Hello everyone, my name is Кристиян Радев but many of you may know me as CypherTheThird. I have been studying ethical hacking for a while…Continue reading on Medium » (https://medium.com/@cypherthethird/cross-site-scripting-xss-for-dummies-9a7717bbd002?source=rss------bug_bounty-5)

Design Flaw — A Tale of Permanent DOS
https://medium.com/@AkashHamal0x01/design-flaw-a-tale-of-permanent-dos-a9ef05181083?source=rss------bug_bounty-5

This is my first writeup here on medium. Hope you enjoy it :). Feedbacks are always appreciated!Continue reading on Medium » (https://medium.com/@AkashHamal0x01/design-flaw-a-tale-of-permanent-dos-a9ef05181083?source=rss------bug_bounty-5)

Design Flaw — A Tale of Permanent DOS

This is my first writeup here on medium. Hope you enjoy it :). Feedbacks are always appreciated!Continue reading on Medium »
Read more...

Hacking on Medium
Cross Site Scripting (XSS) for Dummies

https://cdn-images-1.medium.com/max/600/1*sTILLGtopCaoLey87ibEvQ.jpeg
Hello everyone, my name is Кристиян Радев but many of you may know me as CypherTheThird. I have been studying ethical hacking for a while…

Continue reading on Medium »

hacking: security in practice
I made a unity mod manager for quickly and easily using dll mods

https://github.com/Headshot56/Unity-Mod-Manager
The demo video explains everything. You can use any mods that need DLLs and simply make a mods folder and drop the exe in. I will improve it in the future but I think it would be awesome if anyone wants to help.

submitted by /u/reddituser12345697
[link] [comments]

hacking: security in practice
Is it possible to Intercept a certain Windows program and monitor all it's network activities?

Let's take a VPN client for example. i want know what i happens when i hit that Connect button before it assigns me with that new IP address. i want to see which servers it communicates with and all it does in order to get that job done.

submitted by /u/Darwin105
[link] [comments]

MULTIPLE TIMES I HACKED DUKE UNIVERSITY WITH RXSS VULNERABILITY!!!

I’m Going to share one of my other Reflected Cross-Site Scripting Scenario.Continue reading on Medium »
Read more...

Odin - Central IoC Scanner Based On Loki
http://www.kitploit.com/2022/04/odin-central-ioc-scanner-based-on-loki.html

Odin is a central IoC scanner (https://www.kitploit.com/search/label/Scanner) based on Loki (https://github.com/Neo23x0/Loki) General Info This application Loki latest version and download it on all machines using a powershell (https://www.kitploit.com/search/label/PowerShell) script and run it then this app receives the respose from all machines and parse the feed in CSV form.
Requirements Python +3.5 PyQT5 psutil pyparsing zipfile Fetch Odin download and extract the latest version on Loki and start HTTP server to deliver the executable (Loki) to all machines.

Deploy Loki This step has ti be done manually using powershell script on a DC machine or suing domain admin account which the script deliver loki to all machines and start updating. The script is in Configurations tab and you can modiy the scipt as needed.

Collecting Start the listener (https://www.kitploit.com/search/label/Listener) then from the powershell script start Loki to search for IoCs and results will be sent from Loki to Odin

Parsing Collected logs will be parsed and can be exported as CSV file to be handled with something else like ELK.

Download Odin (https://github.com/Hamza-Megahed/odin)