Hacking on Medium
SQL Injection Saldırıları

https://cdn-images-1.medium.com/max/640/1*P4f-Ep_XB2Fsyxh330YFIQ.jpeg
SQL injection ile websitesinin veritabanına sızma…

Continue reading on Medium »

Hacking on Medium
SQL Injection Attacks

https://cdn-images-1.medium.com/max/640/1*P4f-Ep_XB2Fsyxh330YFIQ.jpeg
Before saying what is SQL injection, let’s look at what is SQL

Continue reading on Medium »

Hacking on Medium
Still Getting Hacked

https://cdn-images-1.medium.com/max/1305/1*TPKUjqQ310RYHWk4WUFXHg.png
But the insurgency is free to roam, kill, loot, pillage, fully funded! UN Human Rights Amnesty International Library of Congress TIME Nat…

Continue reading on Medium »

https://b.thumbs.redditmedia.com/9EVu9E-zHVFvXksplV3RyRppfcH63baVgAaZLrj3VLI.jpg submitted by /u/lovetoclick
[link] [comments]

hacking: security in practice
Reverse Email Lookup

Is there a way to find out, for free, who owns an email address? I got an email from someone at work explaining they can’t connect remotely. It’s not from a corporate email but it was someone’s personal email (yahoo account).

submitted by /u/PowerCaddy14
[link] [comments]

hacking: security in practice
How to use tcpmux?

I found a service running on port 1 called tcpmux. I'd like to expolit it, but I found so little documentation online. Could you help me figure out how to use it?

submitted by /u/NatSpaghettiAgency
[link] [comments]

How can I directory brute force a reactive website with wildcard response
https://www.reddit.com/r/Pentesting/comments/r3fyuy/how_can_i_directory_brute_force_a_reactive/

<!-- SC_OFF -->Hello, So I am trying to directory brute force this app which I think was developed with react native. All pages are the same size before they are rendered and the site has 200 HTTP response for all directories so I cannot rely on HTTP responses. What I am thinking is to develop/redevelop a tool the render the page and look at it's size after rendering. if I find a page that has a different size than the default home page, it means that this page is valid. I already found this dirbuster tool that filters based on response size: https://github.com/ickerwx/buster Please help, do you know if such tools exists? or is there a more clever way to do this? Thanks, <!-- SC_ON --> submitted by /u/q8shihab (https://www.reddit.com/user/q8shihab)
[link] (https://www.reddit.com/r/Pentesting/comments/r3fyuy/how_can_i_directory_brute_force_a_reactive/) [comments] (https://www.reddit.com/r/Pentesting/comments/r3fyuy/how_can_i_directory_brute_force_a_reactive/)

OTP bypass with response manipulation.

Greetings, I wanted to share with you the OTP Bypass vulnerability that I found in a VDP.Continue reading on Medium »
Read more...

OTP bypass with response manipulation.
https://ertugrull.medium.com/otp-bypass-with-response-manipulation-12646c6d7f33?source=rss------bug_bounty-5

Greetings, I wanted to share with you the OTP Bypass vulnerability that I found in a VDP.Continue reading on Medium » (https://ertugrull.medium.com/otp-bypass-with-response-manipulation-12646c6d7f33?source=rss------bug_bounty-5)

Hacking on Medium
TryHackMe — Kenobi

https://cdn-images-1.medium.com/max/1400/0*EfJRYdzQzg5u32S0.jpeg
Task 1

Continue reading on Medium »

Hacking on Medium
Geisha:1: Vulnhub Walkthrough

https://cdn-images-1.medium.com/max/768/0*tVpwzO9swgho23fr.png
Makineyi indirebilirsiniz.

Continue reading on Medium »