Hacking on Medium
Palo Alto advierte sobre un error 0-Day en los firewalls que utilizan GlobalProtect Portal VPN

https://cdn-images-1.medium.com/max/1387/0*UP6Qhc4Q158okXZH
PUBLICADO EN 11 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El ransomware es un problema más allá de perder archivos

https://cdn-images-1.medium.com/max/1477/0*bSnPeU45IiISzwRe
PUBLICADO EN 11 NOVIEMBRE, 2021 POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sussy Malewife Catboys on the Hack Scene, a case study by Dr. Jenna Talia, PhD.

https://cdn-images-1.medium.com/max/1600/1*MwRedmxv7HIh5r6hdu2ryw.png
We begin our adventure in the desolate wasteland known as the “Post-2014 hack scene”. Riddled with unironic Guy Fawkes profile pictures…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Edited webpage elements and now unsure whether I worked around an unintentional coding error or exploited bad code. Which is it? Read below for details

First off, I know next to nothing about HTML or javascript yet.

I was trying to deactivate/delete an account that I have on a website. Towards the end of the process of deleting my account, I could not find where to finalize my request to delete the account.

After some googling I found that there’s supposed to be a button that you click to submit your request. It did not show up on my screen. I inspected the web page and searched for the button that was supposed to be there, changed some values from disabled to enabled, changed some “false” to “true”, changed “btn continue disabled” to “btn continue enabled”, and then I was able to click the button. I was able to click it and go to the next page where I finalized and sent my request.

The reason I’m unsure of if it was a coding error and if the button was supposed to be there is because that account is banned, and I thought maybe they block the button from banned users.

submitted by /u/AverageCyberDude
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is my laptop compromised?

My AWS account was recently hacked and a web crawler installed at my expense. For the past year I've also been getting blocked at captcha checkpoints when using google as they are detecting unusual traffic coming from my system. My system isnt slow, and I don't have popups that arent dealt with by malwarebytes. Is it likely my computer is hacked?

submitted by /u/Akemedis_jones
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How To Crack WiFi (Wireless) Networks Using Cow Patty and Air-Crack

https://external-preview.redd.it/IqkrBs8o7jAgV6yhC_KwSlSd96eBCx3haA8BlBBiYks.jpg?width=320&crop=smart&auto=webp&s=a9d244b45e8a683784a822fdbc69afcea768b09e submitted by /u/OmegaNutella
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Microsoft patches Excel zero-day used in attacks, asks Mac users to wait

___________________________
@hacking_Attack
@Hacking_Video

Boofuzz - Network Protocol Fuzzing for Humans

Boofuzz is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, boofuzz aims for extensibility. The goal: fuzz everything.Why?Sulley has been the preeminent open source fuzzer for some time, but has fallen out of maintenance.FeaturesLike Sulley, boofuzz incorporates all the critical elements of a fuzzer:Easy and quick data generation.Instrumentation – AKA failure detection.Target reset after failure.Recording of test data.Unlike Sulley, boofuzz also features:Online documentation.Support for arbitrary communications mediums.Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.Better recording of test data -- consistent, thorough, clear.Test result CSV export.Extensible instrumentation/failure detection.Much easier install experience!Far fewer bugs.Sulley is affectionately named after the giant teal and purple creature from Monsters Inc. due to his fuzziness. Boofuzz is likewise named after the only creature known to have scared Sulley himself: Boo!Boo from Monsters IncInstallationpip install boofuzzBoofuzz installs as a Python library used to build fuzzer scripts. See INSTALL.rst for advanced and detailed instructions.DocumentationDocumentation is available at https://boofuzz.readthedocs.io/, including nifty quickstart guides.ContributionsPull requests are welcome, as boofuzz is actively maintained (at the time of this writing ;)). See CONTRIBUTING.rst.CommunityFor questions that take the form of “How do I… with boofuzz?” or “I got this error with boofuzz, why?”, consider posting your question on Stack Overflow. Make sure to use the fuzzing tag.If you’ve found a bug, or have an idea/suggestion/request, file an issue here on GitHub.For other questions, check out boofuzz on gitter or Google Groups.For updates, follow @b00fuzz on Twitter.Download Boofuzz
Read more...

