How I was able to find multiple vulnerabilities of a Symfony Web Framework web application

Found high severity vulnerability in 5 minutes just from reconnaissance. Found multiple vulnerabilities on a web application that used the…
Read more...

Attacks on JSON Web Token (JWT)

In part1 of the article, I introduced JSON web tokens that what is JWT and How they are made? I prefer to take a look at that before you go…
Read more...

Hack into Skynet —  Real World CTF (2022) walkthrough

In this writeup, I’m sharing one of the potential methods to pwn a web challenge on Real world CTF 2022. All challenges built on top of real-world applications & due to the impact of COVID-19, The…
Read more...

KitPloit - PenTest Tools!
FACT - A Tool To Collect, Process And Visualise Forensic Data From Clusters Of Machines Running In The Cloud Or On-Premise

http://1.bp.blogspot.com/-4U5Qr0IvQM4/Yd0K1R_crcI/AAAAAAAA70M/GXmDIcZSuuMjT1eiRG7pGbgk5ziCVlCtgCK4BGAYYCw/w640-h360/FACT_2-781622.png
FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise.
Deployment

For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yamlfor configuration and requirements. Then, start the stack using:

docker-compose up -d

See the installation guide for more details and other deployment methods.

Using FACT

Check out the user guide.

Developing

See the developer documentation for details on setting up a development environment, linting and testing.

Screenshots
http://1.bp.blogspot.com/-4U5Qr0IvQM4/Yd0K1R_crcI/AAAAAAAA70M/GXmDIcZSuuMjT1eiRG7pGbgk5ziCVlCtgCK4BGAYYCw/w640-h360/FACT_2-781622.png http://2.bp.blogspot.com/-pDRBd12JMfE/Yd0K1tCc6OI/AAAAAAAA70U/sbjqYnGMuGMdR3A3dwYlIXLy2swPz2iIgCK4BGAYYCw/w640-h360/FACT_3-782386.png http://4.bp.blogspot.com/-CJOLuHqECKg/Yd0K1waRROI/AAAAAAAA70c/fQAXlIrFP-4v49Eg2FmZKY2e_0UjRsuKACK4BGAYYCw/w640-h360/FACT_4-783061.png
Download FACT

Hacking on Medium
TryHackMe — IDE

https://cdn-images-1.medium.com/max/600/0*B6C_shMvogXQ8Cl6.png
Hi guys, having fun with TryHackMe CTF again. So, here is the write up and guideline to pass this IDE challenge. This CTF room is designed…

Continue reading on InfoSec Write-ups »

Hacking on Medium
How I could have read your confidential bug reports by simple mail?

https://cdn-images-1.medium.com/max/728/1*kRiQnegTZTwkJoZC4jd-SA.png
Hey Everyone, Hope you’re doing safe and sound.

Continue reading on InfoSec Write-ups »

Hacking on Medium
A way to handle log4shell long tail

https://cdn-images-1.medium.com/max/2600/1*x27HGnIoooim8eJh6pYKbg.jpeg
An opensource contribution from Criteo for log4shell detection

Continue reading on Criteo R&D Blog »

Hacking on Medium
WebSocket nedir ? Hacklenir mi ?

https://cdn-images-1.medium.com/max/792/1*A9DNPkhhMqRc2jBk7RhnKg.png
WebSocket, tek bir TCP bağlantısı üzerinden tam çift yönlü iletişim kanalı sağlayan bir bilgisayar iletişim protokolüdür. WebSocket…

Continue reading on Medium »

Hacking on Medium
We are Hackstitute

https://cdn-images-1.medium.com/max/2600/1*pTsIOXntX-A4mowVEtIbtg.png
The world of NFT is rapidly growing and thousands of crypto projects are popping up in the world wide web, like mushrooms that comes after…

Continue reading on Medium »

First Valid BUG Finding At Microsoft And I Got the Acknowledgments Page Microsoft
https://aidilarf.medium.com/first-valid-bug-finding-at-microsoft-and-i-got-the-acknowledgments-page-microsoft-a2c185c53074?source=rss------bug_bounty-5

Hi Everyone.Continue reading on Medium » (https://aidilarf.medium.com/first-valid-bug-finding-at-microsoft-and-i-got-the-acknowledgments-page-microsoft-a2c185c53074?source=rss------bug_bounty-5)

hacking: security in practice
Any way to bypass administrator rights on a school laptop?

I have tried everything on the internet nothing works

submitted by /u/Fatdiamond2
[link] [comments]

fcrackzip: Cannot find path error appears only when -u command arguement is used, any idea why?
https://www.reddit.com/r/Pentesting/comments/sccfj2/fcrackzip_cannot_find_path_error_appears_only/

submitted by /u/LivelyZebra (https://www.reddit.com/user/LivelyZebra)
[link] (https://i.redd.it/d57z1cfcttd81.png) [comments] (https://www.reddit.com/r/Pentesting/comments/sccfj2/fcrackzip_cannot_find_path_error_appears_only/)