ortSwigger’s Param Miner, an open source tool that can identify hidden, unlinked parameters. Running Param Miner against web applications can help detect unkeyed headers that can be used for web cache poisoning.
See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: portswigger.net (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/1200x0-90x90.jpg Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/exchange-90x90.png Microsoft releases emergency fix for Exchange – 2022 bug2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/maxresdefault-90x90.jpg Have I Been Pwned adds 441K accounts stolen by RedLine malware5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/1229111902.0-90x90.jpg T-Mobile says new data breach caused by SIM swap attacks6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/feature-log4j-blue-90x90.png Log4j 2.17.1 out now, fixes new remote code execution bug7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/qnap-logo-white-90x90.jpg QNAP NAS devices hit in surge of ech0raix ransomware attacks1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/shutterstock_495927541-90x90.jpg Wireless coexistence – New attack technique exploits Bluetooth, WiFi performance features1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw2 weeks ago
The post Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Top 5 Incident Response Courses/Certifications

I started doing a little research a few weeks ago, looking at the best courses in the market for Penetration Testing, Incident Response and Threat Intelligence. I've been asking people across Reddit and other forums for their input.

Not going to lie, it's been a little bit harder than I first thought and I've had to change my expectations somewhat. Firstly, my top 10 as far as Incident Response goes is now top 5 and secondly I've had to include examination syllabus's too.

1. FOR508 by SANS (Course + Exam)
2. CRIA by CREST (Exam)
3. eCIR by eLearn Security (Exam)
4. BTL1 by Security Blue Team (Course + Exam)
5. BTL2 by Security Blue Team (Course + Exam)

As with my previous post, I do not work for any of these companies and I actively encourage people to do their own research and undertake as much free training as possible too!

The Security Blue Team fans have been pretty vocal about the training on offer, though I personally have not undertaken any of their training... so it would be interesting to hear your thoughts about their courses.

Would you add any other courses/certs to this list?

r/cybersecuritytraining

submitted by /u/MoaningKnight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to spoof any Instagram username on Instagram shop

Summary: i discovered that i can spoof any Instagram username on Instagram shop, with this bug scammers can trick people into thinking…Continue reading on Medium »
Read more...

How I was able to spoof any Instagram username on Instagram shop
https://medium.com/@nvmeeet/how-i-was-able-to-spoof-any-instagram-username-on-instagram-shop-b4d6abdb474a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Summary: i discovered that i can spoof any Instagram username on Instagram shop, with this bug scammers can trick people into thinking…Continue reading on Medium » (https://medium.com/@nvmeeet/how-i-was-able-to-spoof-any-instagram-username-on-instagram-shop-b4d6abdb474a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Which protocols allow authentication with AD passwords?
https://www.reddit.com/r/redteamsec/comments/rwkrnl/which_protocols_allow_authentication_with_ad/

SMB - 445. WINRM - 5985/6. RDP - 3389. WMI - 135/9. RPC - 5001. Ldap - 389 What more? submitted by /u/henadar (https://www.reddit.com/user/henadar)
[link] (https://www.reddit.com/r/redteamsec/comments/rwkrnl/which_protocols_allow_authentication_with_ad/) [comments] (https://www.reddit.com/r/redteamsec/comments/rwkrnl/which_protocols_allow_authentication_with_ad/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Faut-il cacher sa webcam ?

https://cdn-images-1.medium.com/max/600/1*CtuGbgNSReepJRBl_qt9Cg.jpeg
À l’heure où nous utilisons de façon massive les applications de visioconférence, nous voyons de plus en plus de personnes qui cachent…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersickness Is Real, But So Is Relief

https://cdn-images-1.medium.com/max/2600/1*b836Bzql6fD9G3tIaj1xMw.jpeg
The arrival of the COVID-19 pandemic has forced people to live most of their lives, including work, entertainment, and personal…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Keeping Your Personal Data Out of the Wrong Hands

https://cdn-images-1.medium.com/max/2600/1*a2uL-HeAWkG_83afBBSrEA.jpeg
If you ever go online, either from a desktop, laptop, tablet, or mobile phone, your data is being tracked. Thanks to cell phone towers…

Continue reading on DataDrivenInvestor »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I'm struggling to find an old link generator website.

So, there was a website where you can create a bunch of login links but they are actually malicious and sending your login details to the person that created the link; the website just came to my mind for no reason today and I noticed that can't remember its name.

If I remember it wrong, the website's symbol was an anonymous mask; there were literally fake links for every website, and I don't remember any more specific details; can anyone help me with finding the website?

submitted by /u/HyperHyoko
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If all of your home devices were hacked. How would you go about cleaning and securing everything? I am not a Hacker, but interested in the subject.

Thanks :D

submitted by /u/I_Axel_Phoenix
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Autopsy usage and analysis of artifacts

https://external-preview.redd.it/ZBixBiGKrCNiW5M-P4ai0zrNRL4xjki-3ODRnbYEei0.jpg?width=320&crop=smart&auto=webp&s=66f3ea810e51be71ecddb70f6a78069177eed449 submitted by /u/the_simp_lust_man
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
eCPPT: eLearnSecurity Certified Professional Penetration Tester — Review

https://cdn-images-1.medium.com/max/2600/1*ywAvWVzwDv9MKlA8uXEPag.png
I recently completed my eCPPT exam and submitted my report for grading. At the time of writing, I am yet to recieve my results, but I…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Backdoor — HackTheBox Machine Write-Up

https://cdn-images-1.medium.com/max/1920/1*uOF3vXRR7ZOWPEXp-si1yg.png
Here’s The Way I Was Shown About How To Get Into The Box.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video