Hacking on Medium
HTB x auth0 ctf event — misc

ShortShell

Continue reading on Medium »

Windows 10 Vulnerable VMs
https://www.reddit.com/r/Pentesting/comments/qh0xzl/windows_10_vulnerable_vms/

<!-- SC_OFF -->Hi have an assignment that involves gaining access to a windows VM and was wondering if there was any sites that show you how to set up a vulnerable windows 10 VM or if there were pre built VMs, I've had a look at vuln hub but they all seem to be Linux based. Any help or suggestions on how to make a windows 10 VM vulnerable would be grateful appreciate, thanks in advance. <!-- SC_ON --> submitted by /u/the_T0ster (https://www.reddit.com/user/the_T0ster)
[link] (https://www.reddit.com/r/Pentesting/comments/qh0xzl/windows_10_vulnerable_vms/) [comments] (https://www.reddit.com/r/Pentesting/comments/qh0xzl/windows_10_vulnerable_vms/)

Dark Reading: Attacks/Breaches
Cybercriminals Ramp Up Attacks on Web APIs

As more organizations use application programming interfaces for Web applications, attacks and security incidents targeting APIs continue to grow.

Dark Reading: Attacks/Breaches
6 Eye-Opening Statistics About Software Supply Chain Security

The latest facts and figures on the state of software supply chain security in the enterprise.

Dark Reading: Attacks/Breaches
Kaspersky Buys Brain4Net to Build SASE & XDR Tools

Brain4Net builds tools to help enterprises and service providers add SD-WAN and NFV technologies to their existing infrastructure.

Unauthenticated Cache Purge

Hello everyone, I am Priyansh and this is my first writeup. Today I will be discussing a vulnerability that I found in one of the…Continue reading on Medium »
Read more...

How to Start Bug Bounties 101 & How to Make a Million in 4 Years

I got lots of questions and requests especially from new beginners to the area, so wanted to prepare a blog post regarding how to start at…Continue reading on Medium »
Read more...

Oversimplified — Bug Bounty

Undoubtedly, most of us believe that finding vulnerabilities in software looks something like the image above. “Hacking” has always been…Continue reading on Medium »
Read more...

Creating simple middleware for easy exploitation of second order injections like SQLi, SSTI etc

Second order injection is code injection vulnerability in which unfiltered user input is not directly being passed to the query by web…Continue reading on Medium »
Read more...

How to Start Bug Bounties 101 & How to Make a Million in 4 Years
https://ozguralp.medium.com/how-to-start-bug-bounties-101-how-to-make-a-million-in-4-years-e15ee62d6f4?source=rss------bug_bounty-5

I got lots of questions and requests especially from new beginners to the area, so wanted to prepare a blog post regarding how to start at…Continue reading on Medium » (https://ozguralp.medium.com/how-to-start-bug-bounties-101-how-to-make-a-million-in-4-years-e15ee62d6f4?source=rss------bug_bounty-5)

Oversimplified — Bug Bounty
https://medium.com/@thebongy/oversimplified-bug-bounty-de5bec9ae4fe?source=rss------bug_bounty-5

Undoubtedly, most of us believe that finding vulnerabilities in software looks something like the image above. “Hacking” has always been…Continue reading on Medium » (https://medium.com/@thebongy/oversimplified-bug-bounty-de5bec9ae4fe?source=rss------bug_bounty-5)

Creating simple middleware for easy exploitation of second order injections like SQLi, SSTI etc
https://pswalia2u.medium.com/creating-simple-middleware-for-easy-exploitation-of-second-order-injections-like-sqli-ssti-etc-dea96df157e?source=rss------bug_bounty-5

Second order injection is code injection vulnerability in which unfiltered user input is not directly being passed to the query by web…Continue reading on Medium » (https://pswalia2u.medium.com/creating-simple-middleware-for-easy-exploitation-of-second-order-injections-like-sqli-ssti-etc-dea96df157e?source=rss------bug_bounty-5)

hacking: security in practice
Powershell MpPreferences

So lately I've been trying to make a Powershell script which will make me a reverse shell in my own environment, and the reverse shell script works fine except a tiny problem, which is when you try to launch it. Since I'm trying to create a reverse shell on a Windows machine, and the machine has Windows Defender on (and Real time protection on), when you launch it, Defender detects it and cancels it.

So now I've been trying to find a way to turn off Real time monitoring and I actually found a way with which should make you be able to turn it off:

Set-MpPreference -DisableRealtimeMonitoring $true

(You should also be able to use -drtm instead of -DisableRealtimeMonitoring and can also use 1 instead of $true if I'm right, but please correct me if not)

Long story short it doesn't work even if you launch PS with administrator permissions and real time monitoring can only be turned off from the GUI.

Users who have a better understanding in this topic, could you explain me what's the issue here, or confirm that it was maybe just disabled so it makes it harder for hackers to compromise a system? Any help will be appreciated!

submitted by /u/zsombijatek
[link] [comments]

hacking: security in practice
Editing webpages in links

I know this is super weird and free feel to call me dumb if this isn’t possible because its just and idea i had. Is there a way when a link is click for the page to be pre edited like with inspect element. So basically is im asking if there is a way to have a link clicked to a website that isnt mine, is it possible for text on that page to be pre edited only to look a certain way through the click of a link. Sorry english isnt my first language

submitted by /u/fizzyvalley
[link] [comments]