Hacking on Medium
Obscurity @ HackTheBox

https://cdn-images-1.medium.com/max/1280/0*AnvcoeJ1w-ey_80H.jpg
Obscurity is a 30-point Linux machine on HackTheBox that involves exploiting a command injection in a custom webserver, breaking a simple…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Phone number spoofing

Okay so the company I work for has been receiving complaints from clients saying we called them many times, which never happened. So i wondered if this might be caused by phone number spoofing.

In that case, how can we protect from it?

We use a cloud phone system service.

submitted by /u/Wiresharkk_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Fob Options

https://www.msn.com/en-us/news/technology/toyota-is-going-to-make-you-pay-to-start-your-car-with-your-key-fob/ar-AARKekd?ocid=msedgdhp&pc=U531

alternatives?

submitted by /u/SJSEng
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anybody get a iCloud password for me.

Dm me if you can.

submitted by /u/Searly_quail
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

FiddleZAP - A Simplified Version Of EKFiddle For OWASP ZAP
http://www.kitploit.com/2021/12/fiddlezap-simplified-version-of.html

FiddleZAP is a simplified version of EKFiddle (https://github.com/malwareinfosec/EKFiddle) for OWASP (https://www.kitploit.com/search/label/OWASP) ZAP.With ZAP as your web proxy, you are able to flag malicious traffic (https://www.kitploit.com/search/label/Traffic) based on predefined regular expressions.Example: Alert, highlighting and tagging (https://www.kitploit.com/search/label/Tagging) when a regex matches on a string within the HTML source code of a compromised website

___________________________
@hacking_Attack
@Hacking_Video

InstallationDownload and install ZAP: https://www.zaproxy.org/download/Download or clone the FiddleZAP directory (https://www.kitploit.com/search/label/Directory) into your Documents folder.It should have the following structure: 

___________________________
@hacking_Attack
@Hacking_Video

There are 2 scripts (https://www.kitploit.com/search/label/Scripts) (standalone, passive rules). The former is used to run manually on the currently loaded session (web traffic), the latter automatically runs while recording traffic.Stand AloneFirst, install the standalone script:Click on the Load script icon:

___________________________
@hacking_Attack
@Hacking_Video

Select the following parameters:

___________________________
@hacking_Attack
@Hacking_Video

It now shows under standalone:

___________________________
@hacking_Attack
@Hacking_Video

Passive RulesNext, install the passive rules script:Click on the Load script icon:

___________________________
@hacking_Attack
@Hacking_Video

Select the following parameters:

___________________________
@hacking_Attack
@Hacking_Video

The FiddleZAP script should now show up under Passive Rules. If it is not enabled, right-click on it and select Enable script.

___________________________
@hacking_Attack
@Hacking_Video