How to find mass Html Injection& XSS ( easy way )

Hello i am a Bug Bounty Hunter, and today i’m gonna show you how to find Html injection & XSS on a easy way it’s like automatic scanner.Continue reading on Medium »
Read more...

How to find mass Html Injection& XSS ( easy way )
https://sefoo.medium.com/how-to-find-mass-html-injection-xss-easy-way-89ba82c23e33?source=rss------bug_bounty-5

Hello i am a Bug Bounty Hunter, and today i’m gonna show you how to find Html injection & XSS on a easy way it’s like automatic scanner.Continue reading on Medium » (https://sefoo.medium.com/how-to-find-mass-html-injection-xss-easy-way-89ba82c23e33?source=rss------bug_bounty-5)

Hacking on Medium
How to find mass Html Injection& XSS ( easy way )

https://cdn-images-1.medium.com/max/1375/1*4FaJZAU0cJ21oygyqINGXQ.png
Hello i am a Bug Bounty Hunter, and today i’m gonna show you how to find Html injection & XSS on a easy way it’s like automatic scanner.

Continue reading on Medium »

Hacking on Medium
Подборка хакерских приложений для тестирования с Android

https://cdn-images-1.medium.com/max/972/1*9CXzs0caJ8sy52dE1LRmwA.jpeg
Очередная подборка отличных хакерских приложений для Android

Continue reading on Medium »

Hacking on Medium
Understanding and Securing devices

https://cdn-images-1.medium.com/max/786/1*3I-atEiKJ3eMRwJoKaxiEA.png
What is Internet of Things (IOT)?

Continue reading on Medium »

Brute-forcing OTP via bypassing rate limit

Hello everyone, sharing with you my first bug bounty write-up on how I was able to brute force an OTP (One Time Password) mechanism where…Continue reading on Medium »
Read more...

Brute-forcing OTP via bypassing rate limit
https://bilalabdulmuqeet.medium.com/brute-forcing-otp-via-bypassing-rate-limit-c5ee6b25c2a8?source=rss------bug_bounty-5

Hello everyone, sharing with you my first bug bounty write-up on how I was able to brute force an OTP (One Time Password) mechanism where…Continue reading on Medium » (https://bilalabdulmuqeet.medium.com/brute-forcing-otp-via-bypassing-rate-limit-c5ee6b25c2a8?source=rss------bug_bounty-5)

Deep Web
I fucked up

I tried accessing the dark web as a joke but later I saw link about a porn site I opened it and it said gotcha asshole trying to access child porn I swear I was just accessing that part of the web for fun am I gonna be in trouble are the police after me is my internet provider gonna get an email

submitted by /u/tahalifedive82
[link] [comments]

hacking: security in practice
“Expert” hackers used 11 0-days to infect Windows, iOS, and Android users

https://a.thumbs.redditmedia.com/OhOaTf_VpyLptd9GnVzR0v1g9SdHe9315clDxgR3538.jpg submitted by /u/woojoo666
[link] [comments]

hacking: security in practice
Relevance of CTF to real hacking

CTF is recommend here.

https://www.reddit.com/r/hacking/comments/a3oicn/how_to_start_hacking_the_ultimate_two_path_guide/

But it is not clear how relevant it is to real hacking. For example, it mentions reverse engineering below. How important it is to participate in rev CTF? It seems to be most of the CTF are made up. Do they really reflect the vulnerabilities binaries in real applications have?

https://youtu.be/8ev9ZX9J45A?t=105

​

It also mentions, pwn, crypto, web, misc in the video. It seems the only thing relevant is web.

​

Could anybody explain why the CTF matters for real applications? Thanks.

submitted by /u/qjYAN6lpHi
[link] [comments]

hacking: security in practice
SMTP enumeration - where am I going wrong?

I'm learning about some recon elements of a hacking strategy, with OSINT as my objective. I understand the principal of SMTP enumeration to identify email addresses that exist on a domain.

I'm figuring out how to use smtp-user-enum - the form that is pre-installed in Kali. I've troubleshot mostly everything and got the tool to work, but the results are weird. I'm running it against a mail server that I have permission to do so, and on which I know some of the existing email addresses. I created a short users.txt file containing some of the known users and some that definitely are not users.

When I run
smtp-user-enum -M VRFY -U user.txt -t <ip
Ir sets off scanning and then returns a line for every user in my wordlist:
<ip: <userexists


This is regardless of whether or not there is such a user exists. I get the same is I use
-u <single
and also if I use
-D <target
It just keeps telling me that everything I am checking for exists.

Am I missing something obvious?

submitted by /u/_Pohaku_
[link] [comments]

Invoke-SocksProxy - Socks Proxy, And Reverse Socks Server Using Powershell
http://www.kitploit.com/2021/03/invoke-socksproxy-socks-proxy-and.html