Summary :Continue reading on Medium » (https://shahjerry33.medium.com/xss-the-localstorage-robbery-d5fbf353c6b0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Matching Bug Bounty Program: Renewal and Expansion
https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutants recently approved the renewal and expansion of the Immunefi matching bug bounty program by a unanimous vote. Funding for the…Continue reading on Nexus Mutual » (https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutual Community Renews Bounty Matching Program With $600k War Chest
https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Nexus Mutual community has just voted to continue its bug bounty matching program with Immunefi and increase the size of the war chest…Continue reading on Immunefi » (https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 05 Cross-Site-Scripting (XSS) — Part 3
https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Medium folk, I hope you enjoyed our previous articles, so now on this article You’ll learn about Types of Cross-Site-Scripting…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034
https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034 Local privilege escalationContinue reading on Medium » (https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding the difference

Can anyone explain to me the difference between auxiliary modules and exploits ? They both seem to do the same for me. I can't understand the difference.

submitted by /u/JeppNeb
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Privilege Escalation methodologies??

I've done a lot of CTFs and I'd always do the foothold part in my team but I was thinking about looking into priv esc. So I tried doing an easy level box on vulnhub all by myself. Got a user shell in first 15 mins but i blanked out on the escalation part.

I tried using linpeas but it's too fussy and regardless tried checking the files and folders it points out. Still nothing.

What's the best way to or let's say a traditional method to look for loopholes and escalate privileges? Or what parameters should you look for (eg. The current Linux distro or version) ? And what should you know prior to priv esc except a Linux CLI?

submitted by /u/h4cks1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Why is my compiler generating so much crap?

Hi, Not sure if this is the right sub but trying my shot here, as r/ReverseEngineering doesn't allow text posts.

I am a beginner in reverse engineering and I'm using VS to compile C/cpp and then open the exes in ghidra to learn from my code.

The problem I'm encountering is that it seems the compiler adds a shitton of library functions, mostly related to C runtime such as __scrt_acquire_startup_lock, __scrt_is_ucrt_dll_in_use and more. Over 99% of the resulting code is just bullcrap, not to mention it really messes up the analysis workflow, making it much harder to find my main() from the entry point method.

Now, I've seen a lot of reverse challenges in the past and didn't encounter this. How do I go about compiling code that is readable via disassesmbly?

Thanks :)

submitted by /u/Altiverses
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Restricted mode on a school laptop

So my school gave me a laptop and it is restricted by an administrator, anyone know how to disable it? Thanks

submitted by /u/Admirable_Scholar163
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Build a SOC LAB

Hey guys!

I have a project where i need to build a LAB for a SOC (security operation center) with infra as code (vagrant) and then launch some attacks on it and investigate their behavior's with Splunk.

So i would like from peoples that already worked or have expérience in this, if you Can recommand some good ressources that will help me see some examples of SOC architectures that i Can deploy and some interesting attacks to investigate.

Cheers

submitted by /u/Adel_Maestro
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Remote access microphone. Windows 10. Full domain access.

Hi, I would like to access a remote pc microphone, the pc is running windows 10 and I have full domain elevations. Any ideas ? ( without any software installed on the target machine )

submitted by /u/morcove
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

NimPackt-v1 - Nim-based Assembly Packer And Shellcode Loader For Opsec And Profit
http://www.kitploit.com/2022/04/nimpackt-v1-nim-based-assembly-packer.html

___________________________
@hacking_Attack
@Hacking_Video