Share and Win $BUSY!
https://medium.com/busytechnology/share-and-win-busy-4c1a0697d3c3?source=rss------bug_bounty-5

Steps to follow:Continue reading on BusyTechnology » (https://medium.com/busytechnology/share-and-win-busy-4c1a0697d3c3?source=rss------bug_bounty-5)

A guide to our dApp and benefits for our users
https://covercompared.medium.com/a-guide-to-our-dapp-and-benefits-for-our-users-e6d9444f131f?source=rss------bug_bounty-5

With the launch of our testnet and bugbounty programme, we would like to give our community a brief on our dApp and the various services…Continue reading on Medium » (https://covercompared.medium.com/a-guide-to-our-dapp-and-benefits-for-our-users-e6d9444f131f?source=rss------bug_bounty-5)

How to be a Bug Bounty Hunter
https://octa-mihail.medium.com/how-to-be-a-bug-bounty-hunter-3f00504f8c16?source=rss------bug_bounty-5

Hello guys, in this article I’m going to share some tips on how to become a successful bug hunter. I´m Octavian, a network engineer by day…Continue reading on Medium » (https://octa-mihail.medium.com/how-to-be-a-bug-bounty-hunter-3f00504f8c16?source=rss------bug_bounty-5)

Hacking on Medium
SQL Injection

https://cdn-images-1.medium.com/max/1460/0*icEKS-oUtJr28r-1.jpg
Injection เป็นช่องโหว่เกี่ยวกับการแทรกคำสั่งหรือโค้ดเข้าไปเปลี่ยนแปลงการทำงานแอปพลิเคชันเพื่อกระทำการบางอย่างตามจุดประสงค์ของ code…

Continue reading on Medium »

Hacking on Medium
How to be a Bug Bounty Hunter

https://cdn-images-1.medium.com/max/1920/1*6Q9lMrra41nwzJ0fOXBMjQ.jpeg
Hello guys, in this article I’m going to share some tips on how to become a successful bug hunter. I´m Octavian, a network engineer by day…

Continue reading on Medium »

Hacking on Medium
Vulnerability in Active Directory may allow attackers to gain control of Windows Domain Controllers

https://cdn-images-1.medium.com/max/999/1*T4TPAuuK7jjIHNYQmn0UjQ.png
Shortly after the release of a proof-of-concept (PoC) tool on December 12, Microsoft is advising users to update two security flaws in…

Continue reading on Medium »

Shopify Plugin Bypass using P3 Client-side injection thru API Implementation Vulnerability

Hi, I am Kurt Russelle Marmol doing bug hunting for more than a year, and this is my first bug bounty write-up about my findings.Continue reading on Medium »
Read more...

hacking: security in practice
Should I use Kali Linux as my main OS?

I'm learning about the tools of Linux and how they work and just wondering if it would be a good idea to use Kali as a main OS. Thank you in advance!

submitted by /u/Hopeful_Cauliflower5
[link] [comments]

hacking: security in practice
Burp & protobuf

Hi,

I am currently using burp to intercept http trafic from a thick client that I have to test. It uses protobuf on most of its request, and I am trying to decode it, or even better, fuzz its fields. I tried 3 extensions (protobuf decoder, blackboxprotobuf, and protobuf editor), but all seems to fail to decode the binary without the .proto file. Did someone manage to make them work, or has any advice to do it with other tools ?

Have a good day,

submitted by /u/RedditBucky
[link] [comments]

hacking: security in practice
Monitor mode + SSH Raspberry Pi 4

Hi everyone! I recently installed the ARM version of Kali on a Raspberry Pi 4, which comes with driver patched that allow it to run in monitor mode and it works fine, however I don't have a second monitor, and I generally use SSH to connect to my Raspberry from my main PC, which won't work in monitor mode. Is there anyways to bypass this, or any different way of connecting to my Raspberry, while monitor mode is running?

submitted by /u/skill347
[link] [comments]

How I Found My First XSS Bug and Earn $$$

Hi everyone,
Read more...

How I found the Authentication Bypass bug and Earn $$$$

Hi all,
Read more...