hacking: security in practice
Are uni courses worth it?

I want to do cybersecurity for my career and was wondering if university is worth it or if I could just learn what they teach there on an online course?

submitted by /u/wengsweat
[link] [comments]

hacking: security in practice
From the hacker point of view what’s the best car?

I’m wonder what a hacker would suggest as the most reliable, practical, useful car: New and used?

Thanks in advance.

submitted by /u/Digital-Wave
[link] [comments]

Hacking on Medium
The Age-Old Secret to Cyber Immunity

https://cdn-images-1.medium.com/max/2600/1*pIWf11sCLY5tAg19izdIwg.jpeg
Health is Wealth

Continue reading on Responsible Cyber »

Hacking on Medium
Walking An Application[TryHackme + Intro To Web Hacking]

https://cdn-images-1.medium.com/max/600/1*kuXooUVn-50NkSQpRAx_pw.png
Learn the various ways of discovering hidden or private content on a webserver that could lead to new vulnerabilities.

Continue reading on Medium »

Hacking on Medium
Content Discovery [TryHackme+Intro To Web Hacking]

https://cdn-images-1.medium.com/max/600/1*ezg4L2ZIA_1E73GEyuqRIA.png
Learn the various ways of discovering hidden or private content on a webserver that could lead to new vulnerabilities.

Continue reading on Medium »

Hacking on Medium
West-Wild-v1:1 VM Walkthrough

https://cdn-images-1.medium.com/max/802/0*UmAEeQZBwJGPu03Z.png
Merhabalar,

Continue reading on Medium »

Hacking on Medium
CVE-2021–40290

https://cdn-images-1.medium.com/max/750/0*nI_MUEQP4-Jgr0KI
In this blog post, I’ll share the recent vulnerability I found in a CMS, how I found it and a POC exploit.

Continue reading on Medium »

Hacking on Medium
El FBI, la NSA y CISA explican cómo evitar este peligroso ransomware

https://cdn-images-1.medium.com/max/1518/0*z6YZ7LMfeD2JKeQd
PUBLICADO EN 1 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Black Hat Ethical Hacking
Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Offensive Security Tool: DotDotPwn – The Directory Traversal FuzzerPost Views: 211 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes

Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer GitHub Link DESCRIPTIONDotDotPwn – The Directory Traversal Fuzzer

It’s a very flexible intelligent fuzzer written by wireghoul to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc.

Also, it has a protocol-independent module to send the desired payload to the host and port specified. On the other hand, it also could be used in a scripting way using the STDOUT module.

It’s written in perl programming language and can be run either under OS X, *NIX or Windows platforms. It’s the first Mexican tool included in BackTrack Linux (BT4 R2).
Fuzzing modules supported in this version:

* HTTP
* HTTP URL
* FTP
* TFTP
* Payload (Protocol independent)
* STDOUT
*Whenever you find parameters in any URLS, especially after recon when performing bounty or pentesting, testing for Directory or Path Traveral attack with this tool is really effective, fast and accurate – especially when encoding is added within the requests sent to bypass several mechanisms.
See Also: Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware REQUIREMENTS* Perl (http://www.perl.org) Programmed and tested on Perl 5.8.8 and 5.10
* Nmap (http://www.nmap.org) Only if you plan to use the OS detection feature (needs root privileges)
Perl modules:

* Net::FTP
* TFTP (only required if fuzzing TFTP)
* Time::HiRes
* Socket
* IO::Socket
* Getopt::Std
You can easily install the missing modules doing the following as root:

# perl -MCPAN -e “install install Recent Tools* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-1-90x90.png Offensive Security Tool: ZipExec1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/carbon-2048x1374-1-90x90.png OSINT Tool: Osintgram2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/dalfox-90x90.png Offensive Security Tool: Dalfox3 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/unknown-90x90.png Offensive Security Tool: Whispers4 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/10/Screenshot_20211001_133045-90x90.png Offensive Security Tool: URL Hunter1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unknown-90x90.png Offensive Security Tool: Discover1 month ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/116777794-e9447880-aaa0-11eb-9697-af5f5617b279-90x90.png Offensive Security Tool: SniperPhish2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/jenkins-90x90.png Offensive Security Tool: Jenkins Attack Framework2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/pegasus-90x90.png Offensive Security Tool: Pegasus Spyware – Decompiled2 months ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/FIbbZME-90x90.png Offensive Security Tool: Starkiller2 [...]

___________________________
@hacking_Attack
@Hacking_Video

months ago
The post Offensive Security Tool: DotDotPwn – The Directory Traversal Fuzzer first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
4 Tips on How Small to Midsize Businesses Can Combat Cyberattacks

The first step in improving your cybersecurity is understanding your risk of attack.