So you have a list of subdomains, now what?Continue reading on Medium » (https://thexssrat.medium.com/subdomain-flyover-and-manual-exploration-of-the-results-15c69d509091?source=rss------bug_bounty-5)

Deep Web
Tether's plan is to shorting X+m+r cryptocurrency which will suppress its value.

short-positioning is used to get profit from a stock when it is supposed to go down in worth. Tether company assumes X+m+r cryptocurrency will fall in price, so they are planning to short-position it.

submitted by /u/StormilyHalloo267
[link] [comments]

hacking: security in practice
Would setting up a guest network be enough to keep me safe and isolate an untrusted/Potentially dangerous machine from my trusted ones?

I will be setting up a machine that would probably get infected soon, but will my work pc and other devices be safe as long as that one is connected only to my guest network?

There is all sorts of procedures like DMZ setup and configuring a firewall , though I am not very familiar but I can learn if necessary. I am wondering if guest network will be enough.

One more question if it is okay. If my trusted pc is connected with ethernet to my router, I'm assuming the guest network would not be able to talk with that either, is that correct?

submitted by /u/WildSimple8048
[link] [comments]

hacking: security in practice
Any chance that there is a way to get around paying a micro transaction for feature that was advertised?

I got a set of Razer Kraken 7.1 surround sound headphones and it advertises it's "THX 7.1 Surround Sound." It doesn't actually come with this feature and makes you pay an extra $20--which is false advertising. I would have never bought said headphones if THX was not included with the headphones as advertised. Any way to get around this? It runs on Razer's software.

Razer's download: https://www.razer.com/p/RZ11-13000-0001

alt download that allows you to get into the software without paying: https://www.techspot.com/downloads/7274-thx-spatial-audio.html

You can get into the client with the alternate download, but it requires an activation code.

submitted by /u/mydepressedass
[link] [comments]

Exploit Collector
iOS / macOS Radio Proximity Kernel Memory Corruption

https://3.bp.blogspot.com/-00fiGlDHfKo/WWlvZ5odqlI/AAAAAAAAIO4/nnZp17OtkHAWqiO0pbFBQSys2U4_yu8pACLcBGAs/s1600/h7.png
A radio proximity kernel memory corruption vulnerability exists in iOS and macOS due to bad state machine in BSS steering.

MD5 | 5ff730e5556e80e223e58b23eca60fa1

Download
Source:packetstormsecurity.com

Dark Reading: Attacks/Breaches
Voice-Changing Software Found on APT Attackers' Server

Security researchers believe the presence of Morph Vox Pro could indicate APT-C-23 has new plans for their phishing campaigns.

Dark Reading: Attacks/Breaches
Did 4 Major Ransomware Groups Truly Form a Cartel?

An analysis of well-known extortion groups and their cryptocurrency transactions reveals the answer.

Examining the database in SQL injection attacks

When exploiting SQL injection vulnerabilities, it is often necessary to gather some information about the database itself. This includes…Continue reading on Medium »
Read more...

Examining the database in SQL injection attacks
https://mrinalprakash4577.medium.com/examining-the-database-in-sql-injection-attacks-1e56f051e7b2?source=rss------bug_bounty-5

When exploiting SQL injection vulnerabilities, it is often necessary to gather some information about the database itself. This includes…Continue reading on Medium » (https://mrinalprakash4577.medium.com/examining-the-database-in-sql-injection-attacks-1e56f051e7b2?source=rss------bug_bounty-5)