IDOR is a type of access control vulnerability. IDOR vulnerability can occur when user-supplied input is received by the web server to retContinue reading on Medium » (https://medium.com/@sudarshan-s/idor-a-beginners-guide-bd5f9bf893fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Get expert training on advanced hunting
https://www.reddit.com/r/redteamsec/comments/ryvryr/get_expert_training_on_advanced_hunting/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://docs.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-expert-training) [comments] (https://www.reddit.com/r/redteamsec/comments/ryvryr/get_expert_training_on_advanced_hunting/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Neovim for Beginners — File Explorer

https://cdn-images-1.medium.com/max/1106/1*83oTf-xE3zr29ywKjUhvcw.png
Configure file explorer for Neovim, with and without plugins.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Networks For Hackers - Networking Basics (Simple Introduction)

https://external-preview.redd.it/2nhdx35s6PlxWYZIR_TiYtTjugD9nYCDrkYThJtZ0nk.jpg?width=640&crop=smart&auto=webp&s=d7a25111679cf8fbaf564e6ab54b5766d31ff268 submitted by /u/OguzKayra
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Rubber Ducky/Malduino Scripts

I recently bought a malduino bad usb i want to start playing around with. Does anyone know if rubber ducky scripts work on it or do i have to use specific malduino ones?

submitted by /u/Wischer999
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to remove crap using ‘cut’ cmd from Httprobe output?

Default output from httprobe looks like; In certain conditions as ➖Continue reading on Medium »
Read more...

IDOR: A BEGINNER’S GUIDE

IDOR is a type of access control vulnerability. IDOR vulnerability can occur when user-supplied input is received by the web server to retContinue reading on Medium »
Read more...

I want to try brute forcing family link
https://www.reddit.com/r/Pentesting/comments/ryyfhj/i_want_to_try_brute_forcing_family_link/

Hi, I would like to know how can I bruteforce family link on android, it is a 6- digit pin and has unlimited tries. Maybe there's an app that I can download for this or do i have to connect the phone to another device, like my laptop to run the bruteforce from there? submitted by /u/Feeling-Clothes-8169 (https://www.reddit.com/user/Feeling-Clothes-8169)
[link] (https://www.reddit.com/r/Pentesting/comments/ryyfhj/i_want_to_try_brute_forcing_family_link/) [comments] (https://www.reddit.com/r/Pentesting/comments/ryyfhj/i_want_to_try_brute_forcing_family_link/)

___________________________
@hacking_Attack
@Hacking_Video

Windows Process Listing using NTQuerySystemInformation
https://www.reddit.com/r/redteamsec/comments/rz0cyz/windows_process_listing_using/

Get acquainted with the undocumented low-level yet powerful APIs from winternls and how to use the NtQuerySystemInformation function to get a list of all the processes running in the system. https://tbhaxor.com/windows-process-listing-using-ntquerysysteminformation/ submitted by /u/tbhaxor (https://www.reddit.com/user/tbhaxor)
[link] (https://www.reddit.com/r/redteamsec/comments/rz0cyz/windows_process_listing_using/) [comments] (https://www.reddit.com/r/redteamsec/comments/rz0cyz/windows_process_listing_using/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Why Hackers use Linux?

https://cdn-images-1.medium.com/max/800/1*AhOloqJP2vVWCPI6XA8J3A.jpeg
So, what makes hackers choose Linux over other operating systems? Mostly because Linux provides a far greater level of control through a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SANS KringleCon 2021 — Printer Exploitation (Hash Extension Attack)

https://cdn-images-1.medium.com/max/1480/0*Qv3LJc2ReMSIkm5Y.jpg
Hello all and Happy New Year! This is a writeup for the fourth Holiday Hack Challenge from SANS, KringleCon 4: Calling Birds. This will be…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to get around windows password?

My grandmother asked me to get into her old pc that she doesn't know the password to, anyone know how I can do that?

submitted by /u/PeterBitcoinlol
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Inside Threat? Lulz.

If an insider obeys good OPSEC they become undetectable.

Risk indicators have been used by bad cybersecurity professionals to discriminate against other employees in bad faith, create scenarios from nothing, and advance their careers at the accused “insider’s” expense. It’s a scam fed by the security analyst’s paranoia.

Let’s say someone just had a baby with complications. They have medical debt and start working crazy hours and OT to pay it off. They take work home with them to get ahead while they watch the kid. They are a leftist who browses Antiwork and other subs on their personal cell phone during breaks. Does this make them an insider threat? NO!!! This story won’t stop some idiot IT “professional” from targeting them anyway. Go ahead and find someone who “checks all the boxes,” you still won’t find an insider threat.

How about if the same employee asks for permission to take work home first? Any less of an inside threat? LOL.

If your ML model has good recall, but poor precision, you’re going to have a lot of false positives! This makes for a useless model, which is what CISA’s threat indicators are—useless!

Discuss.

We are Anonymous. We are Legion. We believe truth is self evident. We do it for the Lulz. Expect US.

submitted by /u/RadiantTruthVentura
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Research on HTML Injection- Cyber Sapiens Internship Task-9
https://sapt.medium.com/research-on-html-injection-cyber-sapiens-internship-task-9-9c220746d981?source=rss------bug_bounty-5

Hello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly…Continue reading on Medium » (https://sapt.medium.com/research-on-html-injection-cyber-sapiens-internship-task-9-9c220746d981?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Research on XML eXternal Entity Injection (XXE)-Cyber Sapiens Internship Task-10
https://sapt.medium.com/research-on-xml-external-entity-injection-xxe-cyber-sapiens-internship-task-10-d6067d3dc934?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video