What is a source maps vulnerability?
https://www.reddit.com/r/Pentesting/comments/q6swv3/what_is_a_source_maps_vulnerability/

I was wondering if any can simplify the source maps vulnerability?. I've googled this vulnerability but can't get my head around this. Could anyone please help me to understand this issue and how do I investigate and find the issue?. All I know it's normally a '`.map`' file, is it correct and normally can be done by adding `.map` at the end of the `js` extension? Something like `example.js.map.` Not sure how to tell the difference between minified and unminify code? submitted by /u/sr-zeus (https://www.reddit.com/user/sr-zeus)
[link] (https://www.reddit.com/r/Pentesting/comments/q6swv3/what_is_a_source_maps_vulnerability/) [comments] (https://www.reddit.com/r/Pentesting/comments/q6swv3/what_is_a_source_maps_vulnerability/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles
Armageddon HackTheBox Walkthrough

We’ll look at another one of HackTheBox machines today, called “Armageddon.” It is an easy box targeting the commonly found threat of using outdated plugins. In this box, an old and vulnerable version of Drupal is showcased. We’d own the root user by targeting it. Here is the methodology. Penetration

The post Armageddon HackTheBox Walkthrough appeared first on Hacking Articles.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Shisho - Lightweight Static Analyzer For Several Programming Languages

https://blogger.googleusercontent.com/img/a/AVvXsEhjeOPrPfhcUyXSBkhzzsX5kx9rR9UnTis5QCVKEeDsJ-n5hOWOB-Dm9kUt6oKVS1IebHEiWZhMNvRpl2brl8TPJSUSXL8UmLRULenf8s6166K9s7zWDs-wb-UvebV-8eOAOJoX7wxC9facM7LE7qPNPmVIYHOccL-q-y_buhO84YISPhNeaNnY7I76MA=w640-h182
Shisho is a lightweight static analyzer for developers.

Please see the usage documentation for further information.
https://blogger.googleusercontent.com/img/a/AVvXsEicHW2YENiWtucGKiTFVkDGkNFfG3NML7joNUuwHRciD02yT-LfUjk73At5I6BHGZCZZhKTma9KLaNFyX7iWQyvJUWN9I7DHmoZwn2f9Ye9vca3r8TGPoQoMp2wCKATvjDyOZsGtGRlyYVWGdJ78cxMMS-dJGWxPoiFeOuxqvQAtdPFXGXskkvM3ad_nQ=w640-h316
Try at Playground

You can try Shisho at our playground.

Try with Docker

You can try shisho in your machine as follows:

echo "func test(v []string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go

file.go docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go ">echo "func test(v []string) int { return len(v) + 1; }" > file.go
docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go

Install with pre-built binaries

When you'd like to run shisho outside docker containers, please follow the instructions below:

Linux / macOS

Run the following command(s):

# Linux
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho

# macOS
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho

Then you'll see a shisho's executable in /usr/local/bin.

Windows

Download the prebuild binary from releases and put it into your %PATH%directory.

If you're using Windows Subsystem for Linux, you can install shisho with the above instructions.

More

* We're also building Shisho as a Service to make Security-as-Code more accessible.
* If you need direct support, you can contact us at contact@flatt.tech.
Download Shisho

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
High-Profile Breaches Are Shifting Enterprise Security Strategy

Increased media attention is driving changes in enterprise security strategy -- some positive, some negative.

Dark Reading: Attacks/Breaches
Smaller 'Bit and Piece' DDoS Attacks Slam Servers to Evade Mitigation Systems

Nearly all DDoS attacks in the first half of 2021 were less than 1 Gbps, Nexusguard found.

___________________________
@hacking_Attack
@Hacking_Video

What is a Bug Bounty Program?
https://duanechambers77.medium.com/what-is-a-bug-bounty-program-81873c8c4be2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A bug bounty program is a reward offered by many online organizations, software vendors, and corporate entities that enable people to get…Continue reading on Medium » (https://duanechambers77.medium.com/what-is-a-bug-bounty-program-81873c8c4be2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I easily found Blind XSS
https://adamwize.medium.com/how-i-easily-found-blind-xss-311332693201?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

One day I was scrolling through Twitter and saw a post about a vulnerability called “Blind XSS”. I was still reasonably new to bug bounty…Continue reading on Medium » (https://adamwize.medium.com/how-i-easily-found-blind-xss-311332693201?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is a Bug Bounty Program?

A bug bounty program is a reward offered by many online organizations, software vendors, and corporate entities that enable people to get…Continue reading on Medium »
Read more...

How I easily found Blind XSS

One day I was scrolling through Twitter and saw a post about a vulnerability called “Blind XSS”. I was still reasonably new to bug bounty…Continue reading on Medium »
Read more...

Shisho - Lightweight Static Analyzer For Several Programming Languages
http://www.kitploit.com/2021/10/shisho-lightweight-static-analyzer-for.html

___________________________
@hacking_Attack
@Hacking_Video

Shisho is a lightweight static analyzer (https://www.kitploit.com/search/label/Static%20Analyzer) for developers.
Please see the usage documentation (https://docs.shisho.dev/) for further information.

___________________________
@hacking_Attack
@Hacking_Video

Try at Playground
You can try Shisho at our playground (https://play.shisho.dev/).
Try with Docker
You can try shisho in your machine as follows: echo "func test(v []string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go file.go docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go '>echo "func test(v []string) int { return len(v) + 1; }" > file.go
docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go
Install with pre-built binaries
When you'd like to run shisho outside docker containers, please follow the instructions below:
Linux / macOS
Run the following command(s): # Linux
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho

# macOS
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho Then you'll see a shisho's executable in /usr/local/bin.
Windows
Download the prebuild binary (https://www.kitploit.com/search/label/Binary) from releases (https://github.com/flatt-security/shisho/releases) and put it into your %PATH% directory. If you're using Windows Subsystem for Linux (https://docs.microsoft.com/en-us/windows/wsl/install-win10), you can install shisho with the above instructions.
More
We're also building Shisho as a Service (https://shisho.dev/) to make Security-as-Code more accessible. If you need direct support, you can contact us at contact@flatt.tech.

Download Shisho (https://github.com/flatt-security/shisho)

___________________________
@hacking_Attack
@Hacking_Video

Shisho - Lightweight Static Analyzer For Several Programming Languages

Shisho is a lightweight static analyzer for developers. Please see the usage documentation for further information. Try at Playground You can try Shisho at our playground. Try with Docker You can try shisho in your machine as follows: echo "func test(v string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:...)" --lang=go echo "func test(v string) int { return len(v) + 1; }" > file.godocker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:...)" --lang=go /workspace/file.go Install with pre-built binaries When you'd like to run shisho outside docker containers, please follow the instructions below: Linux / macOS Run the following command(s): # Linuxwget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zipunzip shisho.zipchmod +x ./shishomv ./shisho /usr/local/bin/shisho# macOSwget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zipunzip shisho.zipchmod +x ./shishomv ./shisho /usr/local/bin/shisho Then you'll see a shisho's executable in /usr/local/bin. Windows Download the prebuild binary from releases and put it into your %PATH% directory. If you're using Windows Subsystem for Linux, you can install shisho with the above instructions. More We're also building Shisho as a Service to make Security-as-Code more accessible. If you need direct support, you can contact us at contact@flatt.tech. Download Shisho
Read more...

___________________________
@hacking_Attack
@Hacking_Video