Going beyond the surface: Vulns that pay well

These days bug bounty hunters have been finding many low-hanging fruits and a lot of them want to go beyond those bugs. This blog is for…
Read more...

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

WhatsApp Bug Bounty: Bypassing biometric authentication using voip

Bypassing biometric authentication just by making a call and access the app completely
Read more...

hacking: security in practice
New to this whole thing

Can I set up hacking tools on Kali Linux (Raspberry Pi 4 B) like a Pineapple? I want to know if i can use the pineapple with the raspberry pi with kali?

submitted by /u/Corupted69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are brute force attacks obsolete nowadays?

I'm currently learning cybersecurity, and one of the things I've seen things like, rainbow tables, password encryption with keys, hashing with salt, and the list goes on.

Sites nowadays have so many things stop brute forcing, such as captcha, limited number of guesses to log-in, and minimum requirements to make a password. With that in mind, wouldn't a computer than can calculate I don't know many millions of passwords per second be rather... useless?

Now say, IF someone has your encrypted data, that would be only assuming said someone would have access to your personal computer files, at which point you should have a lot more reason to worry for that than your login in a random site. At this point, then yes it'd make sense to compute billions of passwords or numerous decryption programms to access your password, but other than that, I really see no use to how many possibilites a computer can come up with in the matter of seconds.

submitted by /u/UmPrataQualquer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are their any other sites like Norussian.tk?

I had that up on a few computers but I just checked and it looks like the site is now down. Or does it look like I have to use something like docker?

submitted by /u/MyAnimeAccount420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Concurrency Limit & TimeOut for NoRussian DDOS script

Sorry if this is not the correct sub for this question.

Can someone please explain a bit about Concurrency Limit and Timeout values at https://github.com/ajax-lives/NoRussian :

I would like to "optimise" the settings to make it as efficient as possible for my setup. i assume the settings are generic to suit as many people as possible without bogging their machines down too much.

I assume ConcurrencyLimit is the max aimultaneous requests the browser will run and the timeout value means if it hasn't received a response within this many milliseconds it will abort the request to allow it to try again.

If the request hits its timeout limit and aborts does the target server know (ie does it realise the request has been dropped freeing the server up to attend to the next request?).

If yes, why not keep the request in to hold pressure on the server and counteract this by also increasing the number of concurrent requests? I also assume a longer timeout to allow a proper response to return may increase the riliability of the error count. An aborted request due to timeout does not increase the error count (understandably).

If no, why wait for the response at all? If it is simply about smashing the target server with as many requests as possible why not abort the request straight after it is sent to keep the server occupied?

Will a timeout value increase work against some of these DDOS protections?

Is there value in increasing the ConcurrencyLimit as well as the timeout?

Where is the most likely bottleneck for someone using this webpage? Am I better to use the current settings and open up multiple instances? monitoring my traffic I am barely bothering my available bandwidth. Am I more interested in using more upload (as this must be going to the target) than my download (as I guess a lot of it will be errors / failures). I am only managing to use about 5MB up and 18MB down running a few instances of the page.

Thanks in advance.

submitted by /u/Dont-PM-me-nudes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russia Arrests Hackers Tied to Major U.S. Ransomware Attacks, Including Colonial Pipeline Disruption

https://external-preview.redd.it/4sRTaHSTnuXpT1qU0pjlBgXUluP4vfFJ7f1unMOzj_c.jpg?width=640&crop=smart&auto=webp&s=288d194d67e3504b112ff23e5c62d775a8e6d56b submitted by /u/ionlad106
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained
https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Bad Twin: a peculiar case of JWT exploitation scenario
https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Everyone,Continue reading on Medium » (https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Cyber Security Internship

Hi Everyone, I’m Darshan Kumar B K from Bangalore. I’m Interested in Ethical Hacking and Programming. I’ve have take up an internship at…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bypassing 2FA With Cookies

https://cdn-images-1.medium.com/max/600/1*olr_E6r-fiVedUIyh3pNYg.png
Two-factor authentication (2FA) is a specific type of multi-factor authentication (MFA) that strengthens access security by requiring two…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DC-4 VM WalkThrough

https://cdn-images-1.medium.com/max/716/0*ODdMgQHywig85BrG
Makineyi indirebilirsiniz.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Qué es el malware?

https://cdn-images-1.medium.com/max/800/1*OWCel0y6ppxgG6URK_FbRg.jpeg
La palabra malware es una contracción de “software malicioso”, que en inglés significa código de programa malicioso. El malware cubre una…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video