The 13 Best Vulnerable Web Applications & Vulnerable Websites for Testing

This list contains a variety of vulnerable websites, vulnerable web apps, battlegrounds and wargames communities.Continue reading on Medium »
Read more...

Google Dorks and a SQL Dump

A odd Google Dorking method I used to successfully find a sql dump.Continue reading on Medium »
Read more...

Hacking on Medium
Google Dorks and a SQL Dump

https://cdn-images-1.medium.com/max/1920/1*aO_YoA9vdrDHse001LKkTQ.jpeg
A odd Google Dorking method I used to successfully find a sql dump.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[Vulnhub] FristiLeaks 1.3 Write-up

https://cdn-images-1.medium.com/max/600/1*9jQYZEhxqytuxWKEEgkGkw.png
this article is the walkthrough of the machine firstileaks of vulnhub.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Another Day, Another Reentrancy Attack

https://cdn-images-1.medium.com/max/820/1*s_4B5vPmyvzy2DrZ3FT6Gg.png
Hundred Finance Hack Analysis.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Sensitive Information disclosure through unrestricted Directories
https://medium.com/@vamshivaran110/sensitive-information-disclosure-through-unrestricted-directories-82b720994f36?source=rss------bug_bounty-5

Hello Hackers and Security community..Continue reading on Medium » (https://medium.com/@vamshivaran110/sensitive-information-disclosure-through-unrestricted-directories-82b720994f36?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Sensitive Information disclosure through unrestricted Directories

Hello Hackers and Security community..Continue reading on Medium »
Read more...

Sensitive Information disclosure through unrestricted Directories

Hello Hackers and Security community..Continue reading on Medium »
Read more...

My First Blind SQL Injection
https://medium.com/@vamshivaran110/my-first-blind-sql-injection-7db4b5e5c66d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Hackers and security community..Continue reading on Medium » (https://medium.com/@vamshivaran110/my-first-blind-sql-injection-7db4b5e5c66d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My First Blind SQL Injection

Hello Hackers and security community..Continue reading on Medium »
Read more...

hacking: security in practice
Knowing how a ddos attack works, how is it possible to block it?

I know ciber security companies know methods to block these kind of attacks by redirecting all the useless data to a remote memory but how does it work?

submitted by /u/Pollokonkeso
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anyone knows how to run a reverse shell in COBOL?

Hello!

I'm working on a internal infrastructure pentest, and we've just discovered a vector of attack where we may be able to run COBOL scripts hopefully under SYSTEM. However, none of us has any experience with COBOL, so I figured that asking for help here could be faster than figuring it out, since google results for "COBOL reverse shell" didn't help. And, I think that it's actually a pretty cool question/exercise which I don't suppose happens often.

So, any COBOL experts here that could tell us if it's even possible (so we don't waste time trying something that can't be done), and could please point us in the right direction?

When COBOL was a thing, I wasn't even alive and I've only heard horror stories about it, so I'm afraid what we're getting ourselves into :D I will start my own research in the meantime, but any answer would help me a lot!

Thank you!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Sensitive Information disclosure through unrestricted Directories

Hello Hackers and Security community..

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Eternal Blue — Lab and Process Report

https://cdn-images-1.medium.com/max/824/1*6lhVKJfHxXLL4eXwLefAiQ.png
Lab goals (I forgot to take a screenshot of one section before I answered them all, so I’ll omit it in case you don’t wan to see the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My First Blind SQL Injection

https://cdn-images-1.medium.com/max/767/1*oUYINf0XN6NxTWOqb0mf-Q.png
Hello Hackers and security community..

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hundreds of GoDaddy-hosted sites backdoored in a single day

https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Hundreds of GoDaddy-hosted sites backdoored in a single dayPost Views: 58
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/02/Patreon.png
Reading Time: 2 Minutes
Internet security analysts have spotted a spike in backdoor infections on WordPress websites hosted on GoDaddy’s Managed WordPress service, all featuring an identical backdoor payload.
The case affects internet service resellers such as MediaTemple, tsoHost, 123Reg, Domain Factory, Heart Internet, and Host Europe Managed WordPress.

The discovery comes from Wordfence, whose team first observed the malicious activity on March 11, 2022, with 298 websites infected by the backdoor within 24 hours, 281 of which were hosted on GoDaddy.
https://www.bleepstatic.com/images/news/u/1220909/Diagrams/diagram(5).jpg
Old template spammerThe backdoor infecting all sites is a 2015 Google search SEO-poisoning tool implanted on the wp-config.php to fetch spam link templates from the C2 that are used to inject malicious pages into search results.

The campaign uses predominately pharmaceutical spam templates, served to visitors of the compromised websites instead of the actual content.
See Also: Complete Offensive Security and Ethical Hacking Course
The goal of these templates is likely to entice the victims to make purchases of fake products, losing money and payment details to the threat actors.

Additionally, the actors can harm a website’s reputation by altering its content and making the breach evident, but this doesn’t seem to be the actors’ aim at this time.

This type of attack is harder to detect and stop from the user’s side due to this taking place on the server and not on the browser, and as such, local internet security tools won’t detect anything suspicious. Supply chain attack?The intrusion vector hasn’t been determined, so while this looks suspiciously close to a supply chain attack, it hasn’t been confirmed.

Bleeping Computer has contacted GoDaddy to find out more about this possibility, but we have not heard back yet.

Notably, GoDaddy disclosed a data breach in November 2021 that affected 1.2 million customers and multiple Managed WordPress service resellers, including the six mentioned in the introduction.
See Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH That breach involved unauthorized access to the system that provisions the company’s Managed WordPress sites. As such, it’s not far-fetched to suggest that the two occurrences might be linked.

In any case, if your website is hosted on GoDaddy’s Managed WordPress platform, make sure to scan your wp-config.php file to locate potential backdoor injections.
https://www.bleepstatic.com/images/news/u/1220909/Code%20and%20Details/backdoor(1).png
Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com[...]

___________________________
@hacking_Attack
@Hacking_Video

/wp-content/uploads/2022/03/79ohvicqaKcVP9KT2mDdTH-90x90.jpg Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw1 day ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Lapsus-group-has-hacked-Ubisoft-as-well-90x90.jpg Ubisoft has confirmed it was hacked by Lapsus$ group2 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/raccoon-stealer-90x90.jpg Raccoon Stealer Crawls Into Telegram3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/kali-bright-90x90.jpg Kali Unkaputtbar – a new feature on Kali Linux5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/wolf-in-sheps-clothing-2-scaled-e1646927438585-90x90.jpeg Malware Posing as Russia DDoS Tool Bites Ukraine Hackers6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/FTDZNGKMCJPIDKR5RE7MSLIMB4-scaled-90x90.jpg Agencies in Ukraine targeted with MicroBackdoor malware1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/NINTCHDBPICT000622539771-90x90.png Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/linux-kernel-double-free-vulnerability-90x90.png New Linux bug gives root on all major distros, exploit released1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/firefox-90x90.jpg Mozilla Firefox 97.0.2 fixes two actively exploited zero-day bugs1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/small-business-internet-security-90x90.jpg Google WAF bypassed via oversized POST requests2 weeks ago
The post Hundreds of GoDaddy-hosted sites backdoored in a single day first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

My First Blind SQL Injection

Hello Hackers and security community..Continue reading on Medium »
Read more...