hacking: security in practice
Hello there:)

So i have a question. When i am around town or at a coffee shop. I hate it when they block all theses websites. And some vpns dont work. Is there anyway on windows i can create an exit node for my ipad to go to my computer (windows 10, can do virtual machine) to my home wifi then my computer sends it back to me so i dont have to go though stupid restricted wifi?

Cheers

submitted by /u/Jps1002331
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hi all. I have an idea.

For the five people who are going to read this, I want to share an idea. If you are interested in something unique that will fetch money. Dm me.

submitted by /u/Life_Loan_931
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Plution : Prototype Pollution Scanner Using Headless Chrome

Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases documented here: https://github.com/BlackFan/client-side-prototype-pollution/tree/master/pp

What This Is Not

This is not a one stop shop. Prototype pollution is a complicated beast. This tool does nothing you couldn’t do manually. This is not a polished bug-free super tool. It is functional but poorly coded and to be considered alpha at best.

How It Works

Plution appends a payload to supplied URLs, naviguates to each URL with headless chrome and runs javascript on the page to verify if a prototype was successfully polluted.

How It Is Used

* Basic scan, output only to screen:
cat URLs.txt | plution
* Scan with a supplied payload rather than hardcoded one:
cat URLs.txt|plution -p '__proto__.zzzc=example'
Note on custom payloads: The variable you are hoping to inject must be called or render to “zzzc”. This is because ‘window.zzzc’ will be run on each page to verify pollution.
* Output:
Passing '-o' followed by a location will output only URLs of pages that were successfully polluted.
* Concurrency:
* Pass the '-c' option to specify how many concurrent jobs are run (default is 5)
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I don't know where to ask but maybe you guys have an idea... am I being watched through my laptop camera?

I was in the shower and my little sister was watching a show on my laptop. Randomly the green camera light turned on. She acknowledged it and was like "wtf" while looking closer, then it turned off. I never had photo booth or facetime open. Later on my computer made a weird almost glitch noise. I've had paranoid feelings I'm being watched but this makes it 100x worse. I put a sticker over my camera lense but I don't know what to do........ help

submitted by /u/Competitive-Ad5943
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Details of 106M Travellers to Thailand Exposed Following Data Breach

https://external-preview.redd.it/RRhybRlrGwP2iOT_VXOea-J2qymIsHZVN11mE4rsp08.jpg?width=640&crop=smart&auto=webp&s=e0912365ea37794ce16e6e5f5d18287e8f3fe640 submitted by /u/george-alexander2k
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is getting a VPN really worth it?

I’m confused by advertisements and people praising VPN services, but then hearing tech experts trashing some VPNs. What do you guys think?

submitted by /u/franfonse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Exploit code for three iOS 15 zero-day flaws published

https://external-preview.redd.it/Nh8a6mOauM7Jy5J9P7GAEJSXUfUqDGH5Y0JEXtOzz0o.jpg?width=640&crop=smart&auto=webp&s=b1ab7cc254c327e04844f59b23ab11c2a234f40b submitted by /u/okhotspy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Manufacturer Leaving WiFi Key on New PC?

Hey,

I am not sure if this is the right forum for this--apologize if not--but I'm not sure what to make of this question I was asked.

A friend just got a new computer this week from a company we've all heard of before. She has only had it for a couple of days. While trying to remember the password to a wifi hotspot she connected to, she entered netsh wlan show profile (or whatever the command is) to see the name of the hotspot so she could do a key=clear.

After running the command, she noticed there was a profile of the name of the company. After running key=clear, it revealed that profile had a 9 digit key.

Questions:

1) Is this a normal thing? I've never noticed it before on any of my devices.
2) Are there any other security concerns (hardware or otherwise) that should be audited as a result of this

3) What--if any--use would this information be to anyone

​

That's it. Thanks for reading, and looking onward to reading the comments

submitted by /u/5kidmark2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Host Header Injection On Password Reset Functionality An Easy #P2
https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This article is about a vulnerability I was able to find in the BugCrowd private program.Continue reading on Medium » (https://medium.com/@tameemkhalid786/host-header-injection-on-password-reset-functionality-an-easy-p2-5c6263c2e3d4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is the Bug bounty ?
https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Often translated into French as “prime au bogue” or “bounty for the detected flaw”, the bug bounty appeared in the 90s…Continue reading on Medium » (https://medium.com/@i.vachot/what-is-the-bug-bounty-b0482a46f061?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Alan post-exploitation framework v4.0 released
https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/

submitted by /u/aparata_s4tan (https://www.reddit.com/user/aparata_s4tan)
[link] (http://antonioparata.blogspot.com/2021/09/alan-post-exploitation-framework-v40.html) [comments] (https://www.reddit.com/r/redteamsec/comments/pwd7ey/alan_postexploitation_framework_v40_released/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Windows Threat Hunting : Processes of Interest (Part 2)

https://cdn-images-1.medium.com/max/1920/1*oBrhQK9GA3-W86qmeGcQYg.jpeg
A list of common Windows processes and how they can be used maliciously by hackers

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video