How I managed to make a DDoS attack by exploiting a company’s service — Bug Bounty
https://medium.com/@mrempy/how-i-managed-to-make-a-ddos-attack-by-exploiting-a-companys-service-bug-bounty-bfd25a178b45?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was…Continue reading on Medium » (https://medium.com/@mrempy/how-i-managed-to-make-a-ddos-attack-by-exploiting-a-companys-service-bug-bounty-bfd25a178b45?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Misconfiguration OAuth Lead Account Takeover #Part 2
https://human-error.medium.com/misconfiguration-oauth-lead-account-takeover-part-2-8be6377e24f2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2Continue reading on Medium » (https://human-error.medium.com/misconfiguration-oauth-lead-account-takeover-part-2-8be6377e24f2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Trio of Vendors Offer Free Services to Organizations at Risk of Russian Cyberattacks

CrowdStrike, Cloudflare, and Ping Identity have teamed up with tools and services for the healthcare, power, and water industries as a way to quickly bolster their security on several fronts.

Account Enumeration Hacking Tool Created By Python For Finding Username Of Your Target Websits…

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and…Continue reading on Medium »
Read more...

How I managed to make a DDoS attack by exploiting a company’s service — Bug Bounty

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was…Continue reading on Medium »
Read more...

Misconfiguration OAuth Lead Account Takeover #Part 2

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2Continue reading on Medium »
Read more...

Account Enumeration Hacking Tool Created By Python For Finding Username Of Your Target Websits…

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and…Continue reading on Medium »
Read more...

How I managed to make a DDoS attack by exploiting a company’s service — Bug Bounty

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was…Continue reading on Medium »
Read more...

Misconfiguration OAuth Lead Account Takeover #Part 2

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2Continue reading on Medium »
Read more...

Blind-XSS Disappointment

Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator.Continue reading on Medium »
Read more...

hacking: security in practice
Enable telnet client

Is it a security risk to turn on telnet client to check if a port is open on windows 10?

submitted by /u/splitgreen
[link] [comments]

hacking: security in practice
SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store. The list of malicious apps, all of which were updated on February 10, have been collectively installed about 57,000 times to date

https://external-preview.redd.it/lBcPR6FNtkHGWzds6rLrsTw840Y61rVzJdMSvGlLB0k.jpg?width=640&crop=smart&auto=webp&s=b75db2319a04957eda98da743e2a5c55d9cf87cd submitted by /u/Late_Ice_9288
[link] [comments]

hacking: security in practice
How would you visualize hacking?

Hacking I know is very technical, and hard to visualize. What I mean by that, how can you put hacking in way where you can visually understand what's going on really, but without taking away most of the meaning. For example, let's take a brute force attack, how would you turn it into a visual?

submitted by /u/tpyrcd
[link] [comments]

hacking: security in practice
Debrid-sites...

Does anyone know any good FREE sites for "premium file downloads" such as keep2share or bitflash.cc, linksnappy looks good but it's a paid site.

submitted by /u/Weoli1
[link] [comments]

hacking: security in practice
Remote hack and delete applications

Is there a way I could do a remote hack and once in secretly delete apps on Win. 10

submitted by /u/Heston_TEA
[link] [comments]

hacking: security in practice
Professional Opinion Required, password was taken in data breach, curious if anyone knows the potential endgame of the hacker

My mothers password which unfortunately was used for multiple accounts for various things was breached. The hacker got into yahoo mail, amazon, Facebook, LinkedIn, and PayPal from what I can see so far. I've already gone ahead and changed every password, made the accounts tighter with two step verification and what not, as well as closed all open sessions for each account and logged them out. The hacker messaged every single connection on linked, and would of had access to all of the previously sent emails. I have the hackers IP from multiple websites and it seems to be Nigerian, As well as a phone number and email used.

Is there any red flags here, with all the LinkedIn messages, as well as some pretty sensitive websites. Should I be looking out for something more, or is what I've done enough? I'm a first year software engineer so I'm definitely capable with technology and have a strong sense with computers. Seems odd to me a scammer would message all her contacts, maybe with the info he received there are more attacks to come?

​

Any opinion would be much appreciated, Thanks so much.

submitted by /u/LeafyQueefy
[link] [comments]