Hacking on Medium
Способы взлома почты

https://cdn-images-1.medium.com/max/1280/1*dakXoOqQrQ49F1ZX1jy4aw.jpeg
Разбираем тактики и способы, которые помогут взломать почту

Continue reading on Medium »

Hacking on Medium
Analyzing and Exploiting CVE-2020–15160 | PrestaShop Blind Sql Injection | AWAE/OSWE Prep

https://cdn-images-1.medium.com/max/906/1*65d7uLwOOwCK1oEH45tS0w.png
There was No public exploit available for this CVE so i thought why not give it a try and it was fun.

Continue reading on Medium »

Hacking on Medium
Cybersecurity: Zero Trust Architecture

https://cdn-images-1.medium.com/max/1024/1*UyTA0AJRp3CpPUA5F4-SNQ.jpeg
Never Trust, Always Verify

Continue reading on CodeX »

Hacking on Medium
Privacy and Security of COVID-19 to be Protected by Public Health Emergency Privacy Act

https://cdn-images-1.medium.com/max/2600/1*GH5f53G7-1nw33uzvkADvQ.jpeg
Democratic senators introduced the Public Health Emergency Privacy Act on January 28, 2021 in order to safeguard the privacy of Americans…

Continue reading on Medium »

Hacking on Medium
Main App Bug Bounty Methodology —  V3

https://cdn-images-1.medium.com/max/719/1*oj6jPs-TehinOom4gy3DZw.png
Introduction

Continue reading on Medium »

hacking: security in practice
Would a Solarwinds style hack be possible against APC?

So looking at APC's firmware update site they do not list hashes for their firmware updates.

https://www.apc.com/us/en/faqs/index?page=content&id=FA170679

They have all of their firmware on a Box.com account.

https://schneider-electric.box.com/s/jkigadv87yfv0oqu4d67fr7wp7s67mfo

This does not seem to be best practice.

submitted by /u/Boonaki
[link] [comments]

hacking: security in practice
Critical Zoom vulnerability triggers remote code execution without user input

https://external-preview.redd.it/tCDgh0gw1dTa4Bhd7mnukLSec0WfBvZhOyg2a2UmDE8.jpg?width=640&crop=smart&auto=webp&s=ff415fda2c7915086968b344b67a9ef66108080f submitted by /u/_P4TR10T
[link] [comments]

hacking: security in practice
Dscord video crashes client, is it harmful? tornadus net orange

Got to experience the strange gif/video that crashes your dscord client when viewed
I opened the website by accident which contained just a orange shaded word "Orange"
Does anyone know if that website didnt stole any personal information such as passwords?

submitted by /u/Ugh-Bot
[link] [comments]

hacking: security in practice
Android stalkers

I really need to track down stalkers in an android 10 system. Any leads I can follow?

submitted by /u/Adi026
[link] [comments]

hacking: security in practice
Turning server sided XSS into LFI and escalating to RCE

https://external-preview.redd.it/t9re_Lc6uL-MdjElANfbHTX6lJgfsCzYR5Jrtzqhknk.jpg?width=320&crop=smart&auto=webp&s=0260cf9526d8cc0f351df3dc13166dbe70120398 submitted by /u/PinkDraconian
[link] [comments]

hacking: security in practice
Start

Im interested in coding or hacking but i dont know how or where to start. Any tips?

submitted by /u/MyOpnion
[link] [comments]

hacking: security in practice
Starting out

Im interested in coding or hacking but i dont know how or where to start. Any tips?

submitted by /u/MyOpnion
[link] [comments]

Bug Hunting 101: Nine Ways to Make Sure the Right People Read Your Bug Reports
https://joshpitts.medium.com/bug-hunting-101-nine-ways-to-make-sure-the-right-people-read-your-bug-reports-94ada471b894?source=rss------bug_bounty-5

Congrats you work in sales and marketing now.Continue reading on Medium » (https://joshpitts.medium.com/bug-hunting-101-nine-ways-to-make-sure-the-right-people-read-your-bug-reports-94ada471b894?source=rss------bug_bounty-5)

PoisonApple - macOS Persistence Tool
http://www.kitploit.com/2021/04/poisonapple-macos-persistence-tool.html