First Bounty! Disable 2FA of any user via OTP bypass
https://medium.com/@ba7manhacks/first-bounty-disable-2fa-of-any-user-via-otp-bypass-34678f102efc?source=rss------bug_bounty-5
https://medium.com/@ba7manhacks/first-bounty-disable-2fa-of-any-user-via-otp-bypass-34678f102efc?source=rss------bug_bounty-5
Getting that first bug bounty is a special feeling for any bug hunter. This is my first write up so please bear with me.Continue reading on Medium » (https://medium.com/@ba7manhacks/first-bounty-disable-2fa-of-any-user-via-otp-bypass-34678f102efc?source=rss------bug_bounty-5)
FACT - A Tool To Collect, Process And Visualise Forensic Data From Clusters Of Machines Running In The Cloud Or On-Premise
FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for configuration and requirements. Then, start the stack using: docker-compose up -d See the installation guide for more details and other deployment methods. Using FACT Check out the user guide. Developing See the developer documentation for details on setting up a development environment, linting and testing. Screenshots Download FACT
Read more...
FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for configuration and requirements. Then, start the stack using: docker-compose up -d See the installation guide for more details and other deployment methods. Using FACT Check out the user guide. Developing See the developer documentation for details on setting up a development environment, linting and testing. Screenshots Download FACT
Read more...
deBridge launches bug bounty on ImmuneFi
https://debridge.medium.com/debridge-launches-bug-bounty-on-immunefi-a22fb1de4f18?source=rss------bug_bounty-5
https://debridge.medium.com/debridge-launches-bug-bounty-on-immunefi-a22fb1de4f18?source=rss------bug_bounty-5
This initiative is being funded by deBridge in order to improve network security and reliability for the network’s global community.Continue reading on Medium » (https://debridge.medium.com/debridge-launches-bug-bounty-on-immunefi-a22fb1de4f18?source=rss------bug_bounty-5)
What I learnt from reading 220* IDOR bug reports.
https://medium.com/@Sm9l/what-i-learnt-from-reading-220-idor-bug-reports-6efbea44db7?source=rss------bug_bounty-5
https://medium.com/@Sm9l/what-i-learnt-from-reading-220-idor-bug-reports-6efbea44db7?source=rss------bug_bounty-5
IDOR — Insecure Direct Object Reference, abuse of the lack of authentication at every stage.Continue reading on Medium » (https://medium.com/@Sm9l/what-i-learnt-from-reading-220-idor-bug-reports-6efbea44db7?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What I learnt from reading 220* IDOR bug reports.
https://cdn-images-1.medium.com/max/873/1*AOVysctTl30shhuoPEHmCQ.png
IDOR — Insecure Direct Object Reference, abuse of the lack of authentication at every stage.
Continue reading on Medium »
What I learnt from reading 220* IDOR bug reports.
https://cdn-images-1.medium.com/max/873/1*AOVysctTl30shhuoPEHmCQ.png
IDOR — Insecure Direct Object Reference, abuse of the lack of authentication at every stage.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Learning binary exploitation — 4
Format String Vulnerability
Continue reading on Medium »
Learning binary exploitation — 4
Format String Vulnerability
Continue reading on Medium »
hacking: security in practice
Is hacking viable as only as hobby / as a non-professional
Hi, sorry if this is the wrong sub, sorry for bad english.
My question is simply: Is hacking viable as a hobby. By "viable" I mean, if you pursued hacking as a hobby besides your 9-5 job and are not working in IT security or something related, will you even see any results in a resonable time. Or is the learning curve so steap that a hobbyist will work on it for two decades and still have no where near enough skills for "real world application"? (as in, not only solving challenges specifcally created to be solved)
I am torn wheiter hacking is for me, on one side I have a deep passion for computers/coding/problem-solving/math, but I am worried I will spend a big chunck of my life pursuing this field only to find out at the end of my life that I have achieved nothing of relevance.
submitted by /u/n0tALizard
[link] [comments]
Is hacking viable as only as hobby / as a non-professional
Hi, sorry if this is the wrong sub, sorry for bad english.
