Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tips to Avoid Reckless Red Teaming and Rash Reconnaissance
https://cdn-images-1.medium.com/max/1280/1*x6TU8MpviQWNuwqLPmmy4g.jpeg
In 2014, the Bonneville Power Administration (BPA) conducted a red team exercise in an attempt to infiltrate the west coast’s power grid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Tips to Avoid Reckless Red Teaming and Rash Reconnaissance
https://cdn-images-1.medium.com/max/1280/1*x6TU8MpviQWNuwqLPmmy4g.jpeg
In 2014, the Bonneville Power Administration (BPA) conducted a red team exercise in an attempt to infiltrate the west coast’s power grid…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Tips to Avoid Reckless Red Teaming and Rash Reconnaissance
In 2014, the Bonneville Power Administration (BPA) conducted a red team exercise in an attempt to infiltrate the west coast’s power grid…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Sherlock — Osint Tool
https://cdn-images-1.medium.com/max/737/0*rPR7xnK0lLsUhKYb.png
Sherlock é uma ferramenta utilizada no processo de Osint que permite a busca usuários nas redes sociais
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Sherlock — Osint Tool
https://cdn-images-1.medium.com/max/737/0*rPR7xnK0lLsUhKYb.png
Sherlock é uma ferramenta utilizada no processo de Osint que permite a busca usuários nas redes sociais
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Sherlock — Osint Tool
Sherlock é uma ferramenta utilizada no processo de Osint que permite a busca usuários nas redes sociais
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to effectively remove viruses from your computer without having to buy expensive Antiviruses
https://cdn-images-1.medium.com/max/602/0*_N50Q-3qBGcyhFsR
No doubt, premium antivirus software is kind of costly. And some of them don’t offer maximum quality as expected. But have you ever…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How to effectively remove viruses from your computer without having to buy expensive Antiviruses
https://cdn-images-1.medium.com/max/602/0*_N50Q-3qBGcyhFsR
No doubt, premium antivirus software is kind of costly. And some of them don’t offer maximum quality as expected. But have you ever…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to effectively remove viruses from your computer without having to buy expensive Antiviruses
No doubt, premium antivirus software is kind of costly. And some of them don’t offer maximum quality as expected. But have you ever…
Deep Web
Is not evil back?
Why i can't find notevil and deep past any more If any one has working links plz leave em in the comments
submitted by /u/slimrazi01
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Is not evil back?
Why i can't find notevil and deep past any more If any one has working links plz leave em in the comments
submitted by /u/slimrazi01
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Is not evil back?
Why i can't find notevil and deep past any more If any one has working links plz leave em in the comments
Deep Web
can someone explains a bit for deep web
[removed]
submitted by /u/NearbyIssue629
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
can someone explains a bit for deep web
[removed]
submitted by /u/NearbyIssue629
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
can someone explains a bit for deep web
[removed]
hacking: security in practice
Kali NetHunter on Moto g6 is not a thing yet, where would I start on making it possible?
I have an old g6 lying around and want to set up NetHunter on it, but it isn't officially supported. I did see however that you can submit your own patch for a device in order to get it into the official support section. Where would I begin? It seems like a fun project I'm just not sure where to start.
submitted by /u/ACEDT
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Kali NetHunter on Moto g6 is not a thing yet, where would I start on making it possible?
I have an old g6 lying around and want to set up NetHunter on it, but it isn't officially supported. I did see however that you can submit your own patch for a device in order to get it into the official support section. Where would I begin? It seems like a fun project I'm just not sure where to start.
submitted by /u/ACEDT
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Kali NetHunter on Moto g6 is not a thing yet, where would I start...
I have an old g6 lying around and want to set up NetHunter on it, but it isn't officially supported. I did see however that you can submit your...