___________________________
@hacking_Attack
@Hacking_Video

All about Bug Bounty GitHubBug

Bug Bounty GitHubContinue reading on Medium »
Read more...

How I got $200 in 30 Seconds.

Hello Guys. I am Yash working as a security researcher,Continue reading on Medium »
Read more...

From URL dumps digging to IDOR , BAC, Massive Phishing in Udemy

Hey All,Continue reading on Medium »
Read more...

4 Risky bugs to report to bounty programs

Bugs that you should avoid or reconsider before reporting to programs.Continue reading on Medium »
Read more...

Earn $AMPT while Discovering Decentralised Governance

Guaranteed to WIN! $70K+ In Total Rewards!!Continue reading on Amplify Protocol »
Read more...

KitPloit - PenTest Tools!
Boofuzz - Network Protocol Fuzzing for Humans

https://blogger.googleusercontent.com/img/a/AVvXsEhHs-Mr5_2Nmke0L3y0-cRwzCZcjGbSISpohXIethFOau4-iP3wGOULB_UH0wPY12Ru1lGTaBci-F1ac6AEt29ei9FH6ygI1EbE9sNb2kM7_ypOukycB7TUjXg3f-FMw9zA4ksXRrRJEXXNAuEepcidgqYobu1uEzFyIOI89NRj_ETM5kZqhmE2hmS7mA=w538-h640
Boofuzz is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, boofuzz aims for extensibility. The goal: fuzz everything.
Why?

Sulley has been the preeminent open source fuzzer for some time, but has fallen out of maintenance.

Features

Like Sulley, boofuzz incorporates all the critical elements of a fuzzer:

* Easy and quick data generation.
* Instrumentation – AKA failure detection.
* Target reset after failure.
* Recording of test data.

Unlike Sulley, boofuzz also features:

* Online documentation.
* Support for arbitrary communications mediums.
* Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.
* Better recording of test data -- consistent, thorough, clear.
* Test result CSV export.
* Extensible instrumentation/failure detection.
* Much easier install experience!
* Far fewer bugs.

Sulley is affectionately named after the giant teal and purple creature from Monsters Inc. due to his fuzziness. Boofuzz is likewise named after the only creature known to have scared Sulley himself: Boo!
https://blogger.googleusercontent.com/img/a/AVvXsEiELu-QNyBcbrIqahNBSQjZguGEvXICb4NQwJKWqZo-NCwxgKvbskSPgPMs3JKciUlGGm02EHsf0BGbbqBSdvh203Fgp0_N3JNrqmS4kW4xiwNavI5hVm5HvW99dm_gMayCyqMKJ69a2dQnI3wv6CILkNTJwu1V-WSMD8NvFMqhnVcWswLOArlKly8R3w=s320
Boo from Monsters Inc
Installation
pip install boofuzz

Boofuzz installs as a Python library used to build fuzzer scripts. See INSTALL.rst for advanced and detailed instructions.

Documentation

Documentation is available at https://boofuzz.readthedocs.io/, including nifty quickstart guides.

Contributions

Pull requests are welcome, as boofuzz is actively maintained (at the time of this writing ;)). See CONTRIBUTING.rst.

Community

For questions that take the form of “How do I… with boofuzz?” or “I got this error with boofuzz, why?”, consider posting your question on Stack Overflow. Make sure to use the fuzzingtag.

If you’ve found a bug, or have an idea/suggestion/request, file an issue here on GitHub.

For other questions, check out boofuzz on gitter or Google Groups.

For updates, follow @b00fuzz on Twitter.
Download Boofuzz

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Do I Know It's Time to Consider a SASE Migration?

The rapid shift to a hybrid workplace and accelerated adoption of new technologies means it's time to rethink networking security approaches.

Dark Reading: Attacks/Breaches
Google Open Sources ClusterFuzzLite

ClusterFuzzLite is a stripped-down version of continuous fuzzing tool ClusterFuzz that integrates CI tools.