Dark Reading: Attacks/Breaches
California State Controller's Office Suffers Data Breach

Employee unwittingly gave hacker access to email account for more than a day.

Dark Reading: Attacks/Breaches
Sierra Wireless Website Still Down After Ransomware Attack

The company believes the attack's impact is limited to its internal IT systems and corporate websites.

Encrypted Payload -> Decrypted Execution ($600) : Stored XSS
https://shrirangdiwakar.medium.com/encrypted-payload-decrypted-execution-600-stored-xss-3e517cea8f13?source=rss------bug_bounty-5

A Tale of how I used an Application’s feature against itself to give rise to a Stored Cross Site Scripting vulnerability…Relax & Enjoy 😁❤Continue reading on Medium » (https://shrirangdiwakar.medium.com/encrypted-payload-decrypted-execution-600-stored-xss-3e517cea8f13?source=rss------bug_bounty-5)

Guilt Looking at Writeups
https://www.reddit.com/r/Pentesting/comments/mcm3g9/guilt_looking_at_writeups/

<!-- SC_OFF -->Hello friends, this might seem strange to some but I always feel extremely guilty looking at writeups when I get stuck on a box. This is making it even harder for me to get started on studying for the OSCP. I would get stuck on a certain practice box and after an hour of struggling, I would look at a small portion of a writeup where I'm stuck then go back and try to finish on my own (I don't look at the entire thing, but might come back if I get stuck again). The guilt at times is sort of discouraging but I love hunt too much to give it up. A solution I thought about is setting a timer for 2 hours when I hit brick wall, if 2 hours in and I'm still stuck then I peek. Would love to hear how some of you would tackle this. For reference, I'm a student, have starter infosec certs, and have some kind of methodology/ process in tackling an engagement/ box. <!-- SC_ON --> submitted by /u/saucetoss6 (https://www.reddit.com/user/saucetoss6)
[link] (https://www.reddit.com/r/Pentesting/comments/mcm3g9/guilt_looking_at_writeups/) [comments] (https://www.reddit.com/r/Pentesting/comments/mcm3g9/guilt_looking_at_writeups/)

PoC: The easiest 125 Euro’s I Ever made
https://thexssrat.medium.com/poc-the-easiest-125-euros-i-ever-made-4dc87f01e286?source=rss------bug_bounty-5

Hello amazing hackers ❤ I hope you are all doing well! Today i’d like to talk to you all about the easiest money i ever made. You will see…Continue reading on Medium » (https://thexssrat.medium.com/poc-the-easiest-125-euros-i-ever-made-4dc87f01e286?source=rss------bug_bounty-5)

PoC: The easiest 125 Euro’s I Ever made

Hello amazing hackers ❤ I hope you are all doing well! Today i’d like to talk to you all about the easiest money i ever made. You will see…Continue reading on Medium »
Read more...

Hacking on Medium
Installing Coreboot on a Thinkpad T430s

https://cdn-images-1.medium.com/max/750/0*cd8pgtrKe6LSuofE.jpg
Absolute freedom for absolute hardware, faster boot times, and more

Continue reading on Medium »

Hacking on Medium
Utilizar a ferramenta Metagoofil

https://cdn-images-1.medium.com/max/798/1*RqMwZSHv_c3Ve1BiJS5UQw.png
Metagoofil é uma ferramenta de coleta de informações desenhada para extrair metadados de documentos públicos nos seguintes formatos de…

Continue reading on Medium »

Hacking on Medium
Using burp suite to bypass 2FA: Practical guide

https://cdn-images-1.medium.com/max/906/0*9QkaD1nKVcaujXfh
Introduction

Continue reading on Medium »

Hacking on Medium
Avoid Zoom’s Web Client — Alternatives

https://cdn-images-1.medium.com/max/981/1*PVvzvqzQ9mS_bwPx7ThlAw.png
Keep yourself safe and don’t install Zoom’s Client. Although Zoom aggressively works to get you to download and install their software for…

Continue reading on Medium »

Hacking on Medium
PoC: The easiest 125 Euro’s I Ever made

https://cdn-images-1.medium.com/max/2600/0*LdmFMvhQfAptefH3
Hello amazing hackers ❤ I hope you are all doing well! Today i’d like to talk to you all about the easiest money i ever made. You will see…

Continue reading on Medium »