Hacking Articles Tips Tricks Videos Tutorials

9 views04:42

Hi guys 👋👋, Hope you guys are doing well! My Self Rohit Karande I’m Ethical Hacker and Bug Bounty Hunter from Maharashtra, India.Continue reading on Medium » (https://medium.com/@rohitkarande852/no-rate-limiting-on-forgot-password-dac862e1d338?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

No Rate Limiting on Forgot Password

Hi guys 👋👋, Hope you guys are doing well! My Self Rohit Karande I’m Ethical Hacker and Bug Bounty Hunter from Maharashtra, India. This is…

11 viewsedited 04:42

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Am I really being hacked?

So I was just web surfing and all of a sudden I see this thing pop up saying I am being hacked now. I am very scared they will text someone else with my number or something like that. I have an iPhone 11. I have been on some websites that were a little suspicious and I did click on this one link to a website I’ve never heard of before. And I cleared history and website data. Does that even do anything by the way. How do I completely clear the history. I also turned off my credit card

submitted by /u/CommercialLaugh8446
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Am I really being hacked?

So I was just web surfing and all of a sudden I see this thing pop up saying I am being hacked now. I am very scared they will text someone else...

11 viewsedited 07:00

Hacking Articles Tips Tricks Videos Tutorials

8 views07:35

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Greatest Cyber Attacks in History

https://cdn-images-1.medium.com/max/1200/1*PbDWC_jU48WOgOr2TPezVQ.jpeg
Gone are the days when hackers were considered people that do illegal work and stay hidden behind their computers.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Greatest Cyber Attacks in History

Gone are the days when hackers were considered people that do illegal work and stay hidden behind their computers.

8 viewsedited 07:35

Hacking Articles Tips Tricks Videos Tutorials

7 views07:35

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Res Walkthrough — Try Hack Me

https://cdn-images-1.medium.com/max/826/1*enJvT5jgZS4pqGkNe5fOEg.png
Room description: ‘Hack into a vulnerable database server with an in-memory data-structure in this semi-guided challenge!’

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Res: Try Hack Me Writeup

Room description: ‘Hack into a vulnerable database server with an in-memory data-structure in this semi-guided challenge!’

9 viewsedited 07:35

Hacking Articles Tips Tricks Videos Tutorials

8 views08:32

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Emergency Apple iOS 15.0.2 update fixes zero-day used in attacks

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156
Reading Time: 1 Minute
Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.
This vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer allowing an application to execute commands on vulnerable devices with kernel privileges.

As kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.

While Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.

“Apple is aware of a report that this issue may have been actively exploited,” the company said in a security advisory published earlier today.
See Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.

However, soon after the vulnerability was released, security researcher Saar Amar published a technical writeup and proof-of-concept exploit that was derived from reverse engineering the patch.

The list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).

While it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.
See Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today’s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:

* two zero-days earlier this month, one of them used also used to install Pegasus spyware on iPhones,
* the FORCEDENTRY exploit disclosed in August (previously tracked by Amnesty Tech as Megalodon),
* three iOS zero-days (CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous researchers,
* an iOS zero-day (CVE-2021-1879) in March that may have also been actively exploited,
* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657) in April, exploited by Shlayer malware,
* three other iOS zero-days (CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,
* a macOS zero-day (CVE-2021-30713) in May, which was abused by the XCSSET malware to bypass Apple’s TCC privacy protection,
* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762) in June that “may have been actively exploited” to hack into older iPhone, iPad, and iPod devices.
See Also: Offensive Security Tool: Whispers
Last month, a researcher publicly disclosed exploits for three zero-day vulnerabilities after Apple delayed patching and failed to credit the person who reported them.
See Also: Hacking stories – Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Emergency Apple iOS 15.0.2 update fixes zero-day used in attacks | Black Hat Ethical Hacking

Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.

9 viewsedited 08:32

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Emergency Apple iOS 15.0.2 update fixes zero-day used in attacks https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views:…