Hacking on Medium
To lock or not to lock? TIP: Do something else first.


If you can't see this article here is the full version.

Continue reading on Medium »

Hacking on Medium
A Brief History of Ransomware


Ransomware! The crypto-coercing & data encryption viruses seem to have made an explosion in recent years. With viruses like WannaCry…

Continue reading on Medium »

Hacking on Medium
Cring Ransomware Gang aprovecha el error ColdFusion de 11 años


PUBLICADO EN 22 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Hacking on Medium
Así son los ordenadores detrás de Netflix: sirven hasta 50 GB/s

https://cdn-images-1.medium.com/max/1200/0*h203Md6HxEvsRHoF
PUBLICADO EN 22 SEPTIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Catching the big fish: Analyzing a large-scale phishing-as-a-service operation
https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/PhishingAAS) [comments] (https://www.reddit.com/r/redteamsec/comments/pti01c/catching_the_big_fish_analyzing_a_largescale/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Website Admins Can See My Personal Cookies?

Hello everyone,

I would like to know what exactly external websites can see from cookies? Not the cookies I have on this particular website but from all my cookies on Chrome.

I'm not talking about Facebook or all those big websites but a small website, what can they actually see from my cookies?

I searched on the web and apparently, external websites should not be able to see my cookies but I know for a fact that they can see some kind of data from my cookies, what can they see actually?

If it's really not possible, could they pay some companies that can actually extract some data out of my cookies?

Thanks!

submitted by /u/KDOTOVERLORD
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Oh no! They Drained My Bank Account!


And it’s my own careless fault

Continue reading on ILLUMINATION-Curated »

hacking: security in practice
How to bypass "Do you want to allow this app from an unknown publisher ?" considering that I don't have admin right ?

My brother's school computer is blocked :

1) he doesn't have admin rights

2) he can execute app from an unknown publisher

3) and worst of all the BIOS has a password

​

He want to do some stuff so I've been searching for hours for a solutions but I found nothing relevant

​

Do you have any solution ?

submitted by /u/Jallbalath
[link] [comments]

Hacking on Medium
The Evolving Hack


On August 10, 2021 more than $600 million in crypto was stolen on Poly Network. Many articles have detailed the largest hack thus far in…

Continue reading on Medium »

Hacking on Medium
Hacking new steps in 2020


Ethical hacking

Continue reading on Medium »

hacking: security in practice
Here it is! deserter is the first of its kind (at least to my knowledge) targeted DNS cache poisoner

https://external-preview.redd.it/lyc9mJV0MTQaAQyZ6VBxml62OJwEi7tGA7_sF0-UTxU.jpg?width=640&crop=smart&auto=webp&s=e8408507f66e85be189b9bf145c71bef41b07297 submitted by /u/b4ckslash0
[link] [comments]

hacking: security in practice
The AOL Screen Name Exploit of 2000

https://external-preview.redd.it/oj7ClJuRuWdQuknfPGGHjfr2vW6jqJBQl6C7U6OhvbI.jpg?width=640&crop=smart&auto=webp&s=cfbaf19ef161b01f61e24b77a8af2d478463569a submitted by /u/endless
[link] [comments]

hacking: security in practice
How secure is data saved on iCloud locked notes + VPN?

Discussion with a friend, can't find a clear answer online. How secure is information saved on locked apple iOS notes when accessing the internet via VPN? How would a hacker exploit this situation? Curious to learn! Thanks

submitted by /u/possiblyai
[link] [comments]

hacking: security in practice
CVE-2021-28663 - POC - Explanation

Hello,

I have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU.

​

The issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.

submitted by /u/reujea0
[link] [comments]

Wordlistgen - Quickly Generate Context-Specific Wordlists For Content Discovery From Lists Of URLs Or Paths
http://www.kitploit.com/2021/09/wordlistgen-quickly-generate-context.html

wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists (https://www.kitploit.com/search/label/Wordlists) are much more effective when you take the application's context into consideration. wordlistgen (https://www.kitploit.com/search/label/WordListGen) pulls out URL components, such as subdomain (https://www.kitploit.com/search/label/Subdomain) names, paths, query strings, etc. and spits them back to stdout so you can easily add them to your wordlists
Installation
If you don't have Go installed, "go" do that! go get -u github.com/ameenmaali/wordlistgen
Usage
wordlistgen takes URLs and paths from stdin, of which you will most likely want in a file such as: $ cat file.txt
https://google.com/home/?q=2&d=asd
http://my.site
/api/v2/auth/me?id=123
Get unique URL components from a file of URLs and/or paths: cat hosts.txt | wordlistgen Get unique URL components from a file of URLs and/or paths, including query string values, and save to a file: cat hosts.txt | wordlistgen -qv > urlComponents.txt wordlistgen works at it's best when chained with other tools, such as @tonnomnom's (https://github.com/tomnomnom) waybackurls (https://github.com/tomnomnom/waybackurls) : cat hosts.txt | waybackurls (https://www.kitploit.com/search/label/Waybackurls) | wordlistgen
Help
$ wordlistgen -h
Usage of wordlistgen:
-fq
If enabled, filter out query strings (e.g. if enabled /?q=123 - q would NOT be included in results
-qv
If enabled, include query string values (e.g. if enabled /?q=123 - 123 would be included in results


Download Wordlistgen (https://github.com/ameenmaali/wordlistgen)