Hacking on Medium
Shell Games — A closer look at the behavior of different msfvenom shells

https://cdn-images-1.medium.com/max/1033/1*1HH_TBe9VpGd-Yz4YCFOZg.png
During a recent engagement I had the chance to test various payloads against a few different endpoint detection tools. Think of anti-virus…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
MysterySnail: vulnerabilidad crítica en Windows (Parcha!)

https://cdn-images-1.medium.com/max/1646/0*cxCIK-cOvbgxDka4
PUBLICADO EN 13 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Fugue Adds Kubernetes Security Checks to Secure Infrastructure-As-Code

Developers can apply proper security controls as they programmatically deploy Kubernetes clusters.

Dark Reading: Attacks/Breaches
SonicWall Secures Mix of Cloud, Hybrid and Traditional Networks

Company’s virtual offerings, cloud services match with on-premises deployments to solve real-world security challenges for SMBs, enterprises, governments, and MSSPs.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Sha512 vs Sha512crypt and Cryptography language

I am looking for information on cryptography. I have been reading into different types of hashes and some of the nuances of them. I can see that there is either $5$ and $6$ donating these two different types of hashes. What I don't understand is the language that is being used and if these groups of two things Sha256crypt vs sha256 / sha512crypt vs sha512 - is the crypt and non crypt version different? Are there actually two different kinds or am I misunderstanding something somewhere?

I tried to scour the internet for resources / reddit but didn't get any definitive answers. Anyone with insights or potential additional reading that demystifies would be greatly appreciated. If these are not two different things crypt/noncrypt I'm curious why / why i've read it written two different ways.

submitted by /u/kadoskracker
[link] [comments]

How I got 9000 USD by hacking into iCloud
https://bountyget.medium.com/how-i-got-9000-usd-by-hacking-into-icloud-80ed8816d3b5?source=rss------bug_bounty-5

You may be wondering what the hell this image means… This is a summary photo of a possible attack vector that I found on iCloud, but…Continue reading on Medium » (https://bountyget.medium.com/how-i-got-9000-usd-by-hacking-into-icloud-80ed8816d3b5?source=rss------bug_bounty-5)

Hacking on Medium
Top 5 Pokemon GO Hacks 2021 that Only Super Pros Use

https://cdn-images-1.medium.com/max/1366/1*duxcAlBILi2AjkCEDIgROA.jpeg
Are you looking for Pokemon GO hacks 2021? If yes, then you have to the right place. We will guide you to how you can hack Pokemon Go on…

Continue reading on Medium »

Hacking on Medium
WhatsApp SMS Bomber Unlimited | How to Send Spam Messages On WhatsApp | Termux Whatsapp spam bomber…

WhatsApp SMS Bomber Unlimited | How to Send Spam Messages On WhatsApp | Termux Whatsapp spam bomber |

Continue reading on Medium »

Hacking on Medium
Online Resources to See if You’ve Been Hacked

https://cdn-images-1.medium.com/max/1280/1*WMT7qnbsGJaC1hFFKdm_oA.png
How safe are you online, and how do you even know if your security has been compromised? Well, scammers and hackers present constant daily…

Continue reading on Medium »

What are some uncommon physical engagement tools you would recommend?
https://www.reddit.com/r/redteamsec/comments/q7rdy2/what_are_some_uncommon_physical_engagement_tools/

<!-- SC_OFF -->Beyond the standard hardware lists of multi-tools, lockpicks sets, flashlights, etc..., what are those niche tools that have saved your ass or really helped to accomplish the goal(s) of the engagement? <!-- SC_ON --> submitted by /u/jibblz (https://www.reddit.com/user/jibblz)
[link] (https://www.reddit.com/r/redteamsec/comments/q7rdy2/what_are_some_uncommon_physical_engagement_tools/) [comments] (https://www.reddit.com/r/redteamsec/comments/q7rdy2/what_are_some_uncommon_physical_engagement_tools/)

How I got 9000 USD by hacking into iCloud

You may be wondering what the hell this image means… This is a summary photo of a possible attack vector that I found on iCloud, but…Continue reading on Medium »
Read more...

CSRF to Account Takeover, the conceptual way of bug chaining.

This is my take on CSRF and how to understand and chain them with different bugs when you are just starting in the Web Application…Continue reading on Medium »
Read more...

CSRF to Account Takeover, the conceptual way of bug chaining.
https://tusharbhatia43.medium.com/csrf-to-account-takeover-the-conceptual-way-of-bug-chaining-599515571083?source=rss------bug_bounty-5