hacking: security in practice
Here is my IT blog, figured /r/hacking would enjoy the content.

submitted by /u/zenflow11
[link] [comments]

Analysis for CVE-2021–21233 (Google Chrome Heap Buffer Overflow)
https://medium.com/@abrar.slr722/analysis-for-cve-2021-21233-google-chrome-heap-buffer-overflow-d8778bf212b9?source=rss------bug_bounty-5

Out Of Bounds Write vulnerability existed in BlitFramebuffer method of WebGL API in Chromium based browsers.Continue reading on Medium » (https://medium.com/@abrar.slr722/analysis-for-cve-2021-21233-google-chrome-heap-buffer-overflow-d8778bf212b9?source=rss------bug_bounty-5)

Hacking on Medium
How to Hack a Simple JavaScript-driven Web Application

https://cdn-images-1.medium.com/max/655/1*T4OJi5689OVnDHouqTtT8g.png
The FLARE-ON capture the flag is, in my opinion, one of the most difficult online reverse engineering contests out there. I usually enter…

Continue reading on JavaScript in Plain English »

Hacking on Medium
Malware Analysis

https://cdn-images-1.medium.com/max/2542/1*MJqcRnXCtZ9h78YiL84f9w.png
For a project I was asked to set up a honey pot to see what malware I would get on the system. I used the AWS T-POT for this project and…

Continue reading on Medium »

Hacking on Medium
Visit Websites Without Opening The Browser

https://cdn-images-1.medium.com/max/2600/0*B0SswuDMCh7ObeV-
Learn how to interact with a website using headless Chrome, simple JavaScript, and Docker containers.

Continue reading on JavaScript in Plain English »

Hacking on Medium
Ensure that you treat all systems, devices, data sources, etc. as protected resources

Today over 30% of data attacks and compromises come from inside the organization. And, most external attacks come from compromised user…

Continue reading on Medium »

Hacking on Medium
¡Winamp Media Player regresó con la versión 5.8!

https://cdn-images-1.medium.com/max/1438/0*5njKGltUCyt3VVts
PUBLICADO EN 25 OCTUBRE, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
Subnetting with docker

https://cdn-images-1.medium.com/max/2600/0*pWie1xc5j_SQi8Bj
Hi, Dhanesh Sivasamy here. Today we are going to take advantage of docker’s subnet functionality and use it to spin up our docker instance…

Continue reading on Medium »

Analysis for CVE-2021–23981 (Mozilla Firefox Texture Upload Buffer Overflow OOBR)

Out Of Bounds Read vulnerability exists in texture upload through texImage2D method in WebGL APIContinue reading on Medium »
Read more...

Analysis for CVE-2021–21233 (Google Chrome Heap Buffer Overflow)

Out Of Bounds Write vulnerability existed in BlitFramebuffer method of WebGL API in Chromium based browsers.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Pulling Back the Curtain on Bug Bounties

It's critical that infosec professionals and consumers understand threats and vulnerabilities, but they are being kept in the dark.

Easy SSRF from Wayback Machine

We will talk about the SSRF and what is it and how I was able to find a Non-Blind SSRF with wayback machine. — By xelkomyContinue reading on Medium »
Read more...

hacking: security in practice
How are hackers scanning the whole Internet in just a few minutes?

https://external-preview.redd.it/FFPb6bdWVNzA1UR2xMplKQKvWzecFSBiWfzklW7yCVk.jpg?width=640&crop=smart&auto=webp&s=0a1b88b2a3cfcda5fe8c89666b3cbaa84cc2c2c5 submitted by /u/CrankyBear
[link] [comments]

hacking: security in practice
Do Nmap scans live any traces if the target isn't capturing network traffic?

For example if I scan all the ports of the external IP of my home network, will that scan leave any traces behind?

Assume that I'm using a common commercial router

submitted by /u/Rolmar
[link] [comments]