hacking: security in practice
Bug bounty hunting step by step (practical) resources?

I've been reading books and doing courses on penetration testing and bug hunting for a while, but I find most of them point to CTFs as the place to practice a hands-on approach. I've been doing that but can't help but notice a big difference between doing CTFs and real-world bug hunting. Only a handful of them are web apps (which I will be focusing on) and the vulnerabilities don't seem "real" enough. Feels like I have all the pieces of the puzzle and the picture on the box, but I don't know the methodology that people follow to complete them.

I know that I should just jump head first into HackerOne but I would like to see someone actually working on a real bounty and try to get a feel for the process. As an example I'm looking for something like a longer version of this video by InsiderPhd.

Any tip on a book/video/course/etc would be greatly appreciated, thanks in advance!

submitted by /u/Vanthian
[link] [comments]

Dark Reading: Attacks/Breaches
Compromised Microsoft Exchange Server Used to Host Cryptominer

Researchers say an unknown attacker is targeting vulnerable Exchange Servers with a payload hosted on a compromised Exchange Server.

Dark Reading: Attacks/Breaches
DNS Vulnerabilities Expose Millions of Internet-Connected Devices to Attack

Researchers uncover a fresh set of nine vulnerabilities in four TCP/IP stacks that are widely used in everything from powerful servers and firewalls to consumer IoT products.

Any news of Georgia’s 2nd edition to Intro to Hacking?
https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/

<!-- SC_OFF -->Google search showed she tweeted in April 2019 about creating a second edition. Been 2 years, just wanted to know if anyone knows anything - couldn’t find it online <!-- SC_ON --> submitted by /u/dokiebrne (https://www.reddit.com/user/dokiebrne)
[link] (https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/) [comments] (https://www.reddit.com/r/Pentesting/comments/mqffb0/any_news_of_georgias_2nd_edition_to_intro_to/)

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY GRADES QULIOUSHACKER@GMAIL.COM

I NEED HACKER TO CHANGE MY UNIVERSITY GRADES
Hackers are breaking boundaries and connecting the world within a short distance. Exploiting…

Continue reading on Medium »

hacking: security in practice
Just wanted to know is this the right pathway ?

So i have been planning to pursue my career in cybersecurity but ik these kali linux tutorials are literally nothing if i dont have proper core CSE knowledge. So i checked from youtube and I also made a list regarding the things that are very essential to learn pen testing.

Here is my list :

Operating systems

Networking + Protocols + Internet

DBMS

HTML + JS + php+Java+ASP (.net)

learn Linux

Command Line

Python

Theory of Computation

Books - (later stage)

Well i have knowledge of Java, Python and a bit of HTML. Now im a bit worried as will this list cover the main parts ?

Can anyone give me some advice ?

Thanks for reading

submitted by /u/Kratos3301
[link] [comments]

Hacking on Medium
How To Become a Good Hacker from beginner?

-The Fundamental Skills

Continue reading on Medium »

Hacking on Medium
Another manufacturer falls victim to ransomware | CyberNews | April 2021

https://cdn-images-1.medium.com/max/665/1*cRcamCvtoWIPgQSfoKMs6g.png
Sierra Wireless is a Canadian wireless communications equipment company, specializing in IoT. It suffered a ransomware attack in March…

Continue reading on Medium »

Hacking on Medium
Upstox experiences a data breach | CyberNews

https://cdn-images-1.medium.com/max/1280/1*heVF88saR2uxfonheHK5mA.png
Another day, another breach, this time its with an Indian Online Share/Stock Trading app Upstox, leading to exposure of sensitive…

Continue reading on Medium »

Hacking on Medium
MangaDex is down | CyberNews | March 2021

https://cdn-images-1.medium.com/max/665/1*Veq0eaRY03CW44xDBYFA8g.png
MangaDex, a place where people can read manga comics, has suffered a cyber attack, designed to cause disruption and is down until further…

Continue reading on Medium »