hacking: security in practice
How broad is the skillset of the average hacker?

How broad is the knowledge of the average person working in the cybersecurity industry? Are people usually specialized in one specific area? Or are people a jack of all trades? How much time do people spend staying up to date or learning about new topics?

For context, I'm a high school student that has an interest in hacking. I've realized that there's no ceiling for the number of things you can learn. I assume that even if someone has learned almost everything, technology progresses so quickly that there's something new to figure out.

Every time I participate in something like picoCTF, there always seems to be yet another program or skill to be learned, so I was wondering specifically what people usually dedicate their time to learning

Thanks

submitted by /u/SpaceEnthusiast3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Api Security in CI/CD Process

https://cdn-images-1.medium.com/max/1381/1*hgEBpYPgdB8OZXJK2ORAOg.png
Buiding asecure api project is part of the job, how can we use the CI/CD process to ensure it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Spoofing file extensions — Ethical Hacking

https://cdn-images-1.medium.com/max/959/1*7Z8SsDMBiwanxnMewOvoaA.jpeg
File extension spoofing is a handy trick when creating trojans. I will be spoofing the ‘.exe’ extension to the ‘.jpg’ extension.

Continue reading on Level Up Coding »

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

The Bad Twin: a peculiar case of JWT exploitation scenario

Hey Everyone,Continue reading on Medium »
Read more...

Going beyond the surface: Vulns that pay well

These days bug bounty hunters have been finding many low-hanging fruits and a lot of them want to go beyond those bugs. This blog is for…
Read more...

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

WhatsApp Bug Bounty: Bypassing biometric authentication using voip

Bypassing biometric authentication just by making a call and access the app completely
Read more...

hacking: security in practice
New to this whole thing

Can I set up hacking tools on Kali Linux (Raspberry Pi 4 B) like a Pineapple? I want to know if i can use the pineapple with the raspberry pi with kali?

submitted by /u/Corupted69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are brute force attacks obsolete nowadays?

I'm currently learning cybersecurity, and one of the things I've seen things like, rainbow tables, password encryption with keys, hashing with salt, and the list goes on.

Sites nowadays have so many things stop brute forcing, such as captcha, limited number of guesses to log-in, and minimum requirements to make a password. With that in mind, wouldn't a computer than can calculate I don't know many millions of passwords per second be rather... useless?

Now say, IF someone has your encrypted data, that would be only assuming said someone would have access to your personal computer files, at which point you should have a lot more reason to worry for that than your login in a random site. At this point, then yes it'd make sense to compute billions of passwords or numerous decryption programms to access your password, but other than that, I really see no use to how many possibilites a computer can come up with in the matter of seconds.

submitted by /u/UmPrataQualquer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are their any other sites like Norussian.tk?

I had that up on a few computers but I just checked and it looks like the site is now down. Or does it look like I have to use something like docker?

submitted by /u/MyAnimeAccount420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Concurrency Limit & TimeOut for NoRussian DDOS script

Sorry if this is not the correct sub for this question.

Can someone please explain a bit about Concurrency Limit and Timeout values at https://github.com/ajax-lives/NoRussian :

I would like to "optimise" the settings to make it as efficient as possible for my setup. i assume the settings are generic to suit as many people as possible without bogging their machines down too much.

I assume ConcurrencyLimit is the max aimultaneous requests the browser will run and the timeout value means if it hasn't received a response within this many milliseconds it will abort the request to allow it to try again.

If the request hits its timeout limit and aborts does the target server know (ie does it realise the request has been dropped freeing the server up to attend to the next request?).

If yes, why not keep the request in to hold pressure on the server and counteract this by also increasing the number of concurrent requests? I also assume a longer timeout to allow a proper response to return may increase the riliability of the error count. An aborted request due to timeout does not increase the error count (understandably).

If no, why wait for the response at all? If it is simply about smashing the target server with as many requests as possible why not abort the request straight after it is sent to keep the server occupied?

Will a timeout value increase work against some of these DDOS protections?

Is there value in increasing the ConcurrencyLimit as well as the timeout?

Where is the most likely bottleneck for someone using this webpage? Am I better to use the current settings and open up multiple instances? monitoring my traffic I am barely bothering my available bandwidth. Am I more interested in using more upload (as this must be going to the target) than my download (as I guess a lot of it will be errors / failures). I am only managing to use about 5MB up and 18MB down running a few instances of the page.

Thanks in advance.

submitted by /u/Dont-PM-me-nudes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russia Arrests Hackers Tied to Major U.S. Ransomware Attacks, Including Colonial Pipeline Disruption

https://external-preview.redd.it/4sRTaHSTnuXpT1qU0pjlBgXUluP4vfFJ7f1unMOzj_c.jpg?width=640&crop=smart&auto=webp&s=288d194d67e3504b112ff23e5c62d775a8e6d56b submitted by /u/ionlad106
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained
https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Bad Twin: a peculiar case of JWT exploitation scenario
https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Everyone,Continue reading on Medium » (https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video