Deep Web
Torrezz

Is torrezz down for good or going through maintenance? Been offline since yesterday

submitted by /u/justgowithit44444
[link] [comments]

Deep Web
User Survey for my master thesis

Dear,

I am a master's student at TU/eindhoven, The Netherlands. I am doing research on Examining user experiences when using the Tor browser. The purpose of this user survey is to examine/explore who finds the broken functionality of webpages an issue when using the Tor browser in the different security levels. The survey is completely anonymous and confidential, the answers will be deleted after a conclusion is drawn from it. I request Tor users to help me with my master thesis by answering the survey :)

​

https://blocksurvey.io/survey/1MoQ1V6xG53egT5S7HcsZ99EUKzbHBN8kM/f242bfff-9507-4d30-9538-2446de103c09

submitted by /u/10johnwick01
[link] [comments]

First Pentesting experience
https://www.reddit.com/r/Pentesting/comments/mc454c/first_pentesting_experience/

<!-- SC_OFF -->Hello there, I'm a 21 year's old college student and I'm currently on a pentesting internship at a small company and my mission is to pentest the local network and infrastructure and write back a detailed report. They already gave me a Local PC connected to the Active Directory and i have a guest privileges. The problem is that I'm a bit newbie in the pentesting world and this is my first professional experience so I really don't know what should I do and what should I test and which things should I focus on etc .. I already tried some small things like scanning the wireless networks and check the traffic with wireshark and airodump/airmon and i also tried nmap and netdiscover to get to know more about the infrastructure and to specify the targets but i didn't reach or get anything.. I would really appreciate some help with some headlines specifications or a pentesing methodology to follow or any kind of help. <!-- SC_ON --> submitted by /u/Lu3as33 (https://www.reddit.com/user/Lu3as33)
[link] (https://www.reddit.com/r/Pentesting/comments/mc454c/first_pentesting_experience/) [comments] (https://www.reddit.com/r/Pentesting/comments/mc454c/first_pentesting_experience/)

hacking: security in practice
Free Ethical Hacking Courses

Hi guys i found Free Ethical hacking courses on Udemy. If you wanna get that, you can visit https://dailycourse.top/free-ethical-hacking-capture-the-flag-walkthroughs-courses/

submitted by /u/jpntr
[link] [comments]

hacking: security in practice
Email hygiene - Creating a system/strategy for email security

https://b.thumbs.redditmedia.com/cJ2-Sn-Dj1AGrYswMq1YiwWlxkD7cNBMKOIkZYKlsxs.jpg submitted by /u/El_galZyrian
[link] [comments]

hacking: security in practice
Email hygiene - Creating a system/strategy for email security

https://b.thumbs.redditmedia.com/cJ2-Sn-Dj1AGrYswMq1YiwWlxkD7cNBMKOIkZYKlsxs.jpg submitted by /u/jwion
[link] [comments]

hacking: security in practice
Can I publish an exploit code to exploit-db.com after a CVE ID gets assigned?

I have found a vulnerability in a local vendor's product, who wasn't found in MITRE's CNA table. Also, there is no Vulnerability research programs in my country AFA my research went.

Edit: There is, but the application procedure is terrible. Looking into it.

I intend to email the vendor first and then request MITRE for a CVE-ID. However, I have three questions on the subject.

1. In the event of the vendor not acknowledging my findings (the chances of this happening is pretty high), and a CVE-ID gets assigned, can I still publish the exploit code to exploit-db.com?
2. Can I publish a writeup on how I have found the vulnerability once a CVE ID is assigned?
3. On MITRE's website, they says that the researcher who request a CVE-ID won't be credited. Is there any way that I could get credited for the vulnerability I found?

This is my first zero day and I don't know how to proceed further as different websites propose conflicting information on this. Kindly guide me on how to report this.

PS: I am not looking for bounty money; I'm just trying to mark my humble presence into the vast cyber security world.

submitted by /u/Mr-introVert
[link] [comments]

Kali Linux Tutorials
Mole : A Framework For Identifying & Exploiting Out-Of-Band Application Vulnerabilities

Mole is a framework for identifying and exploiting out-of-band (OOB) vulnerabilities. Installation & Setup Mole Install Python >= 3.6 virtualenv -p /usr/bin/python3 venvsource venv/bin/activate./venv/bin/pip3 install -r requirements.txtgit submodule update --init --recursive Set an API key in config.yml (must be the same for the client and server) DNS Configuration You’ll need to configure the DNS records […]

The post Mole : A Framework For Identifying & Exploiting Out-Of-Band Application Vulnerabilities appeared first on Kali Linux Tutorials.

Hacking on Medium
OWASP API #9: Improper Assets Management

https://cdn-images-1.medium.com/max/700/0*VOxZb0CcO0psFL9k
Want to learn how big enterprises such as Facebook can easily be hacked? Can have a look to learn about Improper Assets Management.

Continue reading on strike.sh »

Hacking on Medium
What are Crawlers and how do They Work?

https://cdn-images-1.medium.com/max/671/0*iwM2xk6hpGZJ4Gtw.png
These crawlers discover content through various means. One being by pure discovery, where a URL is visited by the crawler and information…

Continue reading on Medium »

Hacking on Medium
Retrieve Deleted Text Messages From Your Husband Phone.

Because of this video guide, you can now learn how to read your girlfriends, boyfriend, husbandWhatsApp messages on an iPhone or android…

Continue reading on Medium »

Hacking on Medium
CyberSecurity #1

https://cdn-images-1.medium.com/max/836/1*DaMYsyP1PvlOZIxgFWlyAA.jpeg
Bu serimiz siber güvenlik başlığı altında en çok merak edilen ve rağbet gören konulardan birisi olan sızma testi (pentest) konusundan…

Continue reading on GaziCyber »