Hacking on Medium
How I Escalated a Time-Based SQL Injection to RCE

https://cdn-images-1.medium.com/max/734/1*cxBjzkOVwNe_JOCkkmGYpw.png
Good day everyone! I hope all of you are doing well.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
InsurAce.io Biweekly Updates (Oct 04 — Oct 17)

https://cdn-images-1.medium.com/max/1800/0*Xv8IirJkrbOxRzN5
Find out what we have achieved during the past 2 weeks.

Continue reading on InsurAce.io Blog »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Unknown killing fact about Hacking

https://cdn-images-1.medium.com/max/1280/0*nbvU8e4UKaSB7R7D
The network protection industry is quickly developing each day.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Book Review: Cyberjutsu — Cybersecurity For The Modern Ninja

https://cdn-images-1.medium.com/max/2048/1*VExcqVeppExMyrdPoU2eTQ.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–30481: Source engine remote code execution via game invites

Steam is the most popular PC game launcher in the world. It gives millions of people the chance to play their favorite video games with…Continue reading on Medium »
Read more...

How I Escalated a Time-Based SQL Injection to RCE

Good day everyone! I hope all of you are doing well.Continue reading on Medium »
Read more...

Getting Started With Bug Bounty Hunting | Shubham

If you were just wondering by seeing the bug bounty stories and posts of facebook friends and always wanted to get started with this bug…Continue reading on Medium »
Read more...

How I Escalated a Time-Based SQL Injection to RCE
https://jmrcsnchz.medium.com/how-i-escalated-a-time-based-sql-injection-to-rce-bbf0d68cb398?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Good day everyone! I hope all of you are doing well.Continue reading on Medium » (https://jmrcsnchz.medium.com/how-i-escalated-a-time-based-sql-injection-to-rce-bbf0d68cb398?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Getting Started With Bug Bounty Hunting | Shubham
https://shubhdhungana.medium.com/getting-started-with-bug-bounty-hunting-shubham-1953f8086377?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

If you were just wondering by seeing the bug bounty stories and posts of facebook friends and always wanted to get started with this bug…Continue reading on Medium » (https://shubhdhungana.medium.com/getting-started-with-bug-bounty-hunting-shubham-1953f8086377?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I found a XSS vulnerability on a fortune 100 website, any way to correctly report it for a bounty?

This is a throwaway account.

I'm a software engineer in the United States. My area of work is in interactive marketing. One of our clients, a fortune 100 company, has hired the company I work for to do a project. I'm the developer on the project. In working with the client and their APIs, I found a XSS vulnerability in their code. It's a pretty big one. Someone could easily use this XSS vulnerability to phish for usernames and passwords.

How should I proceed? Do you think it's possible I could report this for a bounty? Should I just keep it to myself?

I should note that the client is not a bank, and there's really low stakes if someone's username/password is obtained (though I suppose if someone uses the same password everywhere ...)

Any advice is appreciated.

Thanks

submitted by /u/verybadrunner
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
This week in the Console newsletter, I interviewed the developer of a fully automated decryption/decoding/cracking tool which uses natural language processing & artificial intelligence to do the cracking. I thought /r/hacking might be interested in checking it out! :)

https://external-preview.redd.it/ZGfEDUrg1JgElfm3FeyiLGM4t3EcLEeMLrWkEWKbqmw.jpg?width=640&crop=smart&auto=webp&s=5bbc9dfed02ae52ed7dd1721168dc02081e1f68d submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Kali linux stty raw -echo doesn’t work

Once i get a bash shell on the victim i want to have a fully usable shell, everywhere i look i have to ctrlz —> stty raw -echo —> fg —> enter —> enter. But when i do it, it doesn’t work, the enter is recognized as a charachter. I haven’t found anything about it online and i remember asking to my professor and he mentioned something about how newer versions of kali treats the tty. Anyone knows what i have to do? Thanks for the help :)

submitted by /u/Bongioo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video