Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
131K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Can i delete whatsapp messages with remote control

hi what i am trying to do is as follows: I need to instantly delete the WhatsApp group message from my own phone to the other phone. Blocking it doesn't work. The only way is remote control or writing a program for it and automatically deleting it, which is difficult because I don't know coding. Also if there is such a feature of customizable whatsapp apps to use it. can you help me please?

submitted by /u/whychamaeleon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Vertical Privilege Escalation Using Burp Match And Replace

Halo kembali lagi dengan tulisan yang membosankan, saya akan menulis lagi bug yang saya temukan beberapa hari yang lalu di program.com (di…Continue reading on Medium »
Read more...
Deep Web
Is not evil back?

Why i can't find notevil and deep past any more If any one has working links plz leave em in the comments

submitted by /u/slimrazi01
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Kali NetHunter on Moto g6 is not a thing yet, where would I start on making it possible?

I have an old g6 lying around and want to set up NetHunter on it, but it isn't officially supported. I did see however that you can submit your own patch for a device in order to get it into the official support section. Where would I begin? It seems like a fun project I'm just not sure where to start.

submitted by /u/ACEDT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Windows Command Line - ” becomes "

For some reason, windows will automatically convert the unicode quote signs like “ and ” into a regular quote "

why is this bad? well imagine the following-
usermanager.exe
all user controlled inputs are escaped by the server before they get executed. and this is good right. it means you cant just inject more arguments,

now, what if this is running on a Windows Server? well then we can just do
action=DELETE“ Steve
now what will happen is php will look for " and turn them into ^", to escape them-

however we entered “ and NOT " so it wont change it., but now windows for whatever reason when it goes and then executes it windows command line will turn the “ into an actual " so now the command being executed is:
usermanager.exe "DELETE" Steve ""John"
now argv[1] is "DELETE" to delete an account, argv[2] is "Steve", and not whoever made the request's account, and argv[3] is most likely ignored. so now Steve's account is deleted instead of say "John" who actually made the request,



at the same time as posting this i reported this to PHP, but the root cause is with microsoft, but they dont seem too intererested in fixing this, as i reported it via that feedback menu thing to them about it months ago, so hope you enjoyed my irresponsible disclosure ;)

submitted by /u/PlayStationHaxor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
How I found my first Subdomain Takeover vulnerability

About the vulnerabilityContinue reading on Medium »
Read more...
Proxyshell POC - what need inatall?
https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/

<!-- SC_OFF -->To create local POC Have some docker to this vulnerablilty? If not, how I install it on my local machine? <!-- SC_ON --> submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/) [comments] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/)