Hacking on Medium
Exploring the Worst Exploit of 2020: ZeroLogon (CVE-2020–1472)

https://cdn-images-1.medium.com/max/640/1*J7lJxuE8Ruy_Zpgg0VaG3A.jpeg
ZeroLogon is a critical (CVSS: 10.0) vulnerability in the NETLOGON protocol that was first discovered by Secura researchers and pathed by…

Continue reading on Medium »

Hacking on Medium
How To Hack Any Website

https://cdn-images-1.medium.com/max/1920/1*MdcoQXwDgNQ91wS6GZnHag.jpeg
[Part — 2: Content Discovery]

Continue reading on Medium »

Hacking on Medium
Errores de Active Directory podrían permitir que piratas informáticos se apoderen de los…

https://cdn-images-1.medium.com/max/1643/0*PNdXylnydl3NwM4b
PUBLICADO EN 22 DICIEMBRE, 2021POR DPAB

Continue reading on Medium »

hacking: security in practice
What os do you guys use to hack in?

Any parrot or black arch users i really wanna know. Oh and why do you use it instead of kali?

submitted by /u/redditbigbad
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Remote wireless keyboard? Something like Rubber Ducky but wireless?

Hello everyone,

I'm a computer enthusiast but more into software than hardware. However, I was thinking about something like Rubber Ducky (which is a keyboard with a hard-coded, but customizable, keypress sequence) with this difference the USB dongle would register itself as a keyboard but receive keypresses via wireless networking (Bluetooth / WIFI / RFID). So a person could control a computer by sending keyboard and mouse events wirelessly from their host machine. In other words, a remote keyboard, but without the keyboard itself.

What would be the simplest way to achieve that?

submitted by /u/FloweryMaya
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to access Windows 10 user account that is connected to an online account?

I am trying to access a dead family member's Windows 10 computer. Normally I would use chntpw on the C:\Windows\System32\config\PAM file from a Linux live USB, but this file does not exist on the machine. I believe this is because the user account is not a local one, but tied to an online Microsoft account.

Is there a way to access this user account on the machine without having to reset the password for the online Microsoft account?

submitted by /u/pinephreak
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My friend was hacked and we know who it was.

(Please delete if not allowed and I apologize in advance) My friend was hacked into multiple accounts such as, gmail, snapchat, FB, chime and walmart app. We know who it was due to the fact that her recovery email was changed back to her EXs accounts and the names was “take me back”. What can she do to press charges against him. This dude legit leaked my friends nudes and bragged about it on her hacked Snapchat. Help and thank you in advance.

Happy holidays to everyone!! ❤️

submitted by /u/Vargas603
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Keep getting the same error in metasploit

I get "Exploit completed, but no session was created." with about 7 different exploits im trying to run on a target system the target is specifically set up to use these exploits on so it is not patched, I see the rhosts and lhosts, tried different payloads and I cant figure it out, any exploit I try same error.ps this is for a uni assignementpss really appreciate any feedback

edit Im also in a kali VM

submitted by /u/F0KUS228
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to mod an LG smartTV OS?

So my TV just became obsolete since LG is not updating its OS version anymore. This is a problem because HBO max, for instance, requires the next version.

The TV is not that old, so I believe it's just a scheduled obsolescence and that a newer version could work if I could download it and force update the TV.

Can it be done? Is there a place with this kind of content to download?

submitted by /u/Patient_Raccoon3923
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do people create game exploits

I’ve experienced several hacking incidents on games, from Roblox, PUBG and other games. Despite the devs implementing ways to counter them, they still continue. Im wondering how these exploiters find and create these exploits, so I can implement the right defences when I create my own games

submitted by /u/IronForce_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

AppSec Series 0x04: Crowdsourcing Security
https://medium.com/swlh/appsec-series-0x04-crowdsourcing-security-a8f72faca352?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

More than a decade ago, Jeff Howe defined a phenomenon that has gone unnoticed for a long time: “Non professionals contribute to the…Continue reading on The Startup » (https://medium.com/swlh/appsec-series-0x04-crowdsourcing-security-a8f72faca352?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
스마트폰에 몰래 설치되는 앱: 스파이웨어

https://cdn-images-1.medium.com/max/1280/1*XYjFPrYam252hPOq3z1Z4g.jpeg
내 스마트폰에 숨은 감시자

Continue reading on StealthSolution »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Find Blind XSS On a Famous Platform

https://cdn-images-1.medium.com/max/660/1*DKLGgiLvBTcYJg3ZhJ_iNQ.png
ASALAM O ALIKUM.. Hope all of you doing well. In this article I tell you how I find Blind XSS on a very famous website. So first of all…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Question about what botnets are trying to do.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to host a virtual machine on a network but make it so only a specific computer can access it?

Hi. Let me explain.

So, I have a sort of home lab setup (in a sense) that I designed for vulnhub boxes. Essentially, I have an attacking laptop and a desktop computer which I'm using as a server to host the vulnerable boxes. Ideally, I was going to simply connect the two computers together via ethernet and a switch, and just having the VMs listen on the isolated eth0 interface while the server itself gets Wi-Fi connectivity from wlan0.

The issue with this, though, is that upon connecting everything together I forgot that DHCP (to my knowledge) doesn't work with a routerless environment like this, which really throws a wrench in my plan since the only way for me to statically assign an IP address to a VM is if I have the login credentials. Which of course, in order to get the login credentials, it would require me to ironically skip the challenge just so I could play the challenge.

I also thought about connecting the VMs on my wlan0 interface but assigning a firewall with a whitelist (since having a vulnerable box float around on your internal network doesn't sound like a particularly nice idea), but I then ran into that same problem of not really being able to set up the firewall without first having login credentials. Infact, I can't really do much of anything for that matter when it comes to networking.

Because of this I'm in a bit of a pickle. If it turns out that there's really no solution then I'm okay with doing the standard internal network setup with an attacker VM and the vulnerable VM. However, while I'm not going to get into the reasons specifically, I'd like to atleast know if it's possible for a setup like this to even be possible before I throw in the towel and go the "Plan B" route previously mentioned.

Sorry if this post sounds very rambly and incoherent as I'm a bit tired while writing this. Perhaps there's a solution I'm too fogged up to understand but for the moment I'm stumped.

submitted by /u/TheByteQueen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters

Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.Continue reading on Medium »
Read more...

AppSec Series 0x04: Crowdsourcing Security

More than a decade ago, Jeff Howe defined a phenomenon that has gone unnoticed for a long time: “Non professionals contribute to the…Continue reading on The Startup »
Read more...