Hacking on Medium
OSCP — I did it!

On July 17th, 2021, I received an email from Offensive Security.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
what happened to dark.fail?

submitted by /u/ferrero-rocher-cunt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

What is BOLA? 3-digit bounty from Topcoder ($$$)
https://infosecwriteups.com/what-is-bola-3-digit-bounty-from-topcoder-a25e7fae0d64?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This write-up will be about Broken Object Level Authorization (BOLA), which is #1 topic of API Security 101 (OWASP).Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/what-is-bola-3-digit-bounty-from-topcoder-a25e7fae0d64?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how to implement - RAASNET: RANSOMWARE

YOU MUST KNOW THIS IS ILEGAL I JUST SHARE THIS TUTORIAL JUST FOR EDUCATION

https://github.com/leonv024/RAASNet

submitted by /u/Quarter55
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploiting JWT to Account Takeover
https://infosecwriteups.com/exploiting-jwt-to-account-takeover-407b587b6cc6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. Today we are…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-jwt-to-account-takeover-407b587b6cc6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is BOLA? 3-digit bounty from Topcoder ($$$)

This write-up will be about Broken Object Level Authorization (BOLA), which is #1 topic of API Security 101 (OWASP).Continue reading on InfoSec Write-ups »
Read more...

Exploiting JWT to Account Takeover

Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. Today we are…Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
CVE-2021–34527 PrintNightmare

https://cdn-images-1.medium.com/max/639/1*yZl7KgJ7l1B0oNMLuLyyEg.png
A critical Remote Code Execution and Local Privilege Escalation vulnerability commonly called “PrintNightmare“.

Continue reading on Medium »

Hacking on Medium
Exploiting JWT to Account Takeover

https://cdn-images-1.medium.com/max/1640/1*NTtxNfncSpGSob8KcuPcrg.png
Hey Cyberpunks, Ethical Kaps here, I’m back again with another powerful article. I hope you all are doing great in your life. Today we are…

Continue reading on InfoSec Write-ups »

Hacking on Medium
Bounty Hunter HTB Solution

https://cdn-images-1.medium.com/max/770/1*3SFClmrjU1G_spdXIXHjqQ.png
Hello, this is my first publication of a solution for a hack the box machine, which is BountyHunter:

Continue reading on Medium »

Deep Web
When a payment is listed as Escrow and not FE

Does that mean the vendor will not ship until they receive your payment?

I'm confused as to what they mean.

submitted by /u/jasonm82299
[link] [comments]

P1: Easy Access to Grafana Dashboard

Hey folks,Continue reading on Medium »
Read more...

hacking: security in practice
Grandma Getting Texts and Phone Calls

My poor 86 year old grandmother gets "Social Security Officers" or "Extended Car Warranty" calls all the time on her landline and cell phone. She also receives texts with obvious malicious links from random phone numbers or email addresses. Besides blocking the numbers/email addresses, contacting the phone company when they call, and contacting the DNS provider, what else can I legally do? If I can do something to get an IP address or something to help law enforcement track down these folks (much like the famous Youtubers often do), I would love to do so (legally of course). I want to learn as much as I can about cybersecurity, so I take this as a challenge. I used to work in a sketchy call center (I was young and naive), but I learned that the auto-dialers can randomize phone numbers pretty easily. If there is a way I can look up where these calls are actually originated from, or at least point me towards what hypothetically this process looks like, I would be super appreciative (assuming it is legal to do so). If doing so is illegal altogether, I understand and won't try and probe for anything illegal, just wanted to ask because from some googling it seems like a bit of a grey area..... I am certainly not asking how to infect the scammers with malware or anything, I realize accessing a computer with permission is illegal 100% and don't desire to do that. Just want to be able to provide law enforcement with as much intel as I can.

submitted by /u/Shadow1893
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video