Hacking on Medium
Sauna @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*aT-UAxJtVzvZ_H4c.jpg
Sauna is a 20-point Windows Machine on HackTheBox. For user, we bruteforce usernames and then use ASREP-Roasting to obtain the hash of one…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Book @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*PErHhEI6pD18fPMH.jpg
Book is a 30-point Linux machine on HackTheBox. We log into a web application by exploiting SQL truncation and then use a Local File…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ForwardSlash @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*N7vqZgewwR_VxrAL.jpg
ForwardSlash is a 40-point Linux Machine on HackTheBox. We use a path traversal vulnerability to get ssh credentials and abuse a custom…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Player2 @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*0U0rd46I93SPybOJ.jpg
Player2 is a 50-point Linux machine on HackTheBox. For user we do some web fuzzing, call a twirp method to get credentials, find hidden…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resolute @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*iVLM5Pa6jNER-HBn.jpg
Resolute is a 30-point Windows machine on HackTheBox that involves enumerating LDAP, Password Spraying, and using the DNSAdmins group to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Rope @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*WISP1UedGN7Ib1PL.jpg
Rope is a 50-point machine on HackTheBox that involves 3 binary exploits. There is a format string vulnerability in the boxes’s webserver…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Patents @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*NvYTiM_1F7Qf1WhI.jpg
Patents is a 40-point Linux machine on HackTheBox. For user we exploit an external entity injection in a word document and a local file…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ways to hack social media accounts …

https://cdn-images-1.medium.com/max/1080/1*FYJy98PEjj0dXeZarLuEVQ.jpeg
OPTIONS

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Obscurity @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*AnvcoeJ1w-ey_80H.jpg
Obscurity is a 30-point Linux machine on HackTheBox that involves exploiting a command injection in a custom webserver, breaking a simple…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Phone number spoofing

Okay so the company I work for has been receiving complaints from clients saying we called them many times, which never happened. So i wondered if this might be caused by phone number spoofing.

In that case, how can we protect from it?

We use a cloud phone system service.

submitted by /u/Wiresharkk_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Fob Options

https://www.msn.com/en-us/news/technology/toyota-is-going-to-make-you-pay-to-start-your-car-with-your-key-fob/ar-AARKekd?ocid=msedgdhp&pc=U531

alternatives?

submitted by /u/SJSEng
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anybody get a iCloud password for me.

Dm me if you can.

submitted by /u/Searly_quail
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

FiddleZAP - A Simplified Version Of EKFiddle For OWASP ZAP
http://www.kitploit.com/2021/12/fiddlezap-simplified-version-of.html

FiddleZAP is a simplified version of EKFiddle (https://github.com/malwareinfosec/EKFiddle) for OWASP (https://www.kitploit.com/search/label/OWASP) ZAP.With ZAP as your web proxy, you are able to flag malicious traffic (https://www.kitploit.com/search/label/Traffic) based on predefined regular expressions.Example: Alert, highlighting and tagging (https://www.kitploit.com/search/label/Tagging) when a regex matches on a string within the HTML source code of a compromised website

___________________________
@hacking_Attack
@Hacking_Video