How I easily found Blind XSS

One day I was scrolling through Twitter and saw a post about a vulnerability called “Blind XSS”. I was still reasonably new to bug bounty…Continue reading on Medium »
Read more...

Shisho - Lightweight Static Analyzer For Several Programming Languages
http://www.kitploit.com/2021/10/shisho-lightweight-static-analyzer-for.html

___________________________
@hacking_Attack
@Hacking_Video

Shisho is a lightweight static analyzer (https://www.kitploit.com/search/label/Static%20Analyzer) for developers.
Please see the usage documentation (https://docs.shisho.dev/) for further information.

___________________________
@hacking_Attack
@Hacking_Video

Try at Playground
You can try Shisho at our playground (https://play.shisho.dev/).
Try with Docker
You can try shisho in your machine as follows: echo "func test(v []string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go file.go docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go '>echo "func test(v []string) int { return len(v) + 1; }" > file.go
docker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:[...])" --lang=go /workspace/file.go
Install with pre-built binaries
When you'd like to run shisho outside docker containers, please follow the instructions below:
Linux / macOS
Run the following command(s): # Linux
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho

# macOS
wget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zip
unzip shisho.zip
chmod +x ./shisho
mv ./shisho /usr/local/bin/shisho Then you'll see a shisho's executable in /usr/local/bin.
Windows
Download the prebuild binary (https://www.kitploit.com/search/label/Binary) from releases (https://github.com/flatt-security/shisho/releases) and put it into your %PATH% directory. If you're using Windows Subsystem for Linux (https://docs.microsoft.com/en-us/windows/wsl/install-win10), you can install shisho with the above instructions.
More
We're also building Shisho as a Service (https://shisho.dev/) to make Security-as-Code more accessible. If you need direct support, you can contact us at contact@flatt.tech.

Download Shisho (https://github.com/flatt-security/shisho)

___________________________
@hacking_Attack
@Hacking_Video

Shisho - Lightweight Static Analyzer For Several Programming Languages

Shisho is a lightweight static analyzer for developers. Please see the usage documentation for further information. Try at Playground You can try Shisho at our playground. Try with Docker You can try shisho in your machine as follows: echo "func test(v string) int { return len(v) + 1; }" | docker run -i ghcr.io/flatt-security/shisho-cli:latest find "len(:...)" --lang=go echo "func test(v string) int { return len(v) + 1; }" > file.godocker run -i -v $(PWD):/workspace ghcr.io/flatt-security/shisho-cli:latest find "len(:...)" --lang=go /workspace/file.go Install with pre-built binaries When you'd like to run shisho outside docker containers, please follow the instructions below: Linux / macOS Run the following command(s): # Linuxwget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-unknown-linux-gnu.zip -O shisho.zipunzip shisho.zipchmod +x ./shishomv ./shisho /usr/local/bin/shisho# macOSwget https://github.com/flatt-security/shisho/releases/latest/download/build-x86_64-apple-darwin.zip -O shisho.zipunzip shisho.zipchmod +x ./shishomv ./shisho /usr/local/bin/shisho Then you'll see a shisho's executable in /usr/local/bin. Windows Download the prebuild binary from releases and put it into your %PATH% directory. If you're using Windows Subsystem for Linux, you can install shisho with the above instructions. More We're also building Shisho as a Service to make Security-as-Code more accessible. If you need direct support, you can contact us at contact@flatt.tech. Download Shisho
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
IoT Hacking and Rickrolling My High School District

https://external-preview.redd.it/Nide3enGx8hGAq08hp8Z5QSMKbXckD8EQtpH32_lmUw.jpg?width=640&crop=smart&auto=webp&s=80fbafd75f3d99c0f3baec44cd1b051fb993e57d submitted by /u/CrankyBear
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So I got my virtual lab up… where to from here?

Hello all,

I recently set up a virtual lab based on the Tony Robinson book, building a virtual lab. The guide was amazing, and it took me nearly a year because I wanted to study and understand how the lab works (had to learn networking, a lot of Linux commands, etc)

Now that I have this setup for pentesting, where do I begin? Are there any good courses or books to go through? How do I know when I’m ready for a CTF? I don’t want to be a script kiddie, I want to learn how this stuff works. Just not sure where to start, as there’s so much area to cover.

Any suggestions would be amazing, and redirect me to other posts if someone’s already answered this question please!

Thank you all, A noob hacker

submitted by /u/antrov2468
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Background on my laptop randomly changed to someone from my school

Was reading something then my laptop froze and when I forced closed the windows the background on my laptop was a random girl from my school.

This is far past school hours and she's in uniform in the pic genuinely don't have a clue what's happening.

Any advice

submitted by /u/Lukeyboii00
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SnykCon CTF 2021 — Random Flag Generator

https://cdn-images-1.medium.com/max/1040/1*YbwB2nysUeHO0f3dURxcDA.png
Attacking insecure random generators

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I easily found Blind XSS

https://cdn-images-1.medium.com/max/2600/1*nU84AZJkL7OGw7vZt-wIsQ.png
One day I was scrolling through Twitter and saw a post about a vulnerability called “Blind XSS”. I was still reasonably new to bug bounty…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack This Site: Realistic Web Mission — Level 13

https://cdn-images-1.medium.com/max/1600/0*GYx-QxjRq9FDedmA
Hello, today we’re looking at Hack This Site Realistic Web Mission 13. This is a fun challenge that requires you to gather information…

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing que invita a descargar copia de seguridad de WhatsApp descarga el troyano Grandoreiro

https://cdn-images-1.medium.com/max/1419/0*FZevFN92inRSFFBg
PUBLICADO EN 12 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Fixes Zero-Day Flaw in Win32 Driver

A previously known threat actor is using the flaw in a broad cyber-espionage campaign, security vendor warns.

Dark Reading: Attacks/Breaches
Former Director of IT and Cybersecurity for Warren Presidential Campaign Launches Personified

Founder and CEO Mike Marotti will lead experts in campaign security to help progressive politicians and organizations with cybersecurity and IT needs.

___________________________
@hacking_Attack
@Hacking_Video