What is IDOR?Continue reading on Medium » (https://medium.com/@infinis/case-study-1-idor-vulnerability-allows-access-to-users-personal-data-92d57f0fb805?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
50% of Orgs Rely on Email to Manage Security

Even with dedicated identity management tools at their disposal, many companies — smaller ones especially — are sticking with email and spreadsheets for handling permissions.

Dark Reading: Attacks/Breaches
RF Technologies Releases Safe Place Staff Protection for Healthcare Settings

RFT is expanding the Safe Place hospital market security system to include staff protection.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

MDR Sentinel expands TorchLight’s leading managed detection and response (MDR) services with turnkey SIEM and SOAR capabilities from Microsoft; TorchLight also announces it attains elite Microsoft Gold Partner Status

___________________________
@hacking_Attack
@Hacking_Video

GitHub - socket-toolkit (Basic and in early stages of development, pull requests are encouraged!)
https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/haydendevs (https://www.reddit.com/user/haydendevs)
[link] (https://github.com/haydenzeller/socket-toolkit) [comments] (https://www.reddit.com/r/Pentesting/comments/ur9ut7/github_sockettoolkit_basic_and_in_early_stages_of/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TLDR — How to Get Out of Work by Hijacking the Gmail App at Work

https://cdn-images-1.medium.com/max/2600/0*H1xdO5KcmNa--YQ2
Or tell your boss you’ll implement a fix for the StrandHogg vulnerability once Google does it themselves

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Reverse Social Media Account Lookup

Hey, I was just wondering if anyone knows of an effective reverse account lookup for social media. I have looked around and most sites have paywalls or are scams. I don't mind paying for a services, but I wasn't to be sure to be paying for the best option.

Sorry if there is already a post about this. I looked at this the following post but most of the sites listed here are no longer up. https://www.reddit.com/r/catfish/comments/ibalyt/are_there_any_search_engines_that_search_social/

Thanks in advance!

submitted by /u/primitiveproponent
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Insta hacked

My instagram acct was hacked. They somehow changed the email, so they have full control over the acct... anyway to get it back Or she gone?

submitted by /u/Reasonable_Lecture_5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is it possible to change the value on a gift card.

Ever went to the store and bought a gift card for a friend or family member? Maybe like a Starbucks or Walmart and sent it to them as a present?

I always wondered if one could (in theory) somehow edit the value of these little cards.

For example, let's say you buy one and put $50 on it at the store. Can you use a card reader/writer, software and a laptop to somehow put an extra digit on the card itself? 🤔

Is it possible?? Any ideas? Plz. Thx.

submitted by /u/XANAX_90
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What's your most favorite Burp suite extension that actually gets the job done ?

Mine is Auth Analyzer , it helped me find bugs a couple of times

you simple login into the target page with your account

and interact with the page and try actions and stuff like posting/commenting/visiting pages

And all the extension does it take all these requests and it strips all the cookies from them and Resends them again

To see if any unauthorized bugs there or not like actions that shouldn't be done without logging in

submitted by /u/theycallmemonlight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What should i do ??

Ok so the thing is , i grinded all the way in TCM course in the past 2 weeks and learnt so much about pentesting , i did alot of hacktheboxes in those 2 weeks but i still suck , i feel like every new box there is totally a new thing i never knew about . Like i didn't use burpsuite on any box before and now i found out everyone uses it , i tried to learn it but i feel so stupid in web application hacking , i hate all the html and those stuff , i tried burp suite academy but still i hate those stuff , and i got burnt out these 2 days because of overthinking and is cybersecurity is really the way i wanna go , im so confused , i feel like i loved hacking so much those 2 weeks but im losing motivation or like i feel like i learned so much but im still so bad that i don't understand what isscp is talking about in his videos , i used tcm course and there were 10 walk throughs i did them all and understood and studied his methods , but when i switched to youtube people are using different methods and another stuff which really is confusing and i don't know what im writing anymore , why am i so confused and depressed , maybe thats what a burn out is because of my grindng....

submitted by /u/GoodBird9304
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to install kali on apple m1

I tried oracle virtual box but at the moment it's not supported for apple m1. I downloaded a application called parallels which support kali and happily working on it. It's a paid version with a 2 week trial period so i'm looking for other options.

submitted by /u/gonearch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any way to stop spam mail?

Hi! Sorry if it doesn't belong here. One of my e-mails recently started receiving a lot of spam, like a really lot lot lot....

submitted by /u/Pres7on
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
can I hack into my old reddit account?

Pm me if u can help. My post keeps being taken down and saying to go to tech support but I never signed up with any email.

submitted by /u/No-Establishment3083
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video