Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
66K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Dark Reading: Attacks/Breaches
Prioritizing the Right Vulnerabilities to Reduce Risk

Prioritization needs to be part of vulnerability management if security teams are to keep up and mitigate issues in a timely manner.
hacking: security in practice
John The Ripper - Double dipping from wordlist

Hello every one!

I'm attempting to help my friend open his .zip file which he forgot his password to. He has a really good idea of the format however, just unsure of which position/words are where.

For ex. Dog_freedom_6324_Banana frog_Johnathon_3432_mother etc

I'm VERY new to ethical hacking and am only doing this as a fun project to help him. I've been trying to learn how it works and have gotten as far as:

aZ"_[0-9][09][09] for my rule.

Using John --wordlist=Name --rules=Name --stdout I see that John first pulls a word from my wordlist, then adds a _ and proceeds to add 3 random numbers.

The issue is I don't know how to make John "double dip" into the wordlist as my first example would need. Ex. WordlistWordlist"47385"_Wordlist (Assuming the numericals are known)

Apologies if I'm not good at explaining - let me know if I can clarify. (The password he has used does not contain normal words in the dictionary so its important that I can tell John the words I need it to try between underscores)

Thank you so much for your time.

submitted by /u/ColdNCursed
[link] [comments]
Information Disclosure - Bilgi Sızıntısı olarak tanımlanan güvenlik zafiyeti, bir web uygulamasında kullanıcılara istemsiz bir şekilde…Continue reading on Medium » (https://ariarif.medium.com/portswigger-web-security-information-disclosure-lab-%C3%A7%C3%B6z%C3%BCmleri%CC%87-2d4bcc6404f3?source=rss------bug_bounty-5)