My question is simply: Is hacking viable as a hobby. By "viable" I mean, if you pursued hacking as a hobby besides your 9-5 job and are not working in IT security or something related, will you even see any results in a resonable time. Or is the learning curve so steap that a hobbyist will work on it for two decades and still have no where near enough skills for "real world application"? (as in, not only solving challenges specifcally created to be solved)
I am torn wheiter hacking is for me, on one side I have a deep passion for computers/coding/problem-solving/math, but I am worried I will spend a big chunck of my life pursuing this field only to find out at the end of my life that I have achieved nothing of relevance.
submitted by /u/n0tALizard
[link] [comments]
reddit
Is hacking viable as only as hobby / as a non-professional
Hi, sorry if this is the wrong sub, sorry for bad english. My question is simply: Is hacking viable as a hobby. By "viable" I mean, if you...
hacking: security in practice
Scraper for bug bounty reports for specific vendors
I am looking for ideas for scrapping bug bounty reports from sites like BugCrowd or HackerOne. I'd like to monitor for bounties posted by vendors and any reports posted for those programs. Setting up alerts or monitoring news/social media is good but those reports often are not disclosed publicly or if they are posted to late. Monitoring this way may help prevent supply chain attacks, formulating ideas now and would appreciate any input. Thanks
submitted by /u/ashertehll6831
[link] [comments]
Scraper for bug bounty reports for specific vendors
I am looking for ideas for scrapping bug bounty reports from sites like BugCrowd or HackerOne. I'd like to monitor for bounties posted by vendors and any reports posted for those programs. Setting up alerts or monitoring news/social media is good but those reports often are not disclosed publicly or if they are posted to late. Monitoring this way may help prevent supply chain attacks, formulating ideas now and would appreciate any input. Thanks
submitted by /u/ashertehll6831
[link] [comments]
reddit
Scraper for bug bounty reports for specific vendors
I am looking for ideas for scrapping bug bounty reports from sites like BugCrowd or HackerOne. I'd like to monitor for bounties posted by vendors...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Compromised website junk text over original page
My website was compromised. Someone put over junk text over original page. Examples below:
* https://accept.aseanenergy.org/Baby-Boys-Gentleman-Outfits-Suits-Long-Sleeve-Onesie-Romper/Bow-tie-Shirt-Bib-Pants-Overall-Clothes-Set-1046975/
* https://accept.aseanenergy.org/event/asean-energy-outlook-forum-2022/
Website uses Wordpress as backend CMS and bitnami.
My question would be:
1. Does this type of attack has any specific terminology?
2. What are the possible cause?
3. Which server side file might be compromised?
4. Tips to prevent this from happening again?
Thanks a lot.
submitted by /u/pinokioblabla
[link] [comments]
Compromised website junk text over original page
My website was compromised. Someone put over junk text over original page. Examples below:
* https://accept.aseanenergy.org/Baby-Boys-Gentleman-Outfits-Suits-Long-Sleeve-Onesie-Romper/Bow-tie-Shirt-Bib-Pants-Overall-Clothes-Set-1046975/
* https://accept.aseanenergy.org/event/asean-energy-outlook-forum-2022/
Website uses Wordpress as backend CMS and bitnami.
My question would be:
1. Does this type of attack has any specific terminology?
2. What are the possible cause?
3. Which server side file might be compromised?
4. Tips to prevent this from happening again?
Thanks a lot.
submitted by /u/pinokioblabla
[link] [comments]
hacking: security in practice
I have a P.C and Laptop. which one should I use to install linux to learn cyber security ?
and also , which flavour of linux should I chose ?
submitted by /u/DaFukTheyDoinOvaDer
[link] [comments]
I have a P.C and Laptop. which one should I use to install linux to learn cyber security ?
and also , which flavour of linux should I chose ?
submitted by /u/DaFukTheyDoinOvaDer
[link] [comments]
reddit
I have a P.C and Laptop. which one should I use to install linux...
and also , which flavour of linux should I chose ?