Hacking on Medium
YAKUZA: LIKE A DRAGON (RYU GA GOTOKU) BUSINESS MANAGMENT HACK-Only 3 Employees

I’m an old man and I do realize this is now an old game but I did uncover a hack for you not to stress over the business management…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Mana Toolkit - Sahte Modem Saldırısı

apt-get update && apt-get upgrade çalışmıyor ise;
 wget -q -O — https://archive.kali.org/archive-key.asc | apt-key add
 komutundan sonra…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CCNA — Date/Time, Banner, Description

Date/Time, Banner, Description : Cihazdaki sistem saatini görmek için privileges modda “show clock” komutunu kullanırız. Aynı zamanda…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ARP Protokolü ve ARP Spoofing

https://cdn-images-1.medium.com/max/600/1*RxPWdl-8_nACLasy_NASpw.jpeg
ARP (Address Resolution Protocol): Adres Çözümleme Protokolü anlamına gelir. ARP söz konusu olduğunda kelime anlamından çok bu protokol…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Beijing 2022 official says data in Olympics app is protected

https://external-preview.redd.it/3_dZ4j-ZV-KG1tiz5TMzN_Be6RAyo6DLBB43YIyasjw.jpg?width=640&crop=smart&auto=webp&s=d997841d2833cf9b33739a984bca1ba0d5f71f9a submitted by /u/Motor-Ad-8858
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Omegle Hacking?

So I came across this Justin Schmidt guy on youtube quite often, pranking people by exposing their IPs and names. Getting IPs from Omegle isn't too much of a surprise, but is there any possibility of getting someone's name off omegle?

Video

submitted by /u/Blackpinku
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I found High-Priority PII leak through web archive
https://medium.com/@aditya043k/how-i-found-high-priority-pii-leak-through-web-archive-b5499a925090?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Hackers, Aditya here I am a cyber security student and bug bounty hunter.Continue reading on Medium » (https://medium.com/@aditya043k/how-i-found-high-priority-pii-leak-through-web-archive-b5499a925090?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I found High-Priority PII leak through web archive

Hello Hackers, Aditya here I am a cyber security student and bug bounty hunter.Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
SSRF vulnerability in VMWare authentication software could allow access to user data

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png SSRF vulnerability in VMWare authentication software could allow access to user dataPost Views: 128 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute
A server-side request forgery (SSRF) vulnerability in versions of VMWare authentication software could allow an attacker to obtain administrative JSON Web Tokens (JWT), researchers warn.
The SSRF bug was found in VMware Workspace ONE Access (previously known as Identity Manager), which provides multi-factor authentication, conditional access and single sign-on to SaaS, web, and native mobile apps.

The vulnerability (tracked as CVE-2021-22056), which was assigned a ‘moderate’ severity score of 5.5, could enable a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response.

A blog post reads: “Due to the lack of a slash character, it is possible for an attacker to make HTTP requests to arbitrary origins and read the full response.

“Furthermore, an authorization header gets leaked and hence it is possible for an attacker to weaponize this vulnerability to steal the authorization header of an admin upon viewing an image or making a single click.”
See Also: Complete Offensive Security and Ethical Hacking Course Access all areasResearchers Shubham Shah and Keiran Sampson, who discovered the bug, said that this could lead to the leaking of JWTs – potentially allowing a malicious actor full access to a vulnerable system.

JWTs are URL safe strings that are used to identify a user. They contain JSON-encoded data, making them convenient for embedding information.

They are typically used as session identifiers for web applications, mobile applications, and API services. They also contain user data directly, unlike traditional session identifiers which simply point to user data on the server-side.

If a user’s JWTs are stolen or compromised, an attacker can potentially gain full access to the user’s account.

More information about the use of JWTs can be found here.

Researchers pointed out that the leaking of the JWT “increases the severity of the issue as this vulnerability can be used in spear phishing attacks against organizations that use VMWare Workspace One Access”.

Shah and Sampson, who discovered the bug, also found a second issue, an authentication bypass vulnerability in VMware Workspace ONE Access (CVE-2021-22057).

The vulnerability, impacting VMware Verify two factor authentication, was also rated as a moderate severity bug with a score of 6.6.

The security issue means a malicious actor who has successfully provided the first-factor in an authentication process (such as a password), may be able to obtain second-factor authentication provided by VMware Verify.

A security advisory contains further details about which versions of the software are at risk.
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
See Also: Microsoft: New critical Windows HTTP vulnerability is wormable Patch issuedVMWare has patched both security issues in its latest version of the enterprise software.

In their blog post, Shah and Sampson thanked the ven[...]

___________________________
@hacking_Attack
@Hacking_Video

dor for their “serious” efforts to remediate the problem.

The researchers added: “Looking at this research as a whole, one the of the key takeaways is that the visibility into the exposure of enterprise software is often lacking or misunderstood by organizations that deploy this software.

“Many organizations disproportionately focus on in-house software and network issues at the expense of awareness and visibility into the exposure in the software developed by third parties.

“Our experience has shown that there continues to be significant vulnerabilities in widely deployed enterprise software that is often missed.”
See Also: Offensive Security Tool: Ivy See Also: Hacking stories – Rafael Núñez (aka RaFa), hacking NASA with the hacking group: World of Hell
Source: portswigger.net (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.jpg Same-origin violation vulnerability in Safari 15 could leak a user’s website history and identity1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns – targets QNAP NAS devices worldwide2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-7-90x90.jpg Partially Unpatched VMware Bug Opens Door to Hypervisor Takeover2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Apple-iPhone-13-Pro-90x90.png iOS malware can fake iPhone shut downs to snoop on camera, microphone2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0358ad020c37-article-cache-poisoning-article-90x90.png Researcher discovers 70 web cache poisoning vulnerabilities, nets $40k in bug bounty rewards2 weeks ago
The post SSRF vulnerability in VMWare authentication software could allow access to user data first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

Extreme Hacking Mindset
https://sicks3c.medium.com/extreme-hacking-mindset-54943a4510f3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How to dominate in bug bountiesContinue reading on Medium » (https://sicks3c.medium.com/extreme-hacking-mindset-54943a4510f3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video