Self XSS via image upload in skilvul.com

Hallo teman teman, perkenalkan nama saya Mohammad Alfin Hidayatullah. Saya adalah seorang bug bounty hunter dan kali ini saya ingin…Continue reading on Medium »
Read more...

Hacking on Medium
Tomiris Backdoor linked to hackers behind Solar winds hack

https://cdn-images-1.medium.com/max/600/0*CCbj5VFKj_dCwyeF
Another Solar winds incident on the way?

Continue reading on rootissh »

___________________________
@hacking_Attack
@Hacking_Video

Self XSS via image upload in skilvul.com
https://alpinnnnnn13.medium.com/self-xss-via-image-upload-in-skilvul-com-94679a85ff25?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hallo teman teman, perkenalkan nama saya Mohammad Alfin Hidayatullah. Saya adalah seorang bug bounty hunter dan kali ini saya ingin…Continue reading on Medium » (https://alpinnnnnn13.medium.com/self-xss-via-image-upload-in-skilvul-com-94679a85ff25?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is Stored XSS?
https://infosecwriteups.com/what-is-stored-xss-69d463bdd1d7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

An introduction to stored cross-site scripting (XSS) vulnerabilitiesContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/what-is-stored-xss-69d463bdd1d7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is Stored XSS?

An introduction to stored cross-site scripting (XSS) vulnerabilitiesContinue reading on InfoSec Write-ups »
Read more...

hacking: security in practice
WPA decrypting with Wireshark debug

Hi, I recently set up a wireless lab to practice for the OSWP and I am running into a weird problem :

1. I set up my router with WPA/WPA2 PSK
2. I connected to it with a device and captured a handshake by deauthenticating it
3. I successfully cracked the password with aircrack-ng

Now, I am trying to decrypt it using Wireshark and here is my problem : Wireshark can't seem to be able to decrypt it (?)

1. I verified that there was a complete EAPOL transmission in the capture
2. I imported the PSK as described in Wireshark's documentation
3. I even tried using WPA PWD just in case I misconfigured the rooter

but nothing seems to work.

When I try to decrypt the traffic in captures like this one, Wireshark is able to decrypt it, so I guess the problem is with my own capture.

Also, I see that my packets do not have the Radio Tap Headernor the 802.11 radio informationlayers as shown here, but only the Frame, IEEE 802.11and Datalayers. Could this be why Wireshark can't decrypt it ?

If you have any idea or experienced anything similar I would really love your help.

submitted by /u/PetiteGousseDAil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Secret hack the box writeup

Secret hack the box walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is Stored XSS?

https://cdn-images-1.medium.com/max/1400/1*UTniym98-Ke8fLWdasByFA.png
An introduction to stored cross-site scripting (XSS) vulnerabilities

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Docker Essentials — Image Optimization

https://cdn-images-1.medium.com/max/1650/1*TnMBU4iVzcGbDrXyo7YHMA.png
Optimize Your Docker Images for Production Deployment.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Top 10 Vulnerabilities Latest 2021

https://cdn-images-1.medium.com/max/936/0*o8VlB0aVIBoKpDbF.png
What Is OWASP?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hash cracking service for members /r/redteamsec
https://www.reddit.com/r/redteamsec/comments/qmfnh2/hash_cracking_service_for_members_rredteamsec/

If you need a hash cracking service write to me. Here I have a sample of brute force cracking of an 11 character password for SHA256. It took 11 seconds. I have built computers for my own red teaming and pentesting. But sometimes computers don't work so I'm happy to help for money to crack your hash. ​ Maybe this will make your red teaming better. ​ https://preview.redd.it/ra2wbv44ajx71.png?width=1061&format=png&auto=webp&s=72a971b5456ca7f3f9ba6e8efff33ea6b61ec095 ​ My computers: 6 x GPU RX 6600 XT 10 x GPU RX 6600 XT I can crack bruteforce or on my or your dictionaries. We bill hourly for the number of GPUs. I suggest a price of $1 per GPU per hour of work. Discounts for larger orders. ​ If you order for example 10 hours and the password is broken after 2 hours I will return you money for not used time. ​ If you have any other idea then let me know. submitted by /u/blaszczakm (https://www.reddit.com/user/blaszczakm)
[link] (https://www.reddit.com/r/redteamsec/comments/qmfnh2/hash_cracking_service_for_members_rredteamsec/) [comments] (https://www.reddit.com/r/redteamsec/comments/qmfnh2/hash_cracking_service_for_members_rredteamsec/)

___________________________
@hacking_Attack
@Hacking_Video