Dark Reading: Attacks/Breaches
MSPAlliance Leadership Council Forms Vendor Council to Address Managed Services Supply Chain Risk

MSP supply chain threats will be mitigated through transparency, education, business continuity planning, and managed services channel certification.

___________________________
@hacking_Attack
@Hacking_Video

Finding with dork a multiple DOM XSS in the same html

A month ago I tried to search a programs in bug bounty and I saw a domain web.com and I try ever with a simple dork: site:web.com ext:html.Continue reading on Medium »
Read more...

Deep Web
Deep web consultant

I’ve been looking for a consultant on the deep web. Sort of like, someone you would pay for tech work but for deep web stuff.

submitted by /u/TransGoTa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Stop Trying to Hack Everything

https://cdn-images-1.medium.com/max/2600/0*tH0B2wfo1aeCEu1A
I’m relatively new to Medium; so far, so good. But, I cannot help noticing that virtually every suggested story on my feed revolves around…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Falsify the function of an app

What is the easiest way to recreate a single function of an app? Are there programmes for this or do I have to do it myself?

submitted by /u/emilmaster11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Editing Cpap machine data...

Has anyone been successful at this?

submitted by /u/Nietzsche_Strategy
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wardriving to capture handshakes?

I'm looking for software or scripts (anything open source) which would allow me to capture a large number of handshakes as I have seen an article talking about how common it is for people to set their phone number as a wife I password and I'm want to see how true it is.

My hardware options are: raspberry pi, laptop with kali (laptop and PI use wifi adapters), wifi pineapple mark 7

Any recommendations for tools to accomplish this purpose? The tools I tried so far didn't work quite well.

submitted by /u/pottato-killer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Password Reset Poisoning

for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...

Exploiting Password Reset Poisoning
https://infosecwriteups.com/exploiting-password-reset-poisoning-b748797f0661?source=rss------bug_bounty-5

for account takeover and max bounty!Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-password-reset-poisoning-b748797f0661?source=rss------bug_bounty-5)

Hacking on Medium
Exploiting Password Reset Poisoning

https://cdn-images-1.medium.com/max/1280/1*5JA0HKJTmgoym4FL51HVfg.jpeg
for account takeover and max bounty!

Continue reading on InfoSec Write-ups »

Hacking on Medium
Cyber Defenders Phishy Walkthrough

https://cdn-images-1.medium.com/max/1920/1*QVMyxN7w5s39-IivbLdazQ.png
What is the AD1 file? 
AD1 filename suffix is mostly used for Forensic Toolkit FTK Imager Image files. Forensic Toolkit FTK Imager Image…

Continue reading on InfoSec Write-ups »

Hacking on Medium
What is Access Control?

https://cdn-images-1.medium.com/max/1600/0*1jghZ-NBmWWaGFcP
How important is Access Control?Isn’t that the real question?

Continue reading on rootissh »

Analyzing a watering hole campaign using macOS exploits
https://www.reddit.com/r/redteamsec/comments/qswe9s/analyzing_a_watering_hole_campaign_using_macos/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/) [comments] (https://www.reddit.com/r/redteamsec/comments/qswe9s/analyzing_a_watering_hole_campaign_using_macos/)

OTP Bypass via response manipulation
https://medium.com/@thehemdeep/otp-bypass-via-response-manipulation-31a524f968cc?source=rss------bug_bounty-5