How I do subdomain take over in ten minutes?
https://medium.com/@muhammetuslu78/how-i-do-subdomain-take-over-in-ten-minutes-b034f84d28d0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I found my first critical bug in ten minutes. But how?Continue reading on Medium » (https://medium.com/@muhammetuslu78/how-i-do-subdomain-take-over-in-ten-minutes-b034f84d28d0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Planet fitness social engeneering.

So my annually fee was coming up, total of $39 for the year + 22 a month for the membership.

Decided to try an experiment. Had my account with insufficient funds for a couple days, went in armed with my bank statement, and a screenshot of my balance when I had $89 in it.

Coded quick app for my phone, one that went straight to the screen shot of $80 in my account, walked in and asked what the hell?

Showed them the numerous attempts that planet fitness made to charge my account, and the bank account balance showing more than sufficient funding.

After some back and forth between the charges and the screenshot, the manager waives the $39 fee.

Not proud of this but as a homeless man, I need to take every oppertunity I can to save a buck.

submitted by /u/Captain-Crunch1989
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
not asking but

could some1 tell me how to hack @impact on instagram. if you could it for me that’d be cool too. put on their story “hacked ez”

submitted by /u/Alt_Verse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Comprehensive Timeline of all DeFi Hacks/Exploits/Rugpulls in 2021 (constantly updated)

https://cdn-images-1.medium.com/max/1200/0*YHJVpZTXs2Lhdfdx.jpg
TL;DR: go to this Google Doc (https://docs.google.com/document/d/1LbX6uCAKsrvzHuAe2MegOQpcDk1B_Ank71kcPtjz2h4/edit?usp=sharing) that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

This meme is funny and true
https://www.reddit.com/r/redteamsec/comments/p3hi4g/this_meme_is_funny_and_true/

submitted by /u/R3dd3v3l (https://www.reddit.com/user/R3dd3v3l)
[link] (https://i.redd.it/lijl6gdke2h71.png) [comments] (https://www.reddit.com/r/redteamsec/comments/p3hi4g/this_meme_is_funny_and_true/)

___________________________
@hacking_Attack
@Hacking_Video

How I found read/write access to the personal data of 3 million users of an E-commerce website?
https://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is Prashant Singh, a cybersecurity researcher. This is my first bug bounty write-up. Just a small contribution from my end to the…Continue reading on Medium » (https://medium.com/@psr595bro/how-i-found-read-write-access-to-the-personal-data-of-3-million-users-of-an-e-commerce-website-b9026b0d4bd3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bandlab on android?

Is there any way I can get an .apk file or something to get bandlab on my android device?

submitted by /u/bis82
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learning how to CTF

I’m new to hacking, atm I’m doing a udemy course which is pretty good. Just wondering if I would have to learn hacking specifically for CTF’s?

submitted by /u/99nug
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
+Infinity Stone — Vulnhub

https://cdn-images-1.medium.com/max/600/1*vRF-YLx0Zf8iQDYkC_uAeQ.png
Infinity stone is another CTF box from vulnhub that is based off the Avengers. The goal is to find all infinity stones to gain root…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox - Jeeves

https://cdn-images-1.medium.com/max/600/0*YguvghWvZvk6inQD.png
Bu, OSCP için HackTheBox adında yayınlayacağım emekliye ayrılmış HTB makinelerinden oluşacak olan bir dizi blogun 4. blogu. TJ_Null…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
i found a onion new website called new pipe its http only but it lets you watch youtube thru tor

hidden service youtube proxy called new pipe

works like youtube but thru tor

submitted by /u/KillaX9
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I found read/write access to the personal data of 3 million users of an E-commerce website?

This is Prashant Singh, a cybersecurity researcher. This is my first bug bounty write-up. Just a small contribution from my end to the…Continue reading on Medium »
Read more...

Hacking Articles|Raj Chandel's Blog
Burp Suite for Pentester: Repeater

Today, in this article, we’ll focus on the Repeater and its options featured by the Burp Suite Professional Version, which will help any Pentester to send the request inside the burp and observe its Response in real-time without disturbing the request captured from the browser. Table of Content· Introduction· Renaming the Tabs· Request Method· Request History· URL as Request· URL Encode· Following Redirection· Search· Reopening Closed Tab· Views· Exporting Repeater Data· ConclusionEven the users that are just beginning to use the Burp Suite are likely to be familiar with the functions of the Repeater. However, let’s go over them to recall the functionality of the Repeater. It is a tool that is designed to allow the user or attacker to change or resend particular HTTP requests and understand and analyze the response generated by it. Here in the demonstration below, we have captured an HTTP request from the browser. This request is captured inside the Intercept sub-tab inside the Proxy tab. By Right Clicking on the captured request, a drop-down menu appears. This menu contains an option that says “Send to Repeater”. Clicking this option will send the request to the repeater. You can also use the shortcut Ctrl and R to send any request to the repeater.Renaming the TabsDuring any assessment, the Repeater tends to get cluttered with multiple tabs with numbers as shown in the image below. Since each time, a request is being sent to the Repeater, the tab gets incremented by one. This can get confusing to catch up after a while of working on a project. Request MethodNext, we will discuss the ability of the Repeater to change the Request Method type. These are the HTTP methods such as the GET, POST, PUT, OPTIONS, etc. Some web pages are configured to work with multiple methods. Suppose, you want to request a page with input fields, to request that form, we need to use the GET methods, and to submit the data from the fields to the server, you will require the [...]

___________________________
@hacking_Attack
@Hacking_Video