docker run -it –rm log4j-scan
With URL list “urls.txt” in current directory
docker run -it –rm -v $PWD:/data log4j-scan -l /data/urls.txt Download

___________________________
@hacking_Attack
@Hacking_Video

.
https://blogger.googleusercontent.com/img/a/AVvXsEhdGTXv0ez1D7_S9zf08Z7n7FDn7ce6QjUNkWAIR2xWi8gXX217fMq0v4d7XC91Pfpu-9mOQTgU5Io_d36CtanV56JGi1Wndco9Hl6CFq3j54PkJ7rOZzRokabohSw7PXVaws8rtx7GG-eq47GH36LezbyzvQqbcggpjft0Uh3cj8D-Octscqb3ZqXw=s2390
The trace root represents where the source trace meets the sink trace. In our example this is the activitie’s onCreatemethod.
https://blogger.googleusercontent.com/img/a/AVvXsEgsitB3x54IwPBHxMSDTDk_u3fUwyxayAcBcpJ6uIa_d6su1DB9YKI-7rHsMDMfIjpnuxQD8ndvyNX4qPyco-wPlV9XfnjFPs2snXCefoIybFiBAId-94VhvMPYDm6ugDgZ_11Xjd6Z9e_51SVvye-E8lqZB04iLNjsZwab6MsD-wPZN0vU01hnSHt6=s2394
The final part of the trace is the sink trace: This is where the data from the source flows down into a sink. In our example from onCreate, to onClick, to execute, and finally into the constructor of ProcessBuilder. Configuring Mariana Trench

You might be asking yourself, “how does the tool know what is user controlled data, and what is a sink?”. This guide is meant to quickly get you started on a small app. We did not cover how to configure Mariana Trench. You can read more about that at our website under Configuration. Download

___________________________
@hacking_Attack
@Hacking_Video

HigherLogic RCE In \_VSTATE .NET

Remote code execution (RCE) is a class of software security flaws/vulnerabilities. RCE vulnerabilities will allow a malicious actor to…Continue reading on Medium »
Read more...

HigherLogic RCE In _VSTATE .NET
https://medium.com/@jr.mayank1999/higherlogic-rce-in-vstate-net-bcbbb88dfe72?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Remote code execution (RCE) is a class of software security flaws/vulnerabilities. RCE vulnerabilities will allow a malicious actor to…Continue reading on Medium » (https://medium.com/@jr.mayank1999/higherlogic-rce-in-vstate-net-bcbbb88dfe72?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is your WiFi running on default settings? I’m your admin!

https://cdn-images-1.medium.com/max/1920/1*JZqqPm_pwR1IpgXCpDG3Ig.jpeg
Why should you care about changing WiFi router default settings? The answer is easy — everyone knows your admin password already!

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How you can learn two years’ worth of material in one day

https://cdn-images-1.medium.com/max/2600/1*_92zb2Lf8QTYknoFCQKqRw.jpeg
(Disclaimer: This is not a religious article and does not contain any religious themes).

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Spy on iPhone Without Touching It

https://cdn-images-1.medium.com/max/935/1*Ac-54EWqnPub8dKfFVaSMg.jpeg
Do you want a way to eavesdrop on your spouse’s or children’s phone conversations in order to learn more about what’s going on in their…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Privilege Escalation Using Token Impersonation | Windows |

https://cdn-images-1.medium.com/max/1920/1*lwxJ4Kg6mdPphiOhJ2pYqg.png
Introduction to access tokens

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Make Cybersecurity Effective and Invisible

Cybersecurity should be a shield that protects the business, not a barrier that holds it back.

Bug Bounty Stress aka Burnout: do and don’t

Don’t stress yourself too much!Continue reading on Medium »
Read more...

Bug Bounty Stress aka Burnout: do and don’t
https://medium.com/@0xabsiddique/bug-bounty-stress-aka-burnout-do-and-dont-86da71dec93f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Don’t stress yourself too much!Continue reading on Medium » (https://medium.com/@0xabsiddique/bug-bounty-stress-aka-burnout-do-and-dont-86da71dec93f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

100 Days of Hacking — Day 10
https://astroboy73.medium.com/100-days-of-hacking-day-10-486dcbcc3233?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What’s up guys it’s the 10th day of #100DaysofHacking. 10% of the goal is achieved let’s go through today’s objectives and reportContinue reading on Medium » (https://astroboy73.medium.com/100-days-of-hacking-day-10-486dcbcc3233?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta account just got taken over, any advice?

So my insta account just got taken over. The email has been changed. The phone number has been changed. 2FA has been activated.

Am I right in thinking that it’s lost and unrecoverable? All I have is their ‘supposed’ phone number. I’m not 100% it even is their real one.

Any advice, or is it just a fuck sake, and move on kinda deal?

submitted by /u/ThatSkylineGuy
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
AWS Cloud Security Challenge - 2

Hey folks, here is a new challenge

Developer made a snapshot called challenge-2 public but needs your help to get the flag and prove the severity of this mistake.

Get the flag and pwn it .

Here is the origin tweet : https://twitter.com/securitylabs_/status/1493626908277456899?t=KKuNKNy6WlTgJepQ9IrftA&s=19

submitted by /u/0xdeadbeef0000
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hunt Down Social Media Accounts With Python Sherlock

submitted by /u/AfroBoyUg
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video