hacking: security in practice
Nmap scanning nearly all ports as open

I've downloaded a box from a random Twitter post. I got it running in virtualbox and when i Nmapped it, it's showing almost all ports as open. Thinking that it might be a joke, I assumed that I could connect to any service. So I tried ftp,telnet,ssh,etc. and on all of the services.

But everytime, no matter what service you try to connect to, it says "Connection reset". Even the goddamn http service.

I further considered this to be an error and I reset the machine and booted it again but still the same problem.

I looked it up and found that this was either Portspoofing or I'm hitting a well configured IDS/Firewall.

How do I get around this problem? More specifically, how do I automate the process of verification of the services and see if it's really up?

Thanks in advance.

submitted by /u/h4cks1n
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Upgrades for Spring Framework Have Stalled

Upgrading and fixing the vulnerability in the Spring Framework doesn't seem to have the same level of urgency or energy as patching the Log4j library did back in December

Creating Your Own Telegram Bot For Recon Bug Bounty

Hello Friends this is my fourth blog regarding bug huntingContinue reading on Medium »
Read more...

Creating Your Own Telegram Bot For Recon Bug Bounty
https://santoshdbobade.medium.com/creating-your-own-telegram-bot-for-recon-bug-bounty-8c3fd3dfcbcf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Friends this is my fourth blog regarding bug huntingContinue reading on Medium » (https://santoshdbobade.medium.com/creating-your-own-telegram-bot-for-recon-bug-bounty-8c3fd3dfcbcf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Change Any User Profile Details on Disney
https://rashahacks.medium.com/change-any-user-profile-details-on-disney-837ab3a5d1bb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Walt Disney Company started its program on Hackerone in March 2022.Continue reading on Medium » (https://rashahacks.medium.com/change-any-user-profile-details-on-disney-837ab3a5d1bb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Change Any User Profile Details on Disney

The Walt Disney Company started its program on Hackerone in March 2022.Continue reading on Medium »
Read more...

Hacking on Medium
Introduction || Ethical Hacking — Part 1.1

https://cdn-images-1.medium.com/max/1282/1*DMH9Z9rTErtFBo2YID_CTQ.gif
If you have not read the first part check it here:
https://viruszzwarning.medium.com/the-basic-idea-ethical-hacking-series-1-6ea4c3799993

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: [Day 14] Networking Dev(Insecure)Ops

https://cdn-images-1.medium.com/max/1920/1*psaTaSfd9sQyajFeYTLO-w.png
How many pages did the dirb scan find with its default wordlist?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Change Any User Profile Details on Disney

https://cdn-images-1.medium.com/max/600/0*PqZzaukAh4ZdOow9
The Walt Disney Company started its program on Hackerone in March 2022.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

OSWE Review 2022
https://www.reddit.com/r/Pentesting/comments/u4sp0i/oswe_review_2022/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/pythonpsycho1337 (https://www.reddit.com/user/pythonpsycho1337)
[link] (https://tpetersonkth.github.io/2022/04/16/OSWE-Review.html) [comments] (https://www.reddit.com/r/Pentesting/comments/u4sp0i/oswe_review_2022/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What’s the difference between an analytics company and a advertising company?

submitted by /u/OptimalBeans
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is a reflected xss attack a real vulnerability?

I'm novice to web security and trying to figure out some things. I stumbled upon xss vulnerabilities and checked the reflected xss. This made me wonder if this is a real threat for a site, as I haven't found any way to efficiently exploit it.

submitted by /u/Tonyb0y
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Friend claims his iphone was controlled by someone

A friend of mine called me (from a different phone than his own) claiming he just had witnessed his iphone doing crazy things on its own. It was apparently opening apps and trying to login to stuff and all kinds of weird stuff. He told me that he could only watch it happen and couldn’t even power off the phone. Apparently he he saw a mouse cursor navigating the home screen too.

Is this even possible?

submitted by /u/RealOldGamer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
This is a long shot...

I'm desperate to recover this old YouTube video and willing to put up a reward. It's been deleted and shouldn't really have been posted anywhere else, possibly Facebook. Just delete this post if I broke the rules or anything sorry.

submitted by /u/Far-Mouse9084
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to find a site that changed its URL if you know the old one?

I don't know if this is the right place to ask this but I'm curious if it's possible to find a site that had a previous URL but they changed it or is that not possible? Assuming you know nothing else but the old URL.

submitted by /u/genisisk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video