Hacking on Medium
What is Termux ?

Termux is an android terminal emulator that allows for running a Linux Environment on a Android device which work directly without root or…

Continue reading on Medium »

Hacking on Medium
Understanding Credentials Stuffing and Password Spraying

https://cdn-images-1.medium.com/max/1600/0*yYPDFzoX58J1Nilz
Introduction

Continue reading on Medium »

Solana Bug Bounty Hunting with Soteria
https://medium.com/@greencore.xyz/solana-bug-bounty-hunting-with-soteria-1b8b75c741de?source=rss------bug_bounty-5

Recently, using Soteria we identified a vulnerability in an on-chain Solana smart contract (jet-v1) and have been awarded a bug bounty…Continue reading on Medium » (https://medium.com/@greencore.xyz/solana-bug-bounty-hunting-with-soteria-1b8b75c741de?source=rss------bug_bounty-5)

Broken Access Control Rights
https://nvermaa.medium.com/broken-access-control-rights-cd35f3de9698?source=rss------bug_bounty-5

This vulnerability is categorized on OWASP top 10 (2021)Continue reading on Medium » (https://nvermaa.medium.com/broken-access-control-rights-cd35f3de9698?source=rss------bug_bounty-5)

A Long Story of XXE Vulnerability!!
https://rajanagori.medium.com/a-long-story-of-xxe-vulnerability-6a9a33276602?source=rss------bug_bounty-5

TL;DR
But if you are interested then you can invest your time. 😜Continue reading on Medium » (https://rajanagori.medium.com/a-long-story-of-xxe-vulnerability-6a9a33276602?source=rss------bug_bounty-5)

hacking: security in practice
MAC address spoofing / SNORT

Hello! Is there a way where I can detect a MAC address spoofing attack with Snort using a specific rule in the local.rules file? Can I also log the outputs (of the detection) in a txt file? I am new to this field and any help/resources would be greatly appreciated!

submitted by /u/LeBronto_23
[link] [comments]

Solana Bug Bounty Hunting with Soteria

Recently, using Soteria we identified a vulnerability in an on-chain Solana smart contract (jet-v1) and have been awarded a bug bounty…Continue reading on Medium »
Read more...

Broken Access Control Rights

This vulnerability is categorized on OWASP top 10 (2021)Continue reading on Medium »
Read more...

A Long Story of XXE Vulnerability!!

TL;DR But if you are interested then you can invest your time. 😜Continue reading on Medium »
Read more...

Hacking on Medium
A Long Story of XXE Vulnerability!!

https://cdn-images-1.medium.com/max/1151/1*faWwgQgvPYzZvaTA8fFPvQ.png
TL;DR
But if you are interested then you can invest your time. 😜

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

SysFlow - Cloud-native System Telemetry Pipeline

This repository hosts the documentation and issue tracker for all SysFlow projects.Quick referenceDocumentation:the SysFlow DocumentationWhere to get help:the SysFlow Community SlackWhere to file issues:the github issue trackerSource of this description:repo's readme (history)Docker images:docker hub | GHCRWhat is SysFlow?The SysFlow Telemetry Pipeline is a framework for monitoring cloud workloads and for creating performance and security analytics. The goal of this project is to build all the plumbing required for system telemetry so that users can focus on writing and sharing analytics on a scalable, common open-source platform. The backbone of the telemetry pipeline is a new data format called SysFlow, which lifts raw system event information into an abstraction that describes process behaviors, and their relationships with containers, files, and network. This object-relational format is highly compact, yet it provides broad visibility into container clouds. We have also built several APIs that allow users to process SysFlow with their favorite toolkits. Learn more about SysFlow in the SysFlow specification document.The SysFlow framework consists of the following sub-projects:sf-apis provides the SysFlow schema and programatic APIs in go, python, and C++.sf-collector monitors and collects system call and event information from hosts and exports them in the SysFlow format using Apache Avro object serialization.sf-processor provides a performance optimized policy engine for processing, enriching, filtering SysFlow events, generating alerts, and exporting the processed data to various targets.sf-exporter exports SysFlow traces to S3-compliant storage systems for archival purposes.sf-deployments contains deployment packages for SysFlow, including Docker, Helm, and OpenShift.sysflow is the documentation repository and issue tracker for the SysFlow framework.Online documentationSysFlow documentation is available at sysflow.readthedocs.io.Offline buildThis documentation depends on Sphinx (http://www.sphinx-doc.org/en/master/), which must be installed to do builds. The project also requires the following Sphinx plugins:http://www.sphinx-doc.org/en/master/usage/extensions/autodoc.htmlhttps://pypi.org/project/m2r/To build the site as HTML go to the base directory and type:make htmlDownload Sysflow
Read more...

___________________________
@hacking_Attack
@Hacking_Video

SysFlow - Cloud-native System Telemetry Pipeline
http://www.kitploit.com/2021/10/sysflow-cloud-native-system-telemetry.html

___________________________
@hacking_Attack
@Hacking_Video