HOW I HACKED BILLION ANDROID USERS SOCIAL AND 3rd PARTY ACCOUNT | A STORY ABOUT 5000$ BUG
In this blog, I will explain the process of how I discovered a vulnerability that triggers the mobile application which in turn allows me…
Read more...
In this blog, I will explain the process of how I discovered a vulnerability that triggers the mobile application which in turn allows me…
Read more...
How I was able to send SMS from target and get their OTP.
Hey fellow hackers and bug hunters,
Read more...
Hey fellow hackers and bug hunters,
Read more...
TryHackMe — Jeff
Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.
Read more...
Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.
Read more...
Exploiting Password Reset Poisoning
for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...
for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...
OTP Bypass via response manipulation
Hello Hunters, today I'm going tell about my one of the finding in which I'm able to bypass the OTP page. So let’s begin.Continue reading on Medium »
Read more...
Hello Hunters, today I'm going tell about my one of the finding in which I'm able to bypass the OTP page. So let’s begin.Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Pwning Photographer!!- OSCP Type Machine Write-up
https://cdn-images-1.medium.com/max/2177/1*JotWhHBGrNqW9BVgXt0I7w.jpeg
This is one of the intermediate machine from Offensive Security Proving Grounds!. So let’s dive in as per our goal.
Continue reading on Medium »
Pwning Photographer!!- OSCP Type Machine Write-up
https://cdn-images-1.medium.com/max/2177/1*JotWhHBGrNqW9BVgXt0I7w.jpeg
This is one of the intermediate machine from Offensive Security Proving Grounds!. So let’s dive in as per our goal.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Jobs that you can get as a hacker
https://cdn-images-1.medium.com/max/1920/1*l9pWYZ-UBR2qwG-l30QxcA.jpeg
Are you a hacker and and looking for a suitable job.
Continue reading on Medium »
Jobs that you can get as a hacker
https://cdn-images-1.medium.com/max/1920/1*l9pWYZ-UBR2qwG-l30QxcA.jpeg
Are you a hacker and and looking for a suitable job.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack The Box — BountyHunter Walkthrough
https://cdn-images-1.medium.com/max/2048/1*7Hd6N--vBLG6JZXMXJoJ3g.jpeg
Hello guys, Hope you are good and well. We are gonna see the walkthrough of the BountyHunter machine in Hack The Box.
Continue reading on InfoSec Write-ups »
Hack The Box — BountyHunter Walkthrough
https://cdn-images-1.medium.com/max/2048/1*7Hd6N--vBLG6JZXMXJoJ3g.jpeg
Hello guys, Hope you are good and well. We are gonna see the walkthrough of the BountyHunter machine in Hack The Box.
Continue reading on InfoSec Write-ups »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
RootMe TryHackMe Writeup
https://cdn-images-1.medium.com/max/700/1*PoznIQhCnwdOXFU3NEPSqA.png
A ctf for beginners, can you root me?
Continue reading on Medium »
RootMe TryHackMe Writeup
https://cdn-images-1.medium.com/max/700/1*PoznIQhCnwdOXFU3NEPSqA.png
A ctf for beginners, can you root me?
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TOOLS#5 ~ Lacak lokasi seseorang secara akurat dengan Seeker
https://cdn-images-1.medium.com/max/640/0*ysHFm_IlViZVzB-n
Disclaimer: Semua yang saya tulis disini tidak ada kaitannya untuk menyudutkan pihak manapun, tulisan ini murni hanya untuk BELAJAR
Continue reading on Medium »
TOOLS#5 ~ Lacak lokasi seseorang secara akurat dengan Seeker
https://cdn-images-1.medium.com/max/640/0*ysHFm_IlViZVzB-n
Disclaimer: Semua yang saya tulis disini tidak ada kaitannya untuk menyudutkan pihak manapun, tulisan ini murni hanya untuk BELAJAR
Continue reading on Medium »
hacking: security in practice
Social media profile visitors
Is there any way I can check this via some app? I wanted to know who checks my profile and how many times.
submitted by /u/Ann4_S
[link] [comments]
Social media profile visitors
Is there any way I can check this via some app? I wanted to know who checks my profile and how many times.
submitted by /u/Ann4_S
[link] [comments]
reddit
Social media profile visitors
Is there any way I can check this via some app? I wanted to know who checks my profile and how many times.
https://a.thumbs.redditmedia.com/VMkC7Vfh7jm-J3ijCWE08wnMSqb7arVGtKlxd0v8HG8.jpg There's a JavaScript challenge in DVWA where a page asking us to submit the word "success" to win.
I did change the word "ChangeMe" to "success", however the page return "Invalid token" message.
https://preview.redd.it/qti1gxttpcz71.png?width=550&format=png&auto=webp&s=a5736e25b8aafe00dc9a557fb5e66f725f521b93
Here's how the request looks like in Burp
I understand that Cookie remains the same as I was on the same session.
Question 1: What about token? Is that normal to have similar token too no matter what phrase do you change?
Question 2: Is this consider as security vulnerability?
submitted by /u/w0lfcat
[link] [comments]
I did change the word "ChangeMe" to "success", however the page return "Invalid token" message.
https://preview.redd.it/qti1gxttpcz71.png?width=550&format=png&auto=webp&s=a5736e25b8aafe00dc9a557fb5e66f725f521b93
Here's how the request looks like in Burp
POST /vulnerabilities/javascript/ HTTP/1.1 Host: localhost Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://localhost/vulnerabilities/javascript/ Content-Type: application/x-www-form-urlencoded Content-Length: 65 DNT: 1 Connection: close Cookie: PHPSESSID=c8f9p19iv3b8s0cm58d7pm1e25; security=low Upgrade-Insecure-Requests: 1 token=8b479aefbd90795395b3e7089ae0dc09&phrase=success&send=Submit I understand that Cookie remains the same as I was on the same session.
Question 1: What about token? Is that normal to have similar token too no matter what phrase do you change?
Question 2: Is this consider as security vulnerability?
submitted by /u/w0lfcat
[link] [comments]
hacking: security in practice
What are your go to initial nmap options?
After doing one of the recent tryhackme rooms where you had to do your scan to avoid being detected by the IDS it got me thinking about my initial scan options.
For whatever reason I used to always use -sV -O or -sS. Both of course set off the IDS alarm. I ended up using -f -sN to avoid detection.
Where do you guys start? I’d assume one wouldn’t want to fire off the bat signal right away. Or do you not really care and maybe use a vpn or something in case you get blocked using a louder scan.
submitted by /u/space_wiener
[link] [comments]
What are your go to initial nmap options?
After doing one of the recent tryhackme rooms where you had to do your scan to avoid being detected by the IDS it got me thinking about my initial scan options.
For whatever reason I used to always use -sV -O or -sS. Both of course set off the IDS alarm. I ended up using -f -sN to avoid detection.
Where do you guys start? I’d assume one wouldn’t want to fire off the bat signal right away. Or do you not really care and maybe use a vpn or something in case you get blocked using a louder scan.
submitted by /u/space_wiener
[link] [comments]
reddit
What are your go to initial nmap options?
After doing one of the recent tryhackme rooms where you had to do your scan to avoid being detected by the IDS it got me thinking about my initial...