Hacking on Medium
How I Find Blind XSS On a Famous Platform

https://cdn-images-1.medium.com/max/660/1*DKLGgiLvBTcYJg3ZhJ_iNQ.png
ASALAM O ALIKUM.. Hope all of you doing well. In this article I tell you how I find Blind XSS on a very famous website. So first of all…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Question about what botnets are trying to do.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to host a virtual machine on a network but make it so only a specific computer can access it?

Hi. Let me explain.

So, I have a sort of home lab setup (in a sense) that I designed for vulnhub boxes. Essentially, I have an attacking laptop and a desktop computer which I'm using as a server to host the vulnerable boxes. Ideally, I was going to simply connect the two computers together via ethernet and a switch, and just having the VMs listen on the isolated eth0 interface while the server itself gets Wi-Fi connectivity from wlan0.

The issue with this, though, is that upon connecting everything together I forgot that DHCP (to my knowledge) doesn't work with a routerless environment like this, which really throws a wrench in my plan since the only way for me to statically assign an IP address to a VM is if I have the login credentials. Which of course, in order to get the login credentials, it would require me to ironically skip the challenge just so I could play the challenge.

I also thought about connecting the VMs on my wlan0 interface but assigning a firewall with a whitelist (since having a vulnerable box float around on your internal network doesn't sound like a particularly nice idea), but I then ran into that same problem of not really being able to set up the firewall without first having login credentials. Infact, I can't really do much of anything for that matter when it comes to networking.

Because of this I'm in a bit of a pickle. If it turns out that there's really no solution then I'm okay with doing the standard internal network setup with an attacker VM and the vulnerable VM. However, while I'm not going to get into the reasons specifically, I'd like to atleast know if it's possible for a setup like this to even be possible before I throw in the towel and go the "Plan B" route previously mentioned.

Sorry if this post sounds very rambly and incoherent as I'm a bit tired while writing this. Perhaps there's a solution I'm too fogged up to understand but for the moment I'm stumped.

submitted by /u/TheByteQueen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Ultimate Reconnaissance RoadMap for Bug Bounty Hunters & Pentesters

Advanced Reconnaissance and Web Application Discovery RoadMap to Find Massive Vulnerabilities.Continue reading on Medium »
Read more...

AppSec Series 0x04: Crowdsourcing Security

More than a decade ago, Jeff Howe defined a phenomenon that has gone unnoticed for a long time: “Non professionals contribute to the…Continue reading on The Startup »
Read more...

Information Disclosure on CodePolitan

Hello everyone, in this opportunity i will share a brief summary of the information disclosure bug that i found on the CodePolitan…Continue reading on Medium »
Read more...

Information Disclosure on CodePolitan
https://medium.com/@rifqihz/information-disclosure-on-codepolitan-f7e014d8a7b6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone, in this opportunity i will share a brief summary of the information disclosure bug that i found on the CodePolitan…Continue reading on Medium » (https://medium.com/@rifqihz/information-disclosure-on-codepolitan-f7e014d8a7b6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
picoCTF write up: Flags

https://cdn-images-1.medium.com/max/600/1*KlGimrIDTFUJqDXnARmz1w.jpeg
Note: You should not copy flag from here just find one by following steps mentioned here.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What is DOS Attack and how to perform it(Basic Method).

https://cdn-images-1.medium.com/max/1000/1*W4kN_FekqMvYH3FKk2LuOw.jpeg
What is DOS/DDOS Attack

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking the Tenda AC10–1200 Router Part 4: sscanf buffer overflow

https://cdn-images-1.medium.com/max/1047/1*FYJurJhh2SfBC4tqisfsVQ.png
In this writeup, i will show you a sscanf buffer overflow that i found in tenda ac10–1200. I tried reporting it but no response, so i…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Neovim Startup Screen

https://cdn-images-1.medium.com/max/1434/1*QnOUTweaIRKvqeZVqyZOgA.png
Let’s explore plugins to create a fancy startup screen.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[project]Gain Access to the Target System using Trojans

https://cdn-images-1.medium.com/max/600/1*1MPHnD-FZjhA-qnQqK0WSg.png
Lab1 :Gain control over a victim machine using the njRAT RAT Trojan

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video