hacking: security in practice
What's your most favorite Burp suite extension that actually gets the job done ?

Mine is Auth Analyzer , it helped me find bugs a couple of times

you simple login into the target page with your account

and interact with the page and try actions and stuff like posting/commenting/visiting pages

And all the extension does it take all these requests and it strips all the cookies from them and Resends them again

To see if any unauthorized bugs there or not like actions that shouldn't be done without logging in

submitted by /u/theycallmemonlight
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What should i do ??

Ok so the thing is , i grinded all the way in TCM course in the past 2 weeks and learnt so much about pentesting , i did alot of hacktheboxes in those 2 weeks but i still suck , i feel like every new box there is totally a new thing i never knew about . Like i didn't use burpsuite on any box before and now i found out everyone uses it , i tried to learn it but i feel so stupid in web application hacking , i hate all the html and those stuff , i tried burp suite academy but still i hate those stuff , and i got burnt out these 2 days because of overthinking and is cybersecurity is really the way i wanna go , im so confused , i feel like i loved hacking so much those 2 weeks but im losing motivation or like i feel like i learned so much but im still so bad that i don't understand what isscp is talking about in his videos , i used tcm course and there were 10 walk throughs i did them all and understood and studied his methods , but when i switched to youtube people are using different methods and another stuff which really is confusing and i don't know what im writing anymore , why am i so confused and depressed , maybe thats what a burn out is because of my grindng....

submitted by /u/GoodBird9304
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to install kali on apple m1

I tried oracle virtual box but at the moment it's not supported for apple m1. I downloaded a application called parallels which support kali and happily working on it. It's a paid version with a 2 week trial period so i'm looking for other options.

submitted by /u/gonearch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any way to stop spam mail?

Hi! Sorry if it doesn't belong here. One of my e-mails recently started receiving a lot of spam, like a really lot lot lot....

submitted by /u/Pres7on
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
can I hack into my old reddit account?

Pm me if u can help. My post keeps being taken down and saying to go to tech support but I never signed up with any email.

submitted by /u/No-Establishment3083
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

SQLI — Intro to Databases
https://medium.com/@arshiadev/sqli-intro-to-databases-408665bf71c8?source=rss------bug_bounty-5

Before we learn about SQL injections, we need to learn more about databases and Structured Query Language (SQL), which databases will…Continue reading on Medium » (https://medium.com/@arshiadev/sqli-intro-to-databases-408665bf71c8?source=rss------bug_bounty-5)

SQLI — Intro to Databases

Before we learn about SQL injections, we need to learn more about databases and Structured Query Language (SQL), which databases will…Continue reading on Medium »
Read more...

Hacking on Medium
SlowMist: Fortress Protocol Hack Analysis

https://cdn-images-1.medium.com/max/960/1*hle6-Z8owJVCrRFqgkrUgA.png
This attack exploited a flaw in the governance protocol and a vulnerability in oracle price manipulation.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Dig Dug(EASY) — Try hack Me

https://cdn-images-1.medium.com/max/1372/1*_4Jw8WB0JE7HaILrb_wgJQ.png
this machine is all about your DNS enumeration skill

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/_05bdmBXZr-xUI6s9nOyHHxse0qNEahtKTAl5yHBZ6E.jpg I got an access on the router (with the admin password), but somewhow, I can't see the main dashboard of our firewall. This is all I can see.

​

https://preview.redd.it/vs2edygj3yz81.png?width=1902&format=png&auto=webp&s=3eee00ebe491f91f98e32515298aaa9113c2b4c6

Is there any way to remove the blocking feature of the firewall thru the local access of Cisco Meraki?

If this post isn't allowed. Kindly delete. Thank you!

submitted by /u/arnoldjmd
[link] [comments]

hacking: security in practice
Masters degree?

I want to pursue a master's degree in cyber security even though i know it's not necessary , im currently a cs student , but im from egypt and i don't know if my degree will be recognized in germany / canada , still didn't decide where i want to take my master's , anyways my question is how could i get ready to a cyber security masters ? Like what level should i be on , and should i study all hacking fields not just pen testing? And what certificates should i pursue before taking it , i have 2 and a half years before graduating my cs uni , i want recommendations and resources , and maybe dm's if someone was in a similar situation or still is. Thank you.

submitted by /u/GoodBird9304
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Researchers Demo Bluetooth Relay Attack Against Tesla

https://external-preview.redd.it/6i3Ve7gcOpc7O5x-CU9mIMi1a6f65GhO2D7868RLyvY.jpg?width=640&crop=smart&auto=webp&s=73dbafceadba5ef40b34e94e625206bb122d092f submitted by /u/Free-Speech-101
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Installing OWTF on Kali

Can anyone point me to an up to date reference on installing owtf on kali? All the references I've come across are outdated and dont work. I've been trying to troubleshoot this for two hours lol.

submitted by /u/Flaky_Card2907
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What are some domain hosting services that don't give user data to authorities?

I'm a pretty paranoid person and I'm looking to make a website. However, I realized most US domain hosting services state in their terms and conditions that they'll hand over any and all data without delay to the US authorities. After asking this in a telegram channel I was directed to here since you guys here know more about this stuff. So what's a good/trustworthy domain hosting service that isn't subject to handing over user data? Everything is legal and the site is a collage of photos I've taken over the years.

submitted by /u/FaDe_Flamez
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to I hack into my school?

This may sound strange but most people in my school have been to mental hospitals (I have been to one before) about suicide. It's the worst school ever and I would like to somehow show that it's a bad school. Their anti-virus is out of date by a year or two and cannot update properly, just a file that makes up alot of space. A usb or anything would be good to put inside. I don't think this would be allowed but I would just like to knowif it's possible.

submitted by /u/CrashFlap
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video