Hi Hackers, Hope you all are safe. today we have another writeup and it’s about my interesting finding on a private program where I was…Continue reading on Medium » (https://nassimchami.medium.com/stored-xss-to-account-take-over-45a7e09116a7?source=rss------bug_bounty-5)
Cartesi lança programa para caçadores de bugs
https://cartesibrasil.medium.com/cartesi-e-immunefi-lan%C3%A7am-programa-para-ca%C3%A7adores-de-bugs-256f57f8bda2?source=rss------bug_bounty-5
https://cartesibrasil.medium.com/cartesi-e-immunefi-lan%C3%A7am-programa-para-ca%C3%A7adores-de-bugs-256f57f8bda2?source=rss------bug_bounty-5
Iniciativa busca fortalecer o sistema PoS Noether e oferece até $500.000 de recompensa para quem encontrar bugs válidosContinue reading on Medium » (https://cartesibrasil.medium.com/cartesi-e-immunefi-lan%C3%A7am-programa-para-ca%C3%A7adores-de-bugs-256f57f8bda2?source=rss------bug_bounty-5)
hacking: security in practice
Should a person who has a job related to cyber security be expert on all areas?
I love programming, C, Assembly, exploit/malware development, cracking, reverse engineering, networking, switching and routing protocols, dynamic routing etc. But when it comes to the web application security, i dont know anything. I have tried many times to start to improve my skills on that area but i feel very bored. Sql, xss, csrf etc they are coming boring to me. I dont like when i should analyze a website very carefully, then reaching some uncertain power on website. I have tried portswigger.net educations, some udemy course.. I can't enjoy. Question is obvious, should i learn these web security skills otherwise i cant find a job because web security is the most important subject on this area; or people on that area has different skills and i dont need to learn these? I am waiting for answers especially from professionals. Thanks for advance.
submitted by /u/Thin-Ad-3078
[link] [comments]
Should a person who has a job related to cyber security be expert on all areas?
I love programming, C, Assembly, exploit/malware development, cracking, reverse engineering, networking, switching and routing protocols, dynamic routing etc. But when it comes to the web application security, i dont know anything. I have tried many times to start to improve my skills on that area but i feel very bored. Sql, xss, csrf etc they are coming boring to me. I dont like when i should analyze a website very carefully, then reaching some uncertain power on website. I have tried portswigger.net educations, some udemy course.. I can't enjoy. Question is obvious, should i learn these web security skills otherwise i cant find a job because web security is the most important subject on this area; or people on that area has different skills and i dont need to learn these? I am waiting for answers especially from professionals. Thanks for advance.
submitted by /u/Thin-Ad-3078
[link] [comments]
reddit
Should a person who has a job related to cyber security be expert...
I love programming, C, Assembly, exploit/malware development, cracking, reverse engineering, networking, switching and routing protocols, dynamic...
hacking: security in practice
What's the best way to inject a malware in a wp site?
I am looking to find ways to insert malware into wp site via php code or sql injection... Or maybe something else..
Everyone says it's easy to hack or infect wp sites but I want to know how easy it is..
submitted by /u/ankitsrivastav1995
[link] [comments]
What's the best way to inject a malware in a wp site?
I am looking to find ways to insert malware into wp site via php code or sql injection... Or maybe something else..
Everyone says it's easy to hack or infect wp sites but I want to know how easy it is..
submitted by /u/ankitsrivastav1995
[link] [comments]
reddit
What's the best way to inject a malware in a wp site?
I am looking to find ways to insert malware into wp site via php code or sql injection... Or maybe something else.. Everyone says it's easy to...
hacking: security in practice
how to bypass Kaspersky
I have Kaspersky parental controls is there a way for me to bypass it.
submitted by /u/BadBadBoss
[link] [comments]
how to bypass Kaspersky
I have Kaspersky parental controls is there a way for me to bypass it.
submitted by /u/BadBadBoss
[link] [comments]
reddit
how to bypass Kaspersky
I have Kaspersky parental controls is there a way for me to bypass it.
hacking: security in practice
Can't find chess like hacking ctf ideA from the other day
Anyone know where the post went discussing the chess like hacking ctf that was posted the other day? Looked like an interesting idea and wanted to show a friend but can't find it now and I didn't save it
submitted by /u/Pnmorris513
[link] [comments]
Can't find chess like hacking ctf ideA from the other day
Anyone know where the post went discussing the chess like hacking ctf that was posted the other day? Looked like an interesting idea and wanted to show a friend but can't find it now and I didn't save it
submitted by /u/Pnmorris513
[link] [comments]
reddit
Can't find chess like hacking ctf ideA from the other day
Anyone know where the post went discussing the chess like hacking ctf that was posted the other day? Looked like an interesting idea and wanted to...
hacking: security in practice
Possible to find identity of scammer or retrieve stolen ethereum if I have their wallet address?
Long shot here… but looking for justice to prevail. I was naive enough dealing with NFTs that I was scammed out of ETH for a purchase. Naive no longer… but now wanting to know if something can be done about it.
More than anything, id like to see somebody fuck these peoples’ world up. If their identity can be found, they’ve stolen over 55k from people in the last 24 hours.
Here’s their wallet address: 0xbb9c94d65cf0e3f0d4782bf3a9f892240e1ecd17
submitted by /u/MrAlcoholicson
[link] [comments]
Possible to find identity of scammer or retrieve stolen ethereum if I have their wallet address?
Long shot here… but looking for justice to prevail. I was naive enough dealing with NFTs that I was scammed out of ETH for a purchase. Naive no longer… but now wanting to know if something can be done about it.
