Pwncat — Fancy Reverse And Bind Shell Handler

pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown…Continue reading on Medium »
Read more...

The BugéDex Workshop— My experience and what your takeaway should be from it

For the uninitiated, BugéDex is a workshop on Bug Bounty and Reporting hosted by CSI-VIT with cybersecurity experts from CloudSEK leading…Continue reading on Medium »
Read more...

Account Takeover Vulnerability(admin + any user) via Password Reset

This is my First vulnerability disclosure, Luckily I found this vulnerability on the occasion of Ganesh Chaturthi.Continue reading on Medium »
Read more...

Hacking on Medium
$5k Service dependencies

The bug

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pwncat — Fancy Reverse And Bind Shell Handler

https://cdn-images-1.medium.com/max/640/0*VEPhAhC1_mGQsOzs.png
pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Account Takeover Vulnerability(admin + any user) via Password Reset
https://medium.com/@gaurav3112verma/account-takeover-vulnerability-admin-any-user-via-password-reset-1cb4d5057e35?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is my First vulnerability disclosure, Luckily I found this vulnerability on the occasion of Ganesh Chaturthi.Continue reading on Medium » (https://medium.com/@gaurav3112verma/account-takeover-vulnerability-admin-any-user-via-password-reset-1cb4d5057e35?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Phrack Magazine Issue 70

https://3.bp.blogspot.com/-D44pcoGQpVY/WWlvlv4DR7I/AAAAAAAAIRA/cd0U1aMX9aAjFzK0BP_4B5_C_6s8ROTKQCLcBGAs/s1600/h99.png
Phrack Magazine Issue 70 - Articles include Phrack Prophile on xerub, Attacking JavaScript Engines, .NET Instrumentation via MSIL bytecode injection, a VM escape QEMU case study, and much more.

MD5 | abec118a40d83ac9f0974d89dbebfeef

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
pFuzz - Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
downloading payload

say you get a victim to click on a link to download the payload. but google chrome gives a prompt saying "this type of file can harm your computer "

how do you get around this? is there way to make it safe for browsers

submitted by /u/ball-sack-patato
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to get a list of valid DNS names from an IP?

Basically the title, i tried various reverse lookups and always got just one result. Any tips would be more than welcome!

submitted by /u/Inter_Fector1
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
An ex hacked my email and I was wondering what I should do to make sure he stops

A little while ago I had an ex acquaintance hack my email. When I went to change my password he immediately tried to hack it again. I figured it was him when I traced his IP to the small town he lives in.

I am not even sure how he got my email. I am guessing he managed to hack my social media in order to get it, though I am not sure which account he got it from. I am guessing he also got my phone and address. I changed my phone number, and email to avoid any potential conflict. The other weird part is I hadn't seen or spoken to him in years. We didn't even date.

I eventually closed down much of my social presence just so I focus more on people in the here and now. I am concerned he may try to track me down in an intrusive way in the future.

What's the best way to safeguard this kind of behavior in the future? I started doing a secure sign in with my info on my banks, and other services I pay for like my internet and phone.

If he attempts to hack me again I will contact his provider. I am not sure he is physically stalking me. He had done it the past though.

submitted by /u/Majestic_Emu_77
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

pFuzz - Helps Us To Bypass Web Application Firewall By Using Different Methods At The Same Time
http://www.kitploit.com/2021/10/pfuzz-helps-us-to-bypass-web.html

___________________________
@hacking_Attack
@Hacking_Video

pFuzz is an advanced red teaming (https://www.kitploit.com/search/label/Red%20Teaming) fuzzing tool which we developed for our research. It helps us to bypass web application firewall (https://www.kitploit.com/search/label/Firewall) by using different methods at the same time.pFuzz web uygulama araştırmaları için geliştirdiğimiz, gelişmiş bir fuzzing aracıdır. Farklı güvenlik uygulamaları üzerinde çeşitli saldırı yöntemlerinin denenmesi konusunda süreci hızlandırmak için geliştirilmiştir.
Description
pFuzz is a tool developed in the python language to have advanced fuzzing capability in web application research. Since the application has a modular structure, it has the ability to quickly add new found / to be found WAF bypassing (https://www.kitploit.com/search/label/Bypassing) methods to pFuzz and test it on all other WAFs. In addition to a modular structure, multi-threading, multi-processing and queue structures have been used to make the tool more flexible and the infrastructure (https://www.kitploit.com/search/label/Infrastructure) has been created for future developments.The tool is programmed so that a given request can be parsed and easily changed over an object. Thanks to this structure, those who will develop the application will be able to contribute easily and develop the tool in line with their own needs without changing the core structure of the application without having to learn.
Note: If you want to contribute to the development, you can do it not only developing pFuzz but also adding new modules. Feel free to open new PR :)
Flow

___________________________
@hacking_Attack
@Hacking_Video