hacking: security in practice
Does BEEF attack a browser or browser session?

Say use clicks on link. If it then redirects to Gmail obviously it will arose suspicions, but if the Gmail page only pops up when the user opens the browser themselves, they would be much more likely to open it.

submitted by /u/bee4534
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What software do hackers use?

Hello subreddits! I had a question: what programming language do hackers use (c +, phyton and so on.)

​

This question has probably been asked here 1000 times. sry;D

submitted by /u/iapplemac
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
BirDuster - A Multi Threaded Python Script Designed To Brute Force Directories And Files Names On Webservers

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXDsAeqap8mk8vDVDaPxCPEWKXYDHmU4RWURRLtQhXX8z2Smf3UcMJbM_tA1Dqn3wtfTXaVF9czzHgwjj55scvPVWr5-iigaLmcJQiIB5PmunfACsGFweoEUwnvVlBmAqLa1VE5AzdF5SnUndkGFrMG5E7_rz06VPpLXJaXe883t8I8Yyx3JU5gLC8/w640-h416/BirDuster.png
BirDusteris a Python based knockoff of the original DirBuster.

BirDusteris a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within.
Installation

Use PIP: pip3 install --user BirDuster

Clone source:

git clone https://www.github.com/ytisf/BirDuster
cd BirDuster
pip3 install --user -r requirements.txt
python3 BirDuster.py --help

Usage

BirDusterhas the following flags and options (which you can see with the -hflag):

* -h/--help: Show help and exit.
* -v,-vv,-vvv/--verbosity: Verbosity level.
* -p/--port: Port to use while dirbusting. Default 80/443.
* -P/--pfile: If you want to test several ports just write them to a file with newlines.
* -t/--threads: Amount of concurrent threads. Default is 15.
* -o/--output: Output CSV of responses. Default is domain_output.csv.
* -l/--dlist: Directory list file. Default is dir_list.txt.
* -w/--writereponse: Will write HTTP/S responses to files. Default is False.
* -i/--ignorecertificate: Ignore SSL certificate errors. Default is False.
* -u/--useragent: User-Agent to use. Default is random user-agent.
* --ssl: Use SSL or not. -iflag will automatically turn on SSL.
* --timeout: Change default socket timeout. Default is 3 seconds.

usage: dirbus.py [-h] [-v] [-p PORT] [-P PFILE] [-t THREADS] [-o OUTPUT]
[-l DLIST] [-w] [-i] [-u USERAGENT] [--ssl]
[--timeout TIMEOUT]
domain

positional arguments:
domain domain or host to buster
Download BirDuster
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

[case study#1] IDOR vulnerability allows access to user’s personal data

What is IDOR?Continue reading on Medium »
Read more...

[case study#1] IDOR vulnerability allows access to user’s personal data
https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What is IDOR?Continue reading on Medium » (https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
50% of Orgs Rely on Email to Manage Security

Even with dedicated identity management tools at their disposal, many companies — smaller ones especially — are sticking with email and spreadsheets for handling permissions.

Dark Reading: Attacks/Breaches
RF Technologies Releases Safe Place Staff Protection for Healthcare Settings

RFT is expanding the Safe Place hospital market security system to include staff protection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

MDR Sentinel expands TorchLight’s leading managed detection and response (MDR) services with turnkey SIEM and SOAR capabilities from Microsoft; TorchLight also announces it attains elite Microsoft Gold Partner Status

___________________________
@hacking_Attack
@Hacking_Video

GitHub - socket-toolkit (Basic and in early stages of development, pull requests are encouraged!)
https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/haydendevs (https://www.reddit.com/user/haydendevs)
[link] (https://github.com/haydenzeller/socket-toolkit) [comments] (https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TLDR — How to Get Out of Work by Hijacking the Gmail App at Work

https://cdn-images-1.medium.com/max/2600/0*H1xdO5KcmNa--YQ2
Or tell your boss you’ll implement a fix for the StrandHogg vulnerability once Google does it themselves

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse Social Media Account Lookup

Hey, I was just wondering if anyone knows of an effective reverse account lookup for social media. I have looked around and most sites have paywalls or are scams. I don't mind paying for a services, but I wasn't to be sure to be paying for the best option.

Sorry if there is already a post about this. I looked at this the following post but most of the sites listed here are no longer up. https://www.reddit.com/r/catfish/comments/ibalyt/are_there_any_search_engines_that_search_social/

Thanks in advance!

submitted by /u/primitiveproponent
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta hacked

My instagram acct was hacked. They somehow changed the email, so they have full control over the acct... anyway to get it back Or she gone?

submitted by /u/Reasonable_Lecture_5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is it possible to change the value on a gift card.

Ever went to the store and bought a gift card for a friend or family member? Maybe like a Starbucks or Walmart and sent it to them as a present?

I always wondered if one could (in theory) somehow edit the value of these little cards.

For example, let's say you buy one and put $50 on it at the store. Can you use a card reader/writer, software and a laptop to somehow put an extra digit on the card itself? 🤔

Is it possible?? Any ideas? Plz. Thx.

submitted by /u/XANAX_90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video