hacking: security in practice
Apply for a 2022 Linux Foundation Training (LiFT) Scholarship by April 30

submitted by /u/cybersocdm
[link] [comments]

hacking: security in practice
What to do in the meantime while working for my certificates/college degrees?

So, I'm a fucking depressed loser and I'm 19 still trying to get my high school diploma. I'm pretty much NEET status, I spend most of my time playing with my laptop like a neckbeard whenever I'm not at school.

Lately I've been looking at bug bounties as a way to make money because every cyber job you need 1. A high school diploma or GED which I don't have right now or 2. Certificates or college degrees... which I don't have. The problem is, I'm really bad at web application testing/analysis. I'm more of a "close combat" type of guy, I specialize in getting into networks and social engineering.

Of course, the obvious answer is start studying web application analysis. But what do I do in the meantime? Should I work at fast food since I don't have the job requirements yet? Should I stop wasting time, drop out and get my GED? I really need help. I'm fucking lost and about to go full blackhat.

submitted by /u/unknovvn_wolfkiller
[link] [comments]

hacking: security in practice
Is it possible to hide my IP when hosting servers?

Hello hackers!

I got a question

Can I somehow hide my IP when hosting servers.

Basically, I got an Minecraft Server running on my local PC (port fowarded, ddns set up, etc...), and can I somehow get an IP that can connect to my server, without leaking my actual IP?

I tried the cloudflares proxy, but for it to work i need to pay, is there some sort of a free alternative?

Thanks

submitted by /u/StefanGamingCJ
[link] [comments]

Bug Bounty Tip 01
https://medium.com/@sherlock297/bug-bounty-tip-01-989b820ec40a?source=rss------bug_bounty-5

Hello all, today will see one basic bug bounty tip or bug :Continue reading on Medium » (https://medium.com/@sherlock297/bug-bounty-tip-01-989b820ec40a?source=rss------bug_bounty-5)

Bug Bounty Tip 01

Hello all, today will see one basic bug bounty tip or bug :Continue reading on Medium »
Read more...

Resolving System Service Numbers using the Exception Directory - @MDSecLabs
https://www.reddit.com/r/redteamsec/comments/u72xxr/resolving_system_service_numbers_using_the/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.mdsec.co.uk/2022/04/resolving-system-service-numbers-using-the-exception-directory/) [comments] (https://www.reddit.com/r/redteamsec/comments/u72xxr/resolving_system_service_numbers_using_the/)

Hacking on Medium
HTB — Love

https://cdn-images-1.medium.com/max/700/1*hBotKN50k29mXDecEfHcYw.png
Easy windows box created by Pwnmeow, with some interesting vulnerabilities, such as SSRF and elevated misconfiguration on windows.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybersecurity for Higher Education

https://cdn-images-1.medium.com/max/2600/0*wkNurXwbs4N0pLqV
The COVID-19 pandemic changed our reality and the manner in which organizations work decisively. It has additionally achieved a polar…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 5 Easy Methods by Your WhatsApp Data Can Be Hacked

https://cdn-images-1.medium.com/max/2600/1*I5dw8LLs6v8s-SuYBjqSKw.jpeg
In today’s era, WhatsApp has become a premium method of communication while other ways of talking to each other rather than physical…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

My Pentest Log -15- (HTML İnjection in Wordpress)

Greetings Everyone from Thrakion,Continue reading on Medium »
Read more...

My Pentest Log -15- (HTML İnjection in Wordpress)
https://hcibo.medium.com/my-pentest-log-15-html-i%CC%87njection-in-wordpress-ba9fb4bf0582?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings Everyone from Thrakion,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-15-html-i%CC%87njection-in-wordpress-ba9fb4bf0582?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

ADReaper - A Fast Enumeration Tool For Windows Active Directory Pentesting Written In Go
http://www.kitploit.com/2022/04/adreaper-fast-enumeration-tool-for.html

___________________________
@hacking_Attack
@Hacking_Video

ADReaper is a tool written in Golang which enumerate a Active Directory (https://www.kitploit.com/search/label/Active%20Directory) environment with LDAP queries within few seconds.
Installation You can download precompiled executable binaries for Windows/Linux from latest releases (https://github.com/AidenPearce369/ADReaper/releases/tag/ADReaper) Install from source To build from source, clone the repo and build it with GO $ git clone https://github.com/AidenPearce369/ADReaper
$ cd ADReaper/
$ go build Usage ADReaper performs enumeration (https://www.kitploit.com/search/label/Enumeration) with various commands that performs LDAP queries with respective to it group policy objects spn - to list service principal objects admin-priv - to list AD objects with admin privilege domain-trust - to list domain trust ou - to list organizational units ms-sql - to list MS-SQL servers -dc string Enter the DC -password string Enter the Password -user string Enter the Username ">monish@chimera:/ADReaper$ ./ADReaper
-command string
Command to run

users - to list all users
user-logs - to list user session activities
never-loggedon - to list users never logged on
groups - to list all groups with members
computers - to list all computers
dc - to list domain controllers
gpo - to list group policy objects
spn - to list service principal objects
admin-priv - to list AD objects with admin privilege
domain-trust - to list domain trust
ou - to list organizational units
ms-sql - to list MS-SQL servers

-dc string
Enter the DC
-password string
Enter th e Password
-user string
Enter the Username
To-Do Looking forward for contributors to build the next version Planned features, Custom LDAP querying Filters with existing commands PrivEsc checker LAPS enumeration Kerberoasting Local admin access (https://www.kitploit.com/search/label/Access) hunting Registry analysis If interested, ping me :)

Download ADReaper (https://github.com/AidenPearce369/ADReaper)

___________________________
@hacking_Attack
@Hacking_Video

Is watching something online and downloading it the same?
https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/

is there a difference between downloading something with idm and watching online? I mean any technicly difference. Not just the internet usage. thanks in advance ^^ submitted by /u/Silver_Duck9800 (https://www.reddit.com/user/Silver_Duck9800)
[link] (https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/) [comments] (https://www.reddit.com/r/Pentesting/comments/u753ep/is_watching_something_online_and_downloading_it/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to track a redditor's location just using their normal activity (posting, commenting, etc)?

submitted by /u/I0719
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Grey Hack (Game/ Simulator) realistic?

What are the main differences from reality?

submitted by /u/Yesn05
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How to Interpret the EU's Guidance on DNS Abuse Worldwide

From higher standards in top-level domains to increased adoption of security controls, stepped-up measures can help fight DNS abuse and protect Web domains.