IDOR THE HARD WAY (IDOR TO ACCOUNT TAKEOVER)

Hello My name hazem yaser, I’m a Junior Penetration Tester, Bug Hunter, Computer Science Student As I want To share my Findings with the…Continue reading on Medium »
Read more...

IDOR THE HARD WAY (IDOR TO ACCOUNT TAKEOVER)
https://medium.com/@hazeemyasseer/idor-the-hard-way-idor-to-account-takeover-3f0176bd7d8a?source=rss------bug_bounty-5

Hello My name hazem yaser, I’m a Junior Penetration Tester, Bug Hunter, Computer Science Student As I want To share my Findings with the…Continue reading on Medium » (https://medium.com/@hazeemyasseer/idor-the-hard-way-idor-to-account-takeover-3f0176bd7d8a?source=rss------bug_bounty-5)

hacking: security in practice
What happened to GitHackTools?

The repo's been deleted from GitHub. Does anyone know what happened?

https://github.com/GitHackTools

Edit: Typo

submitted by /u/gekab82055
[link] [comments]

https://b.thumbs.redditmedia.com/iKUYClCmRRjdBNBfLZnY8nqZmfqwkCl5aq4yTioivBM.jpg I need some help! My wife's phone suddenly started showing this. It's a Samsung S9. Can't find anything on google. Anyone have any idea on what this could be? Thanks!

https://preview.redd.it/h3xvedq7c3n71.png?width=1771&format=png&auto=webp&s=01c762338b4809ca3698b5a0d4acc459ac7a9c51

submitted by /u/frankisan
[link] [comments]

hacking: security in practice
IP address location, missing 14 yo son

Hi everyone, I have an IP address from where my son(or someone) checked his email through mobile this morning. He never came home Thursday which isn’t like him and the police aren’t doing too much being a weekend. I would appreciate any help with this.

submitted by /u/KillerEd85
[link] [comments]

Hacking on Medium
Markup has been Pwned!


This is a great box which took me longer than it should have due to my own mistakes. Oh well, it was great fun and I felt silly after I…

Continue reading on Medium »

Hacking on Medium
HackTheBox — ScriptKiddie


As always, we start with nmap to discover open ports/services.

Continue reading on Medium »

Hacking on Medium
Facebook schaming case

(Police diery)

Continue reading on Medium »

Hacking on Medium
Binance Schaming Case

(Police diery)

Continue reading on Medium »

Hacking on Medium
IDOR THE HARD WAY (IDOR TO ACCOUNT TAKEOVER)


Hello My name hazem yaser, I’m a Junior Penetration Tester, Bug Hunter, Computer Science Student As I want To share my Findings with the…

Continue reading on Medium »

Hacking on Medium
whoami

Hey, welcome! My name is Mehmet Deniz Özkahraman. I’m 20. I live in Turkey and I am a Computer Engineering Student at Izmir University of…

Continue reading on Medium »

Hacking on Medium
HackTheBox: Schooled | My Journey


Schooled is one of the HackTheBox machine that run on FreeBSD Operating System. The machine was retired now so i can publish my journey to…

Continue reading on Medium »

Autoharness - A Tool That Automatically Creates Fuzzing Harnesses Based On A Library
http://www.kitploit.com/2021/09/autoharness-tool-that-automatically.html

AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded (https://www.kitploit.com/search/label/Embedded) fairly deep into the library. It is very hard or sometimes even impossible for smart fuzzers to reach that codepath. Even for large fuzzing projects such as oss-fuzz, there are still parts of the codebase that are not covered in fuzzing. Hence, this program tries to alleviate this problem in some capacity as well as provide a tool that security researchers can use to initially test a code base. This program only supports code bases which are coded in C and C++.
Setup/Demonstration
This program utilizes llvm and clang for libfuzzer, Codeql for finding functions, and python for the general program. This program was tested on Ubuntu 20.04 with llvm 12 and python 3. Here is the initial setup. sudo apt-get update;
sudo apt-get install python3 python3-pip llvm-12* clang-12 git;
pip3 install pandas lief subprocess os argparse ast; Follow the installation procedure (https://www.kitploit.com/search/label/Procedure) for Codeql on https://github.com/github/codeql. Make sure to install the CLI tools and the libraries. For my testing, I have stored both the tools and libraries under one folder. Finally, clone this repository or download a release. Here is the program's output after running on nginx with the multiple argument mode set. This is the command I used. python3 harness.py -L /home/akshat/nginx-1.21.0/objs/ -C /home/akshat/codeql-h/ -M 1 -O /home/akshat/autoharness/ -D nginx -G 1 -Y 1 -F "-I /home/akshat/nginx-1.21.0/objs -I /home/akshat/nginx-1.21.0/src/core -I /home/akshat/nginx-1.21.0/src/event -I /home/akshat/nginx-1.21.0/src/http -I /home/akshat/nginx-1.21.0/src/mail -I /home/akshat/nginx-1.21.0/src/misc -I /home/akshat/nginx-1.21.0/src/os -I /home/akshat/nginx-1.21.0/src/stream -I /home/akshat/nginx-1.21.0/src/os/unix" -X ngx_config.h,ngx_core.h Results: