Hacking on Medium
Attacking Kerberos Unconstrained Delegation

https://cdn-images-1.medium.com/max/2600/1*l-7ZferETErnEznqv1QRJQ.jpeg
Trust this user/computer for delegation to any service

Continue reading on R3d Buck3T »

Dark Reading: Attacks/Breaches
Prioritizing the Right Vulnerabilities to Reduce Risk

Prioritization needs to be part of vulnerability management if security teams are to keep up and mitigate issues in a timely manner.

hacking: security in practice
John The Ripper - Double dipping from wordlist

Hello every one!

I'm attempting to help my friend open his .zip file which he forgot his password to. He has a really good idea of the format however, just unsure of which position/words are where.

For ex. Dog_freedom_6324_Banana frog_Johnathon_3432_mother etc

I'm VERY new to ethical hacking and am only doing this as a fun project to help him. I've been trying to learn how it works and have gotten as far as:

aZ"_[0-9][09][09] for my rule.

Using John --wordlist=Name --rules=Name --stdout I see that John first pulls a word from my wordlist, then adds a _ and proceeds to add 3 random numbers.

The issue is I don't know how to make John "double dip" into the wordlist as my first example would need. Ex. WordlistWordlist"47385"_Wordlist (Assuming the numericals are known)

Apologies if I'm not good at explaining - let me know if I can clarify. (The password he has used does not contain normal words in the dictionary so its important that I can tell John the words I need it to try between underscores)

Thank you so much for your time.

submitted by /u/ColdNCursed
[link] [comments]

hacking: security in practice
CISO is briefed on Red Team engagement

https://external-preview.redd.it/894IS2jtW62LvpopLiFcBMNsipUglZkp0LqXx2CoPKg.jpg?width=320&crop=smart&auto=webp&s=26a78c01b9cc3b882b555bee888fe2ad162b2f15 submitted by /u/hdh33
[link] [comments]

Microsoft Team’s Unpatched URL Spoofing Vulnerability
https://priyankraval.medium.com/microsoft-teams-unpatched-url-spoofing-vulnerability-c58f5949fac8?source=rss------bug_bounty-5

What is URL Spoofing?Continue reading on Medium » (https://priyankraval.medium.com/microsoft-teams-unpatched-url-spoofing-vulnerability-c58f5949fac8?source=rss------bug_bounty-5)

r/Pentesting Subdirect Statistics
https://www.reddit.com/r/Pentesting/comments/so85st/rpentesting_subdirect_statistics/

submitted by /u/lochydjango (https://www.reddit.com/user/lochydjango)
[link] (https://redditpagematrics.com/r/Pentesting) [comments] (https://www.reddit.com/r/Pentesting/comments/so85st/rpentesting_subdirect_statistics/)

Hacking on Medium
Vulnhub Series →DC-1

https://cdn-images-1.medium.com/max/963/1*TUQK5lUoXWhrEkk6nRRejQ.png
Greetings,

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Crypto Wallet MetaMask And 40 Others Are Targeted By New Malware: How To Protect Yourself!

https://cdn-images-1.medium.com/max/2600/0*45ST1t40IV98yYCO
Lovers and managers of their cryptocurrencies, beware! New malware is targeting MetaMask and 40 other crypto wallets!

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

PORTSWIGGER WEB SECURITY - INFORMATION DISCLOSURE LAB ÇÖZÜMLERİ
https://ariarif.medium.com/portswigger-web-security-information-disclosure-lab-%C3%A7%C3%B6z%C3%BCmleri%CC%87-2d4bcc6404f3?source=rss------bug_bounty-5

Information Disclosure - Bilgi Sızıntısı olarak tanımlanan güvenlik zafiyeti, bir web uygulamasında kullanıcılara istemsiz bir şekilde…Continue reading on Medium » (https://ariarif.medium.com/portswigger-web-security-information-disclosure-lab-%C3%A7%C3%B6z%C3%BCmleri%CC%87-2d4bcc6404f3?source=rss------bug_bounty-5)