Hacking on Medium
Profit Hacking

Le Profit Hacking est un processus qui consiste à utiliser une variété de méthodes pour augmenter les revenus de votre entreprise.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Create an Ethereum Bot

https://cdn-images-1.medium.com/max/850/1*aBhlmz63N7kbTKwyUvsY8A.png
Ethereum is full of bots, these bots are ruthless and hunting for every single opportunity. There are different types of bots, the most…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Como gano dinero en trading de manera muy fácil y eficiente.

https://cdn-images-1.medium.com/max/2600/0*Uyk6A3RdIM_re9KW
TL;DR Todas las estrategias acá plasmadas están automatizadas en https://www.tradingadvisor.app Gratis!! De igual forma recomiendo leer el…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Possible Vulnerability in school?

My school has lots of sites blocked, but I found an online terminal that wasn’t. I managed to download a network scanner and arp spoofer onto the terminal. I also have access to the IP address of the chromebook. Should I report this site to my school’s IT department?

Edit: I just learned that I can’t actually do anything with what I have, so it’s all good 👍

submitted by /u/ari_02468
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How would someone given a name and phone number use an IMSI catcher to tag an IMSI/IMEI/other to that?

The motivation for this question comes from https://arstechnica.com/information-technology/2015/10/low-cost-imsi-catcher-for-4glte-networks-track-phones-precise-locations/

They claim that you can attach to and request information like IMEI/IMSI in 4G and that this is a security concern.

My understanding is that, if you build an IMSI catcher, and turn it on with the right settings, you see a list of IMSIs, but not phone numbers. This makes it hard to obtain useful information unless you have access to a cell phone service provider database or are a cop.

Perhaps you could obtain more information by downgrading the 4G user's service, but then it's like whackamole, right? Try 600 IMSIs and see if you hit one..

I suppose my question is, given only a name, phone number and geographic location, could someone reasonably use an IMSI catcher to tag an individual with an IMEI/IMSI or other information? Is it practically possible to find specific information on a specific person using this technique?

*Asking out of curiosity and out of concern for myself. Chill NSA

submitted by /u/anon314159265358p
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
On android, does anyone know how to change the location of your phone at a constant rate (as if you are travelling somewhere) without actually travelling?

Thanks!

submitted by /u/Durbdichsnsf
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Exploiting Execute After Redirect (EAR) vulnerability in HTB Previse

Exploiting Execute After Redirect for fun and profit??
Read more...

WEB APPLICATION — BUSINESS LOGIC VULNERABILITIES

Buisness logic vulnerabilities are flaw in the design, implementation and concept of an application, that allow an attacker to evoke…
Read more...

A TALE OF 5250$ : HOW I ACCESSED MILLIONS OF USER’S DATA INCLUDING THEIR NATIONAL ID’S

Hi, Hope you guys are doing well, And a Happy New Year, YAY! ✨, Let’s start the blog without wasting more time.
Read more...

HOW I AM ABLE TO CRASH ANYONE’S MOZILLA FIREFOX BROWSER BY SENDING AN EMAIL

Hi, Hope you guys are doing well, Here is the story of how I am able to crash anyone’s Mozilla firefox by just sending a single email…
Read more...

HOW I GOT MY FIRST RCE WHILE LEARNING PYTHON

Hi,
Read more...

Hacking on Medium
Three Foundational Questions

This article was originally published in the Summer 2020 edition of “2600: The Hacker Quarterly"

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
You can block Accounts that are used to advertise on Reddit.

Imagine if we got the message to the wider community that all you need to do to block an add from showing up in your feed is to just block the user. If nothing else that will force the marketing team that runs it to have to constantly open an manage new user accounts. Costly and time consuming.

submitted by /u/Mastronauts84
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/4urU6Q_fLVqnJiQUOleNQhQ4yWBKUEuc8Ra_u9d2F0Y.jpg submitted by /u/AHNayef
[link] [comments]

Black Hat Ethical Hacking
Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of appsPost Views: 135 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 2 Minutes
Users of popular open-source libraries ‘colors’ and ‘faker’ were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking.
Some surmised if the NPM libraries had been compromised, but it turns out there’s much more to the story.

The developer of these libraries intentionally introduced an infinite loop that bricked thousands of projects that depend on ‘colors’ and ‘faker.’

The colors library receives over 20 million weekly downloads on npm alone and has almost 19,000 projects relying on it. Whereas, faker receives over 2.8 million weekly downloads on npm, and has over 2,500 dependents. Open Source Revolution?The developer behind popular open-source NPM libraries ‘colors’ (aka colors.js on GitHub) and ‘faker’ (aka ‘faker.js’ on GitHub) intentionally introduced mischievous commits in them that are impacting thousands of applications relying on these libraries.

Yesterday, users of popular open-source projects, such as Amazon’s Cloud Development Kit (aws-cdk) were left stunned on seeing their applications print gibberish messages on their console.

These messages included the text ‘LIBERTY LIBERTY LIBERTY’ followed by a sequence of non-ASCII characters:
https://www.bleepstatic.com/images/news/u/1164866/2022/January-2022/colors-faker/faker-liberty.jpeg
___________________________
@hacking_Attack
@Hacking_Video