt67
Last month we had seen how the Iran’s railway system came under attack and how it has impacted the passenger in mid of chaos. Researchers…

Continue reading on Medium »

Hacking on Medium
Multan a Amazon en Europa por incumplir la ley de protección de datos

https://cdn-images-1.medium.com/max/1600/0*SefV2yqj0NEfj2cz
POR EHACKING

Continue reading on Medium »

How I Scored 1K Bounty Using Waybackurls
https://medium.com/@sicks3c/how-i-scored-1k-bounty-using-waybackurls-717d9673ca52?source=rss------bug_bounty-5

Approaching a target from all anglesContinue reading on Medium » (https://medium.com/@sicks3c/how-i-scored-1k-bounty-using-waybackurls-717d9673ca52?source=rss------bug_bounty-5)

Domhttpx - A Google Search Engine Dorker With HTTP Toolkit Built With Python, Can Make It Easier For You To Find Many URLs/IPs At Once With Fast Time
http://www.kitploit.com/2021/08/domhttpx-google-search-engine-dorker.html