Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
At Immunefi, we receive a large number of reports from whitehats regarding subdomain takeovers. But we have a policy of always marking…Continue reading on Immunefi » (https://medium.com/immunefi/subdomain-takeover-bugs-when-theyre-applicable-and-when-they-re-not-1e6ce42de503?source=rss------bug_bounty-5)
Hoje vou falar um pouco de uma falha que me levou a dois relatórios infelizmente ambos foram duplicados porém ficou de experiência e…Continue reading on Medium » (https://medium.com/@kauenavarro/bugbounty-ssrf-iframe-injection-e-xss-reflected-4f107b380ba?source=rss------bug_bounty-5)
Dark Reading: Attacks/Breaches
Hackers Went Wild in 2021 — Every Company Should Do These 5 Things in 2022

Practical steps companies can take to defend their critical infrastructure and avoid the financial and reputational damage that could result from a breach.
hacking: security in practice
Learning hacking the "right way"

Hi, I'm a high school student and I've been interested in computer science for almost two years now, and "recently" got into ethical hacking and specifically pen-testing. So, I know that learning a field like this is not easy, so I'm kind of skeptical about online courses. I think for me a more traditional way of learning would be more effective, but c'mon I don't want to wait until university, I'm just too interested to wait, and just like I learned programming, I think I'll be able to learn at least something about pen-testing... given the right tools tho. So, do you have some tips on where to find the material? I first thought of the university syllabuses while looking at the courses themselves for roadmaps, but I don't know if I'll be able to get everything I need (of course I prefer free stuff, so I'll think twice before buying stuff I don't know if it'll be useful or not), so maybe there's a better option...

submitted by /u/Dumb-Ptr
[link] [comments]
hacking: security in practice
xss on cookie

It's my first time to post here and sorry for dumb question. is this a valid xss?

HTTP request

GET / HTTP/2 Host: test.com ... Cookie: UUID:abc

HTTP response is like
HTTP/2 200 OK Set-cookie: UUID=abc ... ....


submitted by /u/xxxx_Blank_xxxx
[link] [comments]