Hacking on Medium
TryHackMe: Kenobi

https://cdn-images-1.medium.com/max/600/1*_RwlH99OQZGZtCpRQsd0CA.jpeg
Task 1: Deploy the vulnerable machine

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles

https://cdn-images-1.medium.com/max/1335/1*txwAxko-DnEO37W3t8Z4FQ.png
Hello friends :) 
I am happy to write a blog again after finding an Insecure Direct Object Reference Vulnerability in Drexel University…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resources & Learning Paths collections (Part-2)

https://cdn-images-1.medium.com/max/1280/0*W3Z5B9Xsg9QGaJuJ
This is Part 2 where we talk about Github Repositories which helps you to know about the Cybersecurity and other stuffs.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Build a SOC LAB
https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/

Hey guys! I have a project where i need to build a LAB for a SOC (security operation center) with infra as code (vagrant) and then launch some attacks on it and investigate their behavior's with Splunk. So i would like from peoples that already worked or have expérience in this, if you Can recommand some good ressources that will help me see some examples of SOC architectures that i Can deploy and some interesting attacks to investigate. Cheers submitted by /u/Adel_Maestro (https://www.reddit.com/user/Adel_Maestro)
[link] (https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/) [comments] (https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/)

___________________________
@hacking_Attack
@Hacking_Video

XSS - The LocalStorage Robbery
https://shahjerry33.medium.com/xss-the-localstorage-robbery-d5fbf353c6b0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/xss-the-localstorage-robbery-d5fbf353c6b0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Matching Bug Bounty Program: Renewal and Expansion
https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutants recently approved the renewal and expansion of the Immunefi matching bug bounty program by a unanimous vote. Funding for the…Continue reading on Nexus Mutual » (https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutual Community Renews Bounty Matching Program With $600k War Chest
https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Nexus Mutual community has just voted to continue its bug bounty matching program with Immunefi and increase the size of the war chest…Continue reading on Immunefi » (https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 05 Cross-Site-Scripting (XSS) — Part 3
https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Medium folk, I hope you enjoyed our previous articles, so now on this article You’ll learn about Types of Cross-Site-Scripting…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034
https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034 Local privilege escalationContinue reading on Medium » (https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding the difference

Can anyone explain to me the difference between auxiliary modules and exploits ? They both seem to do the same for me. I can't understand the difference.

submitted by /u/JeppNeb
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Privilege Escalation methodologies??

I've done a lot of CTFs and I'd always do the foothold part in my team but I was thinking about looking into priv esc. So I tried doing an easy level box on vulnhub all by myself. Got a user shell in first 15 mins but i blanked out on the escalation part.

I tried using linpeas but it's too fussy and regardless tried checking the files and folders it points out. Still nothing.

What's the best way to or let's say a traditional method to look for loopholes and escalate privileges? Or what parameters should you look for (eg. The current Linux distro or version) ? And what should you know prior to priv esc except a Linux CLI?

submitted by /u/h4cks1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video