More than anything, id like to see somebody fuck these peoples’ world up. If their identity can be found, they’ve stolen over 55k from people in the last 24 hours.
Here’s their wallet address: 0xbb9c94d65cf0e3f0d4782bf3a9f892240e1ecd17
submitted by /u/MrAlcoholicson
[link] [comments]
reddit
Possible to find identity of scammer or retrieve stolen ethereum...
Long shot here… but looking for justice to prevail. I was naive enough dealing with NFTs that I was scammed out of ETH for a purchase. Naive no...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Stored XSS To Account Take Over
https://cdn-images-1.medium.com/max/1361/1*CZrQ0P9nhqcAsCbP5z4WVw.png
Hi Hackers, Hope you all are safe. today we have another writeup and it’s about my interesting finding on a private program where I was…
Continue reading on Medium »
Stored XSS To Account Take Over
https://cdn-images-1.medium.com/max/1361/1*CZrQ0P9nhqcAsCbP5z4WVw.png
Hi Hackers, Hope you all are safe. today we have another writeup and it’s about my interesting finding on a private program where I was…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hackme: 1: Vulnhub Walkthrough
https://cdn-images-1.medium.com/max/813/0*qNkDpuQDk7VO5rvI.png
Makineyi indirebilirsiniz.
Continue reading on Medium »
Hackme: 1: Vulnhub Walkthrough
https://cdn-images-1.medium.com/max/813/0*qNkDpuQDk7VO5rvI.png
Makineyi indirebilirsiniz.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Descubren botnet ‘Pink’ que infectó más de 1,6 millones de dispositivos
https://cdn-images-1.medium.com/max/1485/0*8wxu02iTHBEYAZGk
PUBLICADO EN 1 NOVIEMBRE, 2021POR EHACKING
Continue reading on Medium »
Descubren botnet ‘Pink’ que infectó más de 1,6 millones de dispositivos
https://cdn-images-1.medium.com/max/1485/0*8wxu02iTHBEYAZGk
PUBLICADO EN 1 NOVIEMBRE, 2021POR EHACKING
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Burp Suite Certified Practitioner — Getting Started
https://cdn-images-1.medium.com/max/2000/0*Nr1jSxuL5kZPW8nE
Hello and welcome to HaXeZ, today we’re going to be talking about the Burp Suite Certified Practitioner certification. For those new to…
Continue reading on Medium »
Burp Suite Certified Practitioner — Getting Started
https://cdn-images-1.medium.com/max/2000/0*Nr1jSxuL5kZPW8nE
Hello and welcome to HaXeZ, today we’re going to be talking about the Burp Suite Certified Practitioner certification. For those new to…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
PortSwigger Web Security Academy: SQL injection 1
https://cdn-images-1.medium.com/max/2000/0*uHWHJdjlAWEHCQsN
Hello friends and thanks for coming to HaXeZ where today we’re looking at the first SQL injection lab on PortswiggerWeb Security Academy…
Continue reading on Medium »
PortSwigger Web Security Academy: SQL injection 1
https://cdn-images-1.medium.com/max/2000/0*uHWHJdjlAWEHCQsN
Hello friends and thanks for coming to HaXeZ where today we’re looking at the first SQL injection lab on PortswiggerWeb Security Academy…
Continue reading on Medium »
Vimana - An Experimental Security Framework That Aims To Provide Resources For Auditing Python Web Applications
Vimana is a modular security framework designed to audit Python web applications.The base of the Vimana is composed of crawlers focused on frameworks (in addition to the generic ones for web), trackers, discovery, fuzzer, parser among other types of modules. The main idea, from where the framework emerged, is to identify, through a blackbox approach, configuration flaws and inadequate and/or insufficient implementations that allow unhandled exceptions to be triggered. Depending on the framework settings (or specific libs even when not using frameworks, for example raw wsgi) this can lead to leakage of sensitive and critical information that can allow to compromising the entire application, server, apis, databases, services and any third part software with tokens, secrets or api keys in current exposed environment variables.Another important step performed by Vimana is to obtain and reconstruct the source code snippets of the affected modules (leaked by exceptions) that allow the discovery of hardcoded credentials, connection strings to databases, vulnerable libraries, in addition to allowing the analysis of logic of the application of a mixed perspective between the black and whitebox approaches, since the initial analysis starts from a blind test, but ends up allowing access to code snippets.Content Getting Started with Vimana About this Version Vimana is not Use Cases Acknowledgment Disclaimer Download Vimana-Framework
Read more...
Vimana is a modular security framework designed to audit Python web applications.The base of the Vimana is composed of crawlers focused on frameworks (in addition to the generic ones for web), trackers, discovery, fuzzer, parser among other types of modules. The main idea, from where the framework emerged, is to identify, through a blackbox approach, configuration flaws and inadequate and/or insufficient implementations that allow unhandled exceptions to be triggered. Depending on the framework settings (or specific libs even when not using frameworks, for example raw wsgi) this can lead to leakage of sensitive and critical information that can allow to compromising the entire application, server, apis, databases, services and any third part software with tokens, secrets or api keys in current exposed environment variables.Another important step performed by Vimana is to obtain and reconstruct the source code snippets of the affected modules (leaked by exceptions) that allow the discovery of hardcoded credentials, connection strings to databases, vulnerable libraries, in addition to allowing the analysis of logic of the application of a mixed perspective between the black and whitebox approaches, since the initial analysis starts from a blind test, but ends up allowing access to code snippets.Content Getting Started with Vimana About this Version Vimana is not Use Cases Acknowledgment Disclaimer Download Vimana-Framework
Read more...