IDOR that worth $3k, the first bug I found in HackerOne

That’s why you should analyze sussy IDs :)Continue reading on Medium »
Read more...

How Blockchain Projects Can Run Ethical Bug Bounty Programs — And What Happens If They Don’t
https://medium.com/immunefi/how-blockchain-projects-can-run-ethical-bug-bounty-programs-and-what-happens-if-they-dont-7dc8a092ede3?source=rss------bug_bounty-5

Crypto is the wild west, which is both a strength and a weakness. It’s a strength because its norms of freedom, tolerance, and…Continue reading on Immunefi » (https://medium.com/immunefi/how-blockchain-projects-can-run-ethical-bug-bounty-programs-and-what-happens-if-they-dont-7dc8a092ede3?source=rss------bug_bounty-5)

Hacking on Medium
Cewlkid:1 Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/820/0*OftDuVpdu9j5GSn4.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

Hacking on Medium
How Blockchain Projects Can Run Ethical Bug Bounty Programs — And What Happens If They Don’t

https://cdn-images-1.medium.com/max/2600/1*ybZh-vq6t4h8K6zbcsQkxw.jpeg
Crypto is the wild west, which is both a strength and a weakness. It’s a strength because its norms of freedom, tolerance, and…

Continue reading on Immunefi »

Hacking on Medium
Emotet regresó y se distribuye a través de correos con adjuntos maliciosos

https://cdn-images-1.medium.com/max/1412/0*DAEHubkyK-dGXQxd
PUBLICADO EN 19 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

hacking: security in practice
Search engine

I'm looking for a username/search engine equivalent to pipl. Any?

submitted by /u/weenur1991
[link] [comments]

hacking: security in practice
Have any of you guys made/tried making sneaker/gpu/console bots?

I'm in the middle of making my second PS5/Xbox (console) bot and I've found the process pretty interesting. My first bot I just used a headless browser and spammed actions on the site which wasn't very useful when there was high traffic. The second one I'm working on right now is 100x better and doesn't use those slow methods at all. I come from app and web development so this really isn't domain but it seems like so much fun!

​

Always knew it was the pen test/hacker guys making bots. Just curious to see if it's a common thing to dabble with coming from this field

submitted by /u/A4_Ts
[link] [comments]

Try hack me premium VS Hack the box academy premium
https://www.reddit.com/r/Pentesting/comments/qxo25w/try_hack_me_premium_vs_hack_the_box_academy/

<!-- SC_OFF -->I am a beginner and I am thinking about a pro account so which one would you guys recommend View Poll (https://www.reddit.com/poll/qxo25w) <!-- SC_ON --> submitted by /u/Massive_Buy5210 (https://www.reddit.com/user/Massive_Buy5210)
[link] (https://www.reddit.com/r/Pentesting/comments/qxo25w/try_hack_me_premium_vs_hack_the_box_academy/) [comments] (https://www.reddit.com/r/Pentesting/comments/qxo25w/try_hack_me_premium_vs_hack_the_box_academy/)

Nosferatu - Lsass NTLM Authentication Backdoor
http://www.kitploit.com/2021/11/nosferatu-lsass-ntlm-authentication.html

Lsass NTLM Authentication (https://www.kitploit.com/search/label/Authentication) Backdoor
How it Works
First, the DLL is injected into the lsass.exe process, and will begin hooking authentication WinAPI calls. The targeted function is MsvpPasswordValidate(), located in NtlmShared.dll. In the pursuit of not being detected, the hooked function will call the original function and allow for the normal flow of authentication. Only after seeing that authentication has failed will the hook swap out the actual NTLM hash with the backdoor (https://www.kitploit.com/search/label/Backdoor) hash for comparison.
Usage
Nosferatu must be compiled as a 64 bit DLL. It must be injected using the a DLL Injector (https://www.kitploit.com/search/label/DLL%20Injector) with SeDebugPrivilege.

You can see it loaded using Procexp:

 Login example using Impacket:

Limitations
In an Active Directory (https://www.kitploit.com/search/label/Active%20Directory) environment, authentication via RDP, runas, or the lock screen does not work with the nosferatu password. Authentication using SMB, WinRM, and WMI is still possible.In a non-AD environment, authentication works for all aspects.

Download Nosferatu (https://github.com/kindtime/nosferatu)