hacking: security in practice
Antivirus for school project

Actually I was thinking about creating an antivirus for major project and I'm struggling on what language to use for it?? As I have done research and it seems C and C++ are compatible, is there any other language to be used

submitted by /u/NavyX11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

WannaRace - WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Condition

WebApp intentionally made vulnerable to Race ConditionDescriptionRace Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie is present, cookie is auto created when user is logged in. Happy learning Building and running the docker imageBuild the docker image with:git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRacedocker build -t xib3rr4dar/wanna_race:1.0 .Run docker image:docker run -it --rm xib3rr4dar/wanna_race:1.0ORdocker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0Then open in browser relevant IP:PORT ScreenshotsChallenge #1Main Page Four vouchers worth 400 units available for recharge Task is to buy Mega box (which is worth 401 units) by exploiting race conditionChallenge #2Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies are setDownload WannaRace
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Domain Escalation - ShadowCoerce [MS-FSRVP]
https://www.reddit.com/r/redteamsec/comments/s1bh7z/domain_escalation_shadowcoerce_msfsrvp/

submitted by /u/netbiosX (https://www.reddit.com/user/netbiosX)
[link] (https://pentestlaboratories.com/2022/01/11/shadowcoerce/) [comments] (https://www.reddit.com/r/redteamsec/comments/s1bh7z/domain_escalation_shadowcoerce_msfsrvp/)

___________________________
@hacking_Attack
@Hacking_Video

WannaRace - WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Condition
http://www.kitploit.com/2022/01/wannarace-webapp-intentionally-made.html

___________________________
@hacking_Attack
@Hacking_Video

WebApp intentionally made vulnerable (https://www.kitploit.com/search/label/Vulnerable) to Race Condition
DescriptionRace Condition vulnerability (https://www.kitploit.com/search/label/Vulnerability) can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie (https://www.kitploit.com/search/label/Cookie) is present, cookie is auto created when user is logged in. Happy learning
Building and running the docker imageBuild the docker image with:git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace
docker build -t xib3rr4dar/wanna_race:1.0 .Run docker image:docker run -it --rm xib3rr4dar/wanna_race:1.0
ORdocker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0
Then open in browser relevant IP:PORT
ScreenshotsChallenge #1Main Page

___________________________
@hacking_Attack
@Hacking_Video

Four vouchers worth 400 units available for recharge

___________________________
@hacking_Attack
@Hacking_Video

Task is to buy Mega box (which is worth 401 units) by exploiting (https://www.kitploit.com/search/label/Exploiting) race condition

___________________________
@hacking_Attack
@Hacking_Video

Challenge #2Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies (https://www.kitploit.com/search/label/Cookies) are set

___________________________
@hacking_Attack
@Hacking_Video

Download WannaRace (https://github.com/Xib3rR4dAr/WannaRace)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
WannaRace - WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Condition

https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 WebApp intentionally made vulnerable to Race Condition Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to be solved when PHPSESSID cookie is present, cookie is auto created when user is logged in. Happy learning Building and running the docker imageBuild the docker image with: git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace
docker build -t xib3rr4dar/wanna_race:1.0 .Run docker image: docker run -it --rm xib3rr4dar/wanna_race:1.0 OR docker run -it --rm -p 9050:80 xib3rr4dar/wanna_race:1.0 Then open in browser relevant IP:PORT ScreenshotsChallenge #1

Main Page https://blogger.googleusercontent.com/img/a/AVvXsEgjP3t6bru-XjgSzIt9uEPpTRTFHIdcGNie-m50YGQqb8jUAwXJe-5szGiY_izIeX0gTyxTGboMBON68nxS08L3tmzc4_dbWBrR0Xdcc79V7Phv2R0W2oulGjPmxn_33LB_8uusBUlGsSPGrfq6Df0dHBvXuakD_PamyY_Smn_jRV6cXn9W82lMEpbr=w640-h240 Four vouchers worth 400 units available for recharge https://blogger.googleusercontent.com/img/a/AVvXsEhP-rUpAnTeV1FzYt8QnshGPr3dusefpMWr7kNN-OzoeHNnFletGoRW0IVRPTCyLv85wDFCL8I5_E0W4__uCy2HlFked4QdsAGewOff-SrV1Xe87h3sTa27SS9ILT8gTyOef5dL25ks9PGYXWXBFEIIhjtW2MKSyxXyHWg_wmfVCSo0QP6bUZjcDgCq=w640-h480 Task is to buy Mega box (which is worth 401 units) by exploiting race condition https://blogger.googleusercontent.com/img/a/AVvXsEi92nbp0P7XLHqnQOVcTPcKEGq2Bq-z90g3NCMvXVd-ChlRjxQbOyY10c0e8iY859XOt9vvXeVlHtHEbTka7VvJ_rZbz69XgOHtoWWxgHBGa8fiPhrMwYn4mlOvaxPpkCKg-7ttfWZAg-bU5rKatWwowbQfUT0DXCc2ZEVNegLAa1DQGou6xAJsKAPG=w640-h396 Challenge #2

Same as Challenge #1 but requires login so that PHPSESSID and appropriate cookies are set https://blogger.googleusercontent.com/img/a/AVvXsEgdPMLdHRwnWwaWmaj2VMFqlPGsUW2H98NnjlOv1_loxelQOTW2QQLRVJlvPvTPr3vVV3dXCHQOG49IpxrIjo1KSgOPltHnK_MFy0QZ3WPxElOcSStMytKB702qrGPjOWjzk4vwO-CNQHJaqegWbISdv24w2_1q7p6-XfBDeSadSvnbx2cdeZKKIrWb=w640-h214 Download WannaRace

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I decrypt my own Adobe password?

My password was in the Adobe breach of 2013. I have the leaked Adobe data, and I have located my own user data within it. But the password is in its encrypted form and it consisting of random characters and looks something like this: 3p1i4vlbinfre42=

What kind of string is this? Does it have a name? What encryption was used to produce it?

Now, I know what my password was. Would that be enough for me to decrypt this random nonsense into something slightly more useful like a hash? Or do I need to know the master password that Adobe used or something like that?

I don't think I need a reason for asking such questions, but I am doing this to educate myself by practicing on real world examples (and on my own data).

submitted by /u/Ken852
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's Your Daily Source of Cybersecurity News?

What's your go-to source for all things malware, APT, and cyber related?

submitted by /u/Rebel_Ye11
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What jobs does a professional hacker get?

What's the pay and how do you go about getting these jobs?

submitted by /u/Sambar_Dosa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft: macOS 'Powerdir' Flaw Could Enable Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Dark Reading: Attacks/Breaches
5 Things to Know About Next-Generation SIEM

NG-SIEM is emerging as a cloud- and analytics-driven alternative to legacy SIEMs. Based on new research, Omdia highlights five important new insights for anyone considering a NG-SIEM purchase.