Hacking on Medium
Top Assembly Instructions for Malware Analysis

Knowledge of assembly (x86) is crucial to being a good malware analyst, but knowledge of all assembly instructions might be an overkill…

Continue reading on Medium »

Hacking on Medium
Ghost let me Inject OS Commands (RCE)

https://cdn-images-1.medium.com/max/897/1*RbIHKadQm8u3wGBwZIwFuQ.png
Hello again his/her

Continue reading on Medium »

Hacking on Medium
Zebec’s Hackathon: The Ship 2021 Highlights

https://cdn-images-1.medium.com/max/2480/1*TwN5-xwP5ogLUJb4Hljy4Q.jpeg
Hack with Zebec and Win up to $10000!

Continue reading on Zebec Protocol »

Hacking on Medium
La disputa compris Estados Unidos e Irán se intensifica nuevamente, los piratas informáticos…

https://cdn-images-1.medium.com/max/1280/0*D3mqlXIOzDW8mHTY
Un grupo de piratas informáticos patrocinado por el gobierno iraní está lanzando un ciberataque perturbador contra empresas…

Continue reading on Medium »

Hacking on Medium
Remember These XSS Days?

https://cdn-images-1.medium.com/max/2600/0*qNn2Lxpoyl2Oasq9
So a couple fellow security researchers were talking about the bugs we found that particular day and one of them brought up XSS and how a…

Continue reading on Medium »

hacking: security in practice
Is it possible for a SSD 6 12 pin enclosure adapter or USB cable to get hacked and steal data from SSD?

Got one from China that came with a usb cable and wondering if the enclosure adapter or usb cable could be malicious and how would it operate? Thanks.

submitted by /u/Plastic-Ad-8750
[link] [comments]

hacking: security in practice
My boss argues not using https and storing passwords in plain text is not a security issue. How do I explain?

Using old asp. Net 4.0 site She is not willing to upgrade the infrastructure. Is it possible to show her it is insecure and she is putting clients in risk?

submitted by /u/Notsadnotglad
[link] [comments]

A STORY OF OPEN REDIRECTION THROUGH REFERER HEADER.

Hello Hackers!!!Continue reading on Medium »
Read more...

Remember These XSS Days?

So a couple fellow security researchers were talking about the bugs we found that particular day and one of them brought up XSS and how a…Continue reading on Medium »
Read more...

IDOR that worth $3k, the first bug I found in HackerOne
https://citril.medium.com/idor-that-worth-3k-the-first-bug-i-found-in-hackerone-d1e32f712e30?source=rss------bug_bounty-5

That’s why you should analyze sussy IDs :)Continue reading on Medium » (https://citril.medium.com/idor-that-worth-3k-the-first-bug-i-found-in-hackerone-d1e32f712e30?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Zero Trust: An Answer to the Ransomware Menace?

Zero trust isn't a silver bullet, but if implemented well it can help create a much more robust security defense.

Dark Reading: Attacks/Breaches
To Beat Ransomware, Apply Zero Trust to Servers Too

The path out of the ransomware crisis is full inspection and protection of all traffic flows. That means zero trust everywhere — even between servers.