Hacking on Medium
RCE with Server-Side Template Injection

https://cdn-images-1.medium.com/max/2600/1*jTOjIeK0cA7v-osM5Yl6bA.jpeg
Python Flask Application with Jinja2 Template —  Doctor HTB machine

Continue reading on R3d Buck3T »

( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature
https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5

Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium » (https://aidilarf.medium.com/1000-insecure-direct-object-references-idor-via-takeover-unsubscribe-feature-52eb2de1f9f3?source=rss------bug_bounty-5)

hacking: security in practice
How do UAV GPS spoofing attacks work in very simple terms?

Trying to understand about them but I don't get how they are executed and how can someone protect the system from GPS spoofing

submitted by /u/Br3ikros
[link] [comments]

hacking: security in practice
Iranian Hackers Broke Into Newspaper Publisher Lee Enterprises Ahead of 2020 Election

https://external-preview.redd.it/7E4y0rawHjbwGFbR-cnNKbaVIhjtV-xrWN5V72MceKk.jpg?width=640&crop=smart&auto=webp&s=a9624685225a4142e87b95c53d95cb9b66c4fab1 submitted by /u/eis3nheim
[link] [comments]

hacking: security in practice
Would anyone be interested in joining a small community of makers?

Hi All,

I have started a small community to bring all kinds of makers together and I was wondering whether anyone here would be interested to join? I think a combination of developers, designers and marketing people would be awesome so I'm hoping to get that going xD

https://discord.gg/ncRsYT33uG

submitted by /u/MCtoUMD
[link] [comments]

hacking: security in practice
Turning Windows Defender off in cmd = Trojan???

Hello, I have recently grown interested in pen testing and have been using my laptop as a victim for my rubber ducky scripts. However, any time I try and turn off windows defender via command line, whether through a ducky payload or myself, windows defender detects it as a Trojan. I'd like to infect my laptop with my ransomware with my rubber ducky, but cannot seem to get around this. Any ideas?

submitted by /u/Gravy69420
[link] [comments]

A collection of keys I've acquired over the years as a telecom guy and a couple I recently got from ebay. Also, no I don't reprogram the magstripe on the old hotel keycard...I just use it to slip door latches and punch ethernet cable into cat5e/cat6 jacks instead of chewing up my own bank/ID cards
https://www.reddit.com/r/Pentesting/comments/qxyozq/a_collection_of_keys_ive_acquired_over_the_years/

submitted by /u/519meshif (https://www.reddit.com/user/519meshif)
[link] (https://imgur.com/abPKlux) [comments] (https://www.reddit.com/r/Pentesting/comments/qxyozq/a_collection_of_keys_ive_acquired_over_the_years/)

Hacking on Medium
Permit me to introduce you all to a well efficient, gifted and reliable hackers.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Help pls
https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/

<!-- SC_OFF -->I am Moroccan and I live in Morocco can i work remotely with US company without visa and do my salary have change because i live in morocco ? <!-- SC_ON --> submitted by /u/fenixnni (https://www.reddit.com/user/fenixnni)
[link] (https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/) [comments] (https://www.reddit.com/r/Pentesting/comments/qy2onx/help_pls/)

( $1000 ) Insecure direct Object References (IDOR) Via TakeOver Unsubscribe Feature

Assalamualaikum Bug Hunter & Hi everyone.Continue reading on Medium »
Read more...

pwnSpoof - Generates realistic spoofed log files for common web servers with customisable attack scenarios
http://www.kitploit.com/2021/11/pwnspoof-generates-realistic-spoofed.html

___________________________
@hacking_Attack
@Hacking_Video

pwnSpoof (from Punk Security (https://punksecurity.co.uk/)) generates realistic spoofed log files for common web servers with customisable attack scenarios.Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials.Can you find the attacker session and build the incident picture?

___________________________
@hacking_Attack
@Hacking_Video