Kali Linux Tutorials
Melting-Cobalt : A Cobalt Strike Scanner That Retrieves Detected Team Server Beacons Into A JSON Object

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding of Clickjacking bug

Bug Bounty Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackme-Vulnversity PART 1

https://cdn-images-1.medium.com/max/750/1*PfT4XCk3ciX2HCR4Kizw1A.png
CTF Writeup

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GITHUB RECON 5.1

https://cdn-images-1.medium.com/max/1597/1*fZ_qqkeXWSfrt8XvuHLkuQ.jpeg
Pesquise os repositórios GitHub de uma organização para dados confidenciais que tenham vazados acidentalmente ou informações que podem…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are the different ways to attack a web app?

I've been looking online but all the articles I found were pretty much outdated.

submitted by /u/JeuneCuisse
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
memit: Run binaries straight from memory in Linux (Go module + CLI tool)

https://external-preview.redd.it/6fd9davEWNR1AroueeAuW_QwtKDR7AcoUHoQPnd7s-s.jpg?width=640&crop=smart&auto=webp&s=302fcc5ae9f12373e7193cca879beeedf56824d6 submitted by /u/pope_friction
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can a fax number be spoofed/stollen?

I know faxing is considered more secure than email, however, my (very basic) understanding is it is not encrypted. Just like cell phone numbers are spoofed, could a fax line be spoofed. Or could someone hijack a fax phone number and receive those faxes? VOIP vs hardline? Does anyone know if it could be done, and has this example happened in the past? Thank you!

submitted by /u/sophchels
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OWASP ZAP automated scan freezing at 87%
https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/

I have tried doing multiple scans on multiple different domains. It never fails, every time it gets to 87% the memory maxes out. It doesn’t matter if I have 2GB or 8GB set on the VM. I was looking in the process of the scan and it seems like “Cross Site Scripting (DOM based)” is the current scan at that percentage. I don’t know what else I can do besides skip that portion of the scan. Any other suggestions? submitted by /u/Unknown_Mando (https://www.reddit.com/user/Unknown_Mando)
[link] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/) [comments] (https://www.reddit.com/r/Pentesting/comments/qzokcl/owasp_zap_automated_scan_freezing_at_87/)

___________________________
@hacking_Attack
@Hacking_Video

Sql injection nedir?Nasıl bulunur?Nasıl kullanılır?.
https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SQL Injection Nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/sql-injection-nedir-nas%C4%B1l-bulunur-nas%C4%B1l-kullan%C4%B1l%C4%B1r-1ccdee3b76fd?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

TryHackme-Vulnversity PART 1
https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CTF WriteupContinue reading on Medium » (https://mukibas37.medium.com/tryhackme-vulnversity-part-1-5b232c888f90?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ThreadBoat - Program Uses Thread Execution Hijacking To Inject Native Shell-code Into A Standard Win32 Application

Program uses Thread Hijacking to Inject Native Shellcode into a Standard Win32 Application.AboutI developed this small project to continue my experiences of different code injection methods and to allow RedTeam security professionals to utilize this method as a unique way to perform software penetration testing. With Thread hijacking, it allows the hijacker.exe program to susepend a thread within the target.exe program allowing us to write shellcode to that target thread, and later be executed (via; WriteProcessMemory(), SetThreadContext(), ResumeThread(), CreateThread()).Example GIF (Credits To Endgame)Usageint main(){ System sys; Interceptor incp; Exception exp; sys.returnVersionState(); if (sys.returnPrivilegeEscalationState()) { std::cout << "Token Privileges Adjusted\n"; } if (DWORD m_procId = incp.FindWin32ProcessId((PCHAR)mwin32ProcessName)) { incp.ExecuteWin32Shellcode(mprocId); } system("PAUSE"); return 0;}For Further Information On Thread Execution HijackingClick On The Link Belowhttps://capec.mitre.org/data/definitions/30.htmlEnvironmentWindows Vista+Visual C++LibsWinapiuser32.dllkernel32.dllntdll.dllEthical NoticeThis code was simply written to demonstrate an overlooked method to inject shellcode or a DLL into a Win32 program. This code is not to be used for malicous purposes. The author, Josh Schiavone, is not liable for misuse of this software. May God bless you all.Download ThreadBoat
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Why the 'Basement Hacker' Stereotype Is Wrong — and Dangerous

It engenders a false sense of superiority that spurs complacency among risk managers and executives, who in turn may underinvest in security teams, rely too much on automation, or both.