Hacking on Medium
TryHackMe: Content Discovery Walkthrough

https://cdn-images-1.medium.com/max/628/1*A3FA4T3fIGGLIiAdfM700A.png
Learn the various ways of discovering hidden or private content on a webserver that could lead to new vulnerabilities.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Conheça o ethical hacking — o hacking do bem

https://cdn-images-1.medium.com/max/1200/1*IV5QnW8aJspWMFUv0HuL9Q.jpeg
Publicado originalmente em 13/05/2021

Continue reading on Casa Hacker »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Zico2 VM Walkthrough

https://cdn-images-1.medium.com/max/753/0*6P0FVp9vtYhsfz3E.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Beginner Bug Bounty Guide - Part 3

Previous : Beginner Bug Bounty Guide - Part 2Continue reading on Medium »
Read more...

Beginner Bug Bounty Guide - Part 4

Previous : Beginner Bug Bounty Guide - Part 3Continue reading on Medium »
Read more...

Ninjasworkout - Vulnerable NodeJS Web Application
http://www.kitploit.com/2022/01/ninjasworkout-vulnerable-nodejs-web.html

___________________________
@hacking_Attack
@Hacking_Video

Damn Vulnerable NodeJS Application
Quick Start run npm i ">Download the Repo =>

run npm i

Afer Installing all dependency just run the application node app.js or nodemon app.js

___________________________
@hacking_Attack
@Hacking_Video

ADDED BUGS Prototype Pollution No SQL Injection Cross site Scripting Broken Access Control Broken Session Management (https://www.kitploit.com/search/label/Management) Weak Regex Implementation Race Condition CSRF -Cross Site Request Forgery Weak Bruteforce (https://www.kitploit.com/search/label/Bruteforce) Protection User Enumeration (https://www.kitploit.com/search/label/Enumeration) Reset Password token leaking in Referrer Reset Password bugs Sensitive Data Exposure Unicode Case Mapping Collision File Upload SSRF XXE Open Redirection Directory Traversal
Insecure Deserilization => Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) Server Side Template Injection
Timing Attack
Reset Password Module will not work !! You have to configure SMTP !! in utils=>sendmail.js
TODO Improvement in User Interface Add New Vulnerabilities on weekly basis Add Documentation of all the Vulnerabilites Issues In case of bugs in the application, feel free to create an issues (https://github.com/effortlessdevsec/ninjasworkout/issues) on github. Contribution Feel free to create a pull request for any contribution.

Download Ninjasworkout (https://github.com/effortlessdevsec/ninjasworkout)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
‘Cyberpartisans’ hack Belarusian railway to disrupt Russian Ukraine invasion buildup

https://external-preview.redd.it/I1J_x-ogrOLulUyUwvphtOHTkQ3XlDXEGTh-VP3qxfo.jpg?width=640&crop=smart&auto=webp&s=e702cb8e032ef331b2502530c042b4a3569f1610 submitted by /u/jonfla
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What exploit is this? [Obd hacking]

Hi, I saw this video on YouTube and I was wondering what exploit is that, apparently he is able to start the car without the key something like a bypass to the ecu via obd port, it seems that he found a way to obtain the encryption key before hand. Does anyone know more about this? Does exist something like this on github? Here is the video on YouTube

submitted by /u/Sale_q_b
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Running command prompt from BIOS

I have been trying to run command prompt from the BIOS, but when I try to run command prompt from the BIOS it goes on aafe mode. How do I get out of safe mode?

submitted by /u/Shmifful
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Experts Urge Firms to Patch Trivial-to-Exploit Flaw in Linux PolicyKit

The memory corruption vulnerability in a policy component installed by default on most Linux distributions allows any user to become root. Researchers have already reproduced the exploit.

A brief overview of JWT and its exploits

IntroductionContinue reading on Medium »
Read more...

Beginner Bug Bounty Guide - Part 3
https://takshil-patil529.medium.com/beginner-bug-bounty-guide-part-3-8b979d0f6511?source=rss------bug_bounty-5

Previous : Beginner Bug Bounty Guide - Part 2Continue reading on Medium » (https://takshil-patil529.medium.com/beginner-bug-bounty-guide-part-3-8b979d0f6511?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video