The King (Injection Bug) who was ruling the bug world for more than a decade is now conquered by the New King known as “Broken Access…Continue reading on Medium » (https://medium.com/@aravindbalaji1995/the-new-king-broken-access-control-5d4fe465c7ea?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Driftwood - Private Key Usage Verification

Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the private key never leaves where you run the tool. Additionally it supports some basic password cracking for encrypted keys. Installation Three easy ways to get started. Run with Docker cat private.key | docker run --rm -i trufflesecurity/driftwood --pretty-json - Run pre-built binary Download the binary from the releases page and run it. Build yourself go install github.com/trufflesecurity/driftwood@latest Usage Minimal usage is $ driftwood path/to/privatekey.pem Run with --help to see more options. Library Usage Packages under pkg/ are libraries that can be used for external consumption. Packages under pkg/exp/ are considered to be experimental status and may have breaking changes. Download Driftwood
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty Recon: Content Discovery (Efficiency pays $)

Content Discovery — The process of finding vulnerable endpoints; URLs, Parameters and Resources.Continue reading on Medium »
Read more...

Introducing the Exponent Bug Bounty Program in Collaboration with Immunefi

Website | Litepaper | Twitter | Medium | Discord | Bug Bounty ProgramContinue reading on Medium »
Read more...

Bug Bounty Recon: Content Discovery (Efficiency pays $)
https://medium.com/@Sm9l/bug-bounty-recon-content-discovery-efficiency-pays-2ec2462532b1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Content Discovery — The process of finding vulnerable endpoints; URLs, Parameters and Resources.Continue reading on Medium » (https://medium.com/@Sm9l/bug-bounty-recon-content-discovery-efficiency-pays-2ec2462532b1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Introducing the Exponent Bug Bounty Program in Collaboration with Immunefi
https://exponent-cx.medium.com/introducing-the-exponent-bug-bounty-program-in-collaboration-with-immunefi-5a8f7ba8cc14?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Website | Litepaper | Twitter | Medium | Discord | Bug Bounty ProgramContinue reading on Medium » (https://exponent-cx.medium.com/introducing-the-exponent-bug-bounty-program-in-collaboration-with-immunefi-5a8f7ba8cc14?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Driftwood - Private Key Usage Verification

http://3.bp.blogspot.com/-FLnElzRmqGk/Yd0ISCtv2jI/AAAAAAAA7p0/uTjOudnip3sPw2MVXpAieDXeK-oJJYSvACK4BGAYYCw/w640-h258/driftwood_5_screenshot-728447.png
Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user.

Driftwood performs lookups with the computed public key, so the private key never leaves where you run the tool. Additionally it supports some basic password cracking for encrypted keys.
Installation

Three easy ways to get started.

Run with Docker

cat private.key | docker run --rm -i trufflesecurity/driftwood --pretty-json -

Run pre-built binary

Download the binary from the releases page and run it.

Build yourself

go install github.com/trufflesecurity/driftwood@latest

Usage

Minimal usage is

$ driftwood path/to/privatekey.pem

Run with --helpto see more options.

Library Usage

Packages under pkg/are libraries that can be used for external consumption. Packages under pkg/exp/are considered to be experimental status and may have breaking changes.
Download Driftwood

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GZ News — Crypto.com Hacked, Polygon Activates London Hardfork

https://cdn-images-1.medium.com/max/763/0*Qczwemu8typqNDQ8.png
Ground Zero News covers the most recent news from the crypto and blockchain space.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How your laptop can be hacked at the Airport

https://cdn-images-1.medium.com/max/800/0*YNR41HwQDsUD6bih.jpg
Even leaving your laptop unattended for a few minutes without properly powering it off can create a potential danger to stored data.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Social Engineering Part 2: Sophisticated Social Engineering Techniques

https://cdn-images-1.medium.com/max/2000/0*Cj5h-0sp-jiuPPpc.jpg
Social Engineering is a form of security fraud that relies on psychological manipulation techniques to trick people into revealing…

Continue reading on Netacea »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bug Bounty Recon: Content Discovery (Efficiency pays $)

https://cdn-images-1.medium.com/max/1105/1*l0r2NeORl0aBriwoU9p88g.png
Content Discovery — The process of finding vulnerable endpoints; URLs, Parameters and Resources.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video