Vertical Privilege Escalation Using Burp Match And Replace

Halo kembali lagi dengan tulisan yang membosankan, saya akan menulis lagi bug yang saya temukan beberapa hari yang lalu di program.com (di…Continue reading on Medium »
Read more...

Hacking on Medium
Tips to Avoid Reckless Red Teaming and Rash Reconnaissance

https://cdn-images-1.medium.com/max/1280/1*x6TU8MpviQWNuwqLPmmy4g.jpeg
In 2014, the Bonneville Power Administration (BPA) conducted a red team exercise in an attempt to infiltrate the west coast’s power grid…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sherlock — Osint Tool

https://cdn-images-1.medium.com/max/737/0*rPR7xnK0lLsUhKYb.png
Sherlock é uma ferramenta utilizada no processo de Osint que permite a busca usuários nas redes sociais

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to effectively remove viruses from your computer without having to buy expensive Antiviruses

https://cdn-images-1.medium.com/max/602/0*_N50Q-3qBGcyhFsR
No doubt, premium antivirus software is kind of costly. And some of them don’t offer maximum quality as expected. But have you ever…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Is not evil back?

Why i can't find notevil and deep past any more If any one has working links plz leave em in the comments

submitted by /u/slimrazi01
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
can someone explains a bit for deep web

[removed]

submitted by /u/NearbyIssue629
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Kali NetHunter on Moto g6 is not a thing yet, where would I start on making it possible?

I have an old g6 lying around and want to set up NetHunter on it, but it isn't officially supported. I did see however that you can submit your own patch for a device in order to get it into the official support section. Where would I begin? It seems like a fun project I'm just not sure where to start.

submitted by /u/ACEDT
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Windows Command Line - ” becomes "

For some reason, windows will automatically convert the unicode quote signs like “ and ” into a regular quote "

why is this bad? well imagine the following-
usermanager.exe
all user controlled inputs are escaped by the server before they get executed. and this is good right. it means you cant just inject more arguments,

now, what if this is running on a Windows Server? well then we can just do
action=DELETE“ Steve
now what will happen is php will look for " and turn them into ^", to escape them-

however we entered “ and NOT " so it wont change it., but now windows for whatever reason when it goes and then executes it windows command line will turn the “ into an actual " so now the command being executed is:
usermanager.exe "DELETE" Steve ""John"
now argv[1] is "DELETE" to delete an account, argv[2] is "Steve", and not whoever made the request's account, and argv[3] is most likely ignored. so now Steve's account is deleted instead of say "John" who actually made the request,

​

at the same time as posting this i reported this to PHP, but the root cause is with microsoft, but they dont seem too intererested in fixing this, as i reported it via that feedback menu thing to them about it months ago, so hope you enjoyed my irresponsible disclosure ;)

submitted by /u/PlayStationHaxor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
An Ethical Hacking

I have come a long way to get here.

Continue reading on Medium »

How I found my first Subdomain Takeover vulnerability
https://monish-basaniwal.medium.com/how-i-found-my-first-subdomain-takeover-vulnerability-b7d5c17b61fd?source=rss------bug_bounty-5

About the vulnerabilityContinue reading on Medium » (https://monish-basaniwal.medium.com/how-i-found-my-first-subdomain-takeover-vulnerability-b7d5c17b61fd?source=rss------bug_bounty-5)

How I found my first Subdomain Takeover vulnerability

About the vulnerabilityContinue reading on Medium »
Read more...

Proxyshell POC - what need inatall?
https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/

<!-- SC_OFF -->To create local POC Have some docker to this vulnerablilty? If not, how I install it on my local machine? <!-- SC_ON --> submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/) [comments] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/)

hacking: security in practice
Can anyone verify if this .pdf has malicious code in it?

So I was recently a target of a scam for a fake job - luckily I realized it before sending any money.

That said, they sent me over a fake work contract .pdf, which I downloaded and signed.

Is there any way to see if it's harmless? I'm not sure if I'm allowed to post it here or not.

Any help would be really appreciated!

submitted by /u/8-bit-hero
[link] [comments]