hacking: security in practice
I keep getting emails stating that there was unusual sign in activities on my Microsoft account. I was skeptical at first, but now I have reason to believe the worst. Have I been "hacked"?

I've actually been receiving these emails for quite some time now, but ignored them because I thought it was phishing, or whatever. The emails look to have came from the same email address: ACCOUNT-SECURITY-NOREPLY@ACCOUNTPROTECTION.MICROSOFT(.)COM. I don't ever recall making a Microsoft account, unless it was something I needed to do when I first got my laptop and I just don't remember? I decided to go straight to the Microsoft log-in web page at login.live.com and reset my password. After password reset, I went to "recent activity" and saw that there were indeed multiple recent activities made onto the account within the past month or so, which includes: multiple unusual activity detected, multiple successful sign ins from different countries, automatic sync....like wtf? Countries ranging from the UK to Nepal to the Netherland, back to the U.S. So, what does all of this mean? Where do I go from here? What else do I need to do? I've already reset my password, as I said. Does this also mean my laptop has been hacked? I know that sounds like a silly question, but now I'm paranoid and anxious, unfortunately. I see the words "successful sign in" and "automatic sync" and makes me believe that these people (or person) were able to see my personal info and everything I was doing....

submitted by /u/wutevs-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal nedir?,Nasıl bulunur?,Web Security Academyden directory traversal lab çözümü.
https://mirabbasagalarov.medium.com/directory-traversal-nedir-nas%C4%B1l-bulunur-web-security-academyden-directory-traversal-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-f25244e562bb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal nedir?Continue reading on Medium » (https://mirabbasagalarov.medium.com/directory-traversal-nedir-nas%C4%B1l-bulunur-web-security-academyden-directory-traversal-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-f25244e562bb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
4-ZERO-3 - 403/401 Bypass Methods + Bash Automation

https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Introduction

4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same.

* NOTE : If you see multiple [200 Ok]/bypasses as output, you must check the Content-Length. If the content-length is same for multiple [200 Ok]/bypasses means false positive. Reason can be "301/302" or "../" [Payload] DON'T PANIC.
* Script will print cURLPAYLOAD if possible bypass found.
>_ Preview
https://blogger.googleusercontent.com/img/a/AVvXsEhoGba3T9vdnrum-WQkW5c_vF_d_26pES7w1AR-Xsn3rjBWXZIgIKGtQQqvC0SC2T693Rw4yqewJnCcU4S5M6oHOaeoD2w97yvKEx6jGeuGjRfeicF_6GdI7G4oSja0xmwacc4GybJZbOzbROjMe0WzRFzsVUxR5_o1ZPpY2eqqQ-joLIm6Zm8oVfDfpA=w640-h306
>_ Help

root@me_dheeraj:$ bash 403-bypass.sh -h
https://blogger.googleusercontent.com/img/a/AVvXsEgDvAlbr3MFwWUB0wVGBAuJPiR_cIhDn1a-FXzBhNR-RgYkvpkgsUl19bcNQ9_K6KcoWgJ-qM9cFMn3Ss9c3fZj0I83-Yqp6RxN9w7thB1WMtz0_m-QXlAvt-B7d9LFoNjVZQsqffiS7JPOR1kJtxTdeN-iyHOBKRr-6_a8EDOaJmjQpX0jRXb68brvkg=w640-h310
>_ Usage / Modes

* Scan with specific payloads:
* [ --header] Support HEADER based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --header

* [ --protocol] Support PROTOCOL based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --protocol

* [ --port] Support PORT based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --port

* [ --HTTPmethod] Support HTTP Method based bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --HTTPmethod

* [ --encode] Support URL Encoded bypasses/payloads
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --encode

* [ --SQLi] Support MySQL mod_Security & libinjection bypasses/payloads [** New **]
root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --SQLi
* Complete Scan {includes all exploits/payloads} for an endpoint [ --exploit ]

root@me_dheeraj:$ bash 403-bypass.sh -u https://target.com/secret --exploit

Prerequisites

* apt install curl [Debian]
Download 4-ZERO-3

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Directory Traversal nedir?,Nasıl bulunur?,Web Security Academyden directory traversal lab çözümü.

https://cdn-images-1.medium.com/max/707/1*AoGwv1ij3XB1YRuNYB6fSw.png
Directory Traversal nedir?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A PROUD MOMENT IN COLLEGE

The Secretary of my college has provided me a Fees Concession of 10%. Do you know why???

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phases of Social-Engineering in Cybercrime

https://cdn-images-1.medium.com/max/1920/1*PW_aeXUwlXUnyxkLp2edAg.gif
Investigation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox: BountyHunter

https://cdn-images-1.medium.com/max/600/1*d9GkGKSDwcRUcP8vZTDYIA.png
ENUMERATION

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
IDE — TryHackMe

https://cdn-images-1.medium.com/max/2600/0*L_b5JO_7O0-VB48Q
An easy box to practice Enumeration

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reporting a bug

As I've posted here before, i keep running into websites with xss and sql injection vulnerability and i wanted to ask is there a specific format for a report ? Btw I didn't find any of those websites listed on a bug bounty program so is it still worth reporting ?

submitted by /u/iiMoe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
NMAP Scan

I’m somewhat new to hacking and just now getting my feet wet. I have a couple of questions; Is there a way to discover an internal network’s assets with NMAP? Also, is there a way to scan those assets and not be on the internal network with NMAP or would I need somethin more extensive like Metasploit?

submitted by /u/PowerCaddy14
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
From Software To Monster #1 | Sky-Net

https://cdn-images-1.medium.com/max/2298/1*7ZcWr1rRKoXgwIvLGyIFKw.jpeg
Back-Story & Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video