PORTSWIGGER WEB SECURITY - SSRF (SERVER SIDE REQUEST FORGERY) LAB ÇÖZÜMLERİ
https://ariarif.medium.com/portswigger-web-security-ssrf-server-side-request-forgery-lab-%C3%A7%C3%B6z%C3%BCmleri%CC%87-693c47812f2d?source=rss------bug_bounty-5

Bir web uygulamasında kullanılan veriler dış bir kaynak aracılığıyla alınıyorsa ve saldırgan web sunucusunun göndermiş olduğu istek…Continue reading on Medium » (https://ariarif.medium.com/portswigger-web-security-ssrf-server-side-request-forgery-lab-%C3%A7%C3%B6z%C3%BCmleri%CC%87-693c47812f2d?source=rss------bug_bounty-5)

hacking: security in practice
How to point one domain to another?

Let's say there are two websites:

website1.com website2.com

What I'm trying to do is make the website1.com domain point to website2.com, aka website1.com connects to website2.com and gives website2's response data. I don't have access to these domains so this has to be done on the client-side.

Afaik there's no way to do this with the /etc/hosts file. I've tried looking into dnsmasq but it's complicated and I'm still not really sure if it's going to do what I want. Is there any simple way to do this?

submitted by /u/IllusiveWriting
[link] [comments]

hacking: security in practice
What should I do if I'm getting spied on through my computer?

Recently I'm noticing some weird stuff going on with my computer. It's like someone has access to it and sometimes i found that my laptop rebooted itself and i found a software called kinoni remote installed. also someone logged into my steam account and for some reason launched rocket league i can tell because the graphic settings of rocket league were changed and also the controller settings.

I'm pretty sure someone has access to my computer. the question is what should i do now?

submitted by /u/Sorry_Presence6406
[link] [comments]

hacking: security in practice
Easy peasy intro to LFI, part #1

Hey guys,

Wrote an easy to understand guide for a LFI (Local file inclusion) or directory traversal for beginners:

https://h4krg33k.medium.com/directory-traversal-what-is-it-905bc64a0b33?source=friends_link&sk=3695b37852b85427ae6a06c2d390b637

Hope it helps! 😁

Also follow me on medium for more articles 🤗

submitted by /u/ultimate_smash
[link] [comments]

Certipy 2.0: BloodHound, New Domain Privilege Escalation Techniques, Shadow Credentials, Golden Certificates, and more!
https://www.reddit.com/r/redteamsec/comments/sw9wjf/certipy_20_bloodhound_new_domain_privilege/

submitted by /u/ly4k_ (https://www.reddit.com/user/ly4k_)
[link] (https://research.ifcr.dk/certipy-2-0-bloodhound-new-escalations-shadow-credentials-golden-certificates-and-more-34d1c26f0dc6) [comments] (https://www.reddit.com/r/redteamsec/comments/sw9wjf/certipy_20_bloodhound_new_domain_privilege/)

Directory Traversal — what is it?
https://systemweakness.com/directory-traversal-what-is-it-905bc64a0b33?source=rss------bug_bounty-5

Local File inclusionContinue reading on System Weakness » (https://systemweakness.com/directory-traversal-what-is-it-905bc64a0b33?source=rss------bug_bounty-5)

Hacking on Medium
HTB: Configurando VPS + Burp Suite

https://cdn-images-1.medium.com/max/1030/1*slblUTOb_B9cOEQDmhRH3w.png
Fala, pessoal!

Continue reading on Medium »

Hacking on Medium
Directory Traversal — what is it?

https://cdn-images-1.medium.com/max/2600/1*-OrmuqUusMkhEGgaUozXDQ.jpeg
Local File inclusion

Continue reading on System Weakness »

PORTSWIGGER WEB SECURITY - SSRF (SERVER SIDE REQUEST FORGERY) LAB ÇÖZÜMLERİ

Bir web uygulamasında kullanılan veriler dış bir kaynak aracılığıyla alınıyorsa ve saldırgan web sunucusunun göndermiş olduğu istek…Continue reading on Medium »
Read more...

Directory Traversal — what is it?

Local File inclusionContinue reading on System Weakness »
Read more...

hacking: security in practice
OpenCamera hack for Pixel 6 Pro

https://external-preview.redd.it/b2eha5pQarM2_wl3-usZIaHxFdQv1EjGI_4h5ikYl5U.jpg?width=640&crop=smart&auto=webp&s=aeb25f5ebb38477e7d4f93ec906657f657a3025a submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Jeff — Writeup

https://cdn-images-1.medium.com/max/2600/0*eRPk-_-Q0T1PwhYE
Room difficulty: Hard
Topics: Web server enumeration, wordpress exploitation, working with vhosts, cracking encrypted zip files, docker…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Leviathan — OverTheWire Wargame — Writeup

https://cdn-images-1.medium.com/max/1594/1*oEC3N5yv2JxhX806Rk0E9w.png
Leviathan is a wargame offered by OverTheWire. It ‘doesn’t require any knowledge about programming — just a bit of common sense and some…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video