Or if you’re stuck on PortSwigger’s DOM Clobbering labsContinue reading on Medium » (https://medium.com/@lai.glorison/explaining-basic-dom-clobbering-and-the-a-tag-ef10405464a8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Finding of Clickjacking bug
https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5

Bug Bounty WriteupContinue reading on Medium » (https://mukibas37.medium.com/finding-of-clickjacking-bug-f086bcf5f2fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Responder - LLMNR packets not interpreted on ESXI Virtual Machine
https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/

___________________________
@hacking_Attack
@Hacking_Video

Hello reddit, i have an issue with my responder setup when I run it on a VM (Kali Linux) which is deployed on ESXI. When I set up responder on a ESXI in the correct network/vlan etc. I receive llmnr broadcasts as seen in the wireshark capture, but responder is not answering on those. No poisioning is happening on LLMNR there are only MDNS packets which are answered. https://preview.redd.it/y1aspjpw05181.png?width=1739&format=png&auto=webp&s=a22ddf3a1e1d3c5c5644b01f341908ef6b9ad438 When I run the exact same virtual machine on my local computer in VMWare Workstation/Fusion, it is working absolutely fine. In both scenarios I receive LLMNR requests like you can see in the wireshark, but on ESXI responder is not able to answer them. Since we can't avoid running machines on VCenter, I really need a hint on what could cause this problem. ​ TLDR;
Responder works locally fine for LLMNR, on ESXI it does not respond to the requests which are hitting the kali linux machine. ​ Thanks for helping, larry submitted by /u/larryxt (https://www.reddit.com/user/larryxt)
[link] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzk3cn/responder_llmnr_packets_not_interpreted_on_esxi/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Melting-Cobalt : A Cobalt Strike Scanner That Retrieves Detected Team Server Beacons Into A JSON Object

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding of Clickjacking bug

Bug Bounty Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme-Vulnversity PART 1

https://cdn-images-1.medium.com/max/750/1*PfT4XCk3ciX2HCR4Kizw1A.png
CTF Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GITHUB RECON 5.1

https://cdn-images-1.medium.com/max/1597/1*fZ_qqkeXWSfrt8XvuHLkuQ.jpeg
Pesquise os repositórios GitHub de uma organização para dados confidenciais que tenham vazados acidentalmente ou informações que podem…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the different ways to attack a web app?

I've been looking online but all the articles I found were pretty much outdated.

submitted by /u/JeuneCuisse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
memit: Run binaries straight from memory in Linux (Go module + CLI tool)

https://external-preview.redd.it/6fd9davEWNR1AroueeAuW_QwtKDR7AcoUHoQPnd7s-s.jpg?width=640&crop=smart&auto=webp&s=302fcc5ae9f12373e7193cca879beeedf56824d6 submitted by /u/pope_friction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a fax number be spoofed/stollen?

I know faxing is considered more secure than email, however, my (very basic) understanding is it is not encrypted. Just like cell phone numbers are spoofed, could a fax line be spoofed. Or could someone hijack a fax phone number and receive those faxes? VOIP vs hardline? Does anyone know if it could be done, and has this example happened in the past? Thank you!

submitted by /u/sophchels
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OWASP ZAP automated scan freezing at 87%
https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/

I have tried doing multiple scans on multiple different domains. It never fails, every time it gets to 87% the memory maxes out. It doesn’t matter if I have 2GB or 8GB set on the VM. I was looking in the process of the scan and it seems like “Cross Site Scripting (DOM based)” is the current scan at that percentage. I don’t know what else I can do besides skip that portion of the scan. Any other suggestions? submitted by /u/Unknown_Mando (https://www.reddit.com/user/Unknown_Mando)
[link] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/)

___________________________
@hacking_Attack
@Hacking_Video

Sql injection nedir?Nasıl bulunur?Nasıl kullanılır?.
https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection Nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

TryHackme-Vulnversity PART 1
https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video