hacking: security in practice
Windows Command Line - ” becomes "
For some reason, windows will automatically convert the unicode quote signs like “ and ” into a regular quote "
why is this bad? well imagine the following-
usermanager.exe
all user controlled inputs are escaped by the server before they get executed. and this is good right. it means you cant just inject more arguments,
now, what if this is running on a Windows Server? well then we can just do
now what will happen is php will look for " and turn them into ^", to escape them-
however we entered “ and NOT " so it wont change it., but now windows for whatever reason when it goes and then executes it windows command line will turn the “ into an actual " so now the command being executed is:
now argv[1] is "DELETE" to delete an account, argv[2] is "Steve", and not whoever made the request's account, and argv[3] is most likely ignored. so now Steve's account is deleted instead of say "John" who actually made the request,
at the same time as posting this i reported this to PHP, but the root cause is with microsoft, but they dont seem too intererested in fixing this, as i reported it via that feedback menu thing to them about it months ago, so hope you enjoyed my irresponsible disclosure ;)
submitted by /u/PlayStationHaxor
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Windows Command Line - ” becomes "
For some reason, windows will automatically convert the unicode quote signs like “ and ” into a regular quote "
why is this bad? well imagine the following-
usermanager.exe
all user controlled inputs are escaped by the server before they get executed. and this is good right. it means you cant just inject more arguments,
now, what if this is running on a Windows Server? well then we can just do
action=DELETE“ Steve now what will happen is php will look for " and turn them into ^", to escape them-
however we entered “ and NOT " so it wont change it., but now windows for whatever reason when it goes and then executes it windows command line will turn the “ into an actual " so now the command being executed is:
usermanager.exe "DELETE" Steve ""John" now argv[1] is "DELETE" to delete an account, argv[2] is "Steve", and not whoever made the request's account, and argv[3] is most likely ignored. so now Steve's account is deleted instead of say "John" who actually made the request,
at the same time as posting this i reported this to PHP, but the root cause is with microsoft, but they dont seem too intererested in fixing this, as i reported it via that feedback menu thing to them about it months ago, so hope you enjoyed my irresponsible disclosure ;)
submitted by /u/PlayStationHaxor
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Windows Command Line - ” becomes "
For *some* reason, windows will automatically convert the unicode quote signs like “ and ” into a regular quote " why is this bad? well imagine...
How I found my first Subdomain Takeover vulnerability
https://monish-basaniwal.medium.com/how-i-found-my-first-subdomain-takeover-vulnerability-b7d5c17b61fd?source=rss------bug_bounty-5
https://monish-basaniwal.medium.com/how-i-found-my-first-subdomain-takeover-vulnerability-b7d5c17b61fd?source=rss------bug_bounty-5
About the vulnerabilityContinue reading on Medium » (https://monish-basaniwal.medium.com/how-i-found-my-first-subdomain-takeover-vulnerability-b7d5c17b61fd?source=rss------bug_bounty-5)
How I found my first Subdomain Takeover vulnerability
About the vulnerabilityContinue reading on Medium »
Read more...
About the vulnerabilityContinue reading on Medium »
Read more...
Proxyshell POC - what need inatall?
https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/
<!-- SC_OFF -->To create local POC Have some docker to this vulnerablilty? If not, how I install it on my local machine? <!-- SC_ON --> submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/) [comments] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/)
https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/
<!-- SC_OFF -->To create local POC Have some docker to this vulnerablilty? If not, how I install it on my local machine? <!-- SC_ON --> submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/) [comments] (https://www.reddit.com/r/redteamsec/comments/p7x35j/proxyshell_poc_what_need_inatall/)
hacking: security in practice
Can anyone verify if this .pdf has malicious code in it?
So I was recently a target of a scam for a fake job - luckily I realized it before sending any money.
That said, they sent me over a fake work contract .pdf, which I downloaded and signed.
Is there any way to see if it's harmless? I'm not sure if I'm allowed to post it here or not.
Any help would be really appreciated!
submitted by /u/8-bit-hero
[link] [comments]
Can anyone verify if this .pdf has malicious code in it?
So I was recently a target of a scam for a fake job - luckily I realized it before sending any money.
That said, they sent me over a fake work contract .pdf, which I downloaded and signed.
Is there any way to see if it's harmless? I'm not sure if I'm allowed to post it here or not.
Any help would be really appreciated!
submitted by /u/8-bit-hero
[link] [comments]
reddit
Can anyone verify if this .pdf has malicious code in it?
So I was recently a target of a scam for a fake job - luckily I realized it before sending any money. That said, they sent me over a fake work...
Cloud Certifications for experienced Pentesters ????
https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/
<!-- SC_OFF -->Hi there, So I have been pentesting for quite sometime now. I am OSCP and OSWE certified but often times we have requirement from clients to perform cloud assessment as well. Do any other pentester face the same issues??So i was thinking i should go for some clouds certifications next.....Like AWS associate and then AWS security specialist...... Because I assume that cloud knowledge would certainly benefit pentester as well Any thoughts???? <!-- SC_ON --> submitted by /u/babayaga3904 (https://www.reddit.com/user/babayaga3904)
[link] (https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/)
https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/
<!-- SC_OFF -->Hi there, So I have been pentesting for quite sometime now. I am OSCP and OSWE certified but often times we have requirement from clients to perform cloud assessment as well. Do any other pentester face the same issues??So i was thinking i should go for some clouds certifications next.....Like AWS associate and then AWS security specialist...... Because I assume that cloud knowledge would certainly benefit pentester as well Any thoughts???? <!-- SC_ON --> submitted by /u/babayaga3904 (https://www.reddit.com/user/babayaga3904)
[link] (https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/p7xd43/cloud_certifications_for_experienced_pentesters/)