Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Dark Reading: Attacks/Breaches
6 Steps to Ensure Cyber Resilience

To minimize the impact of cyber incidents, organizations must be pragmatic and develop a strategy of resilience for dealing with break-ins, advanced malware, and data theft.
hacking: security in practice
Elastic search databases on Shodan

Does anybody collect data from open elastic search databases? I have in the past using shodan and the elastic search crawler script, but I'm not too knowledgeable in parsing data. What's the best way to organize and search data sets? Any recommendations?

submitted by /u/ItsAllPartofTheShow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Website Vulnerability

Hello there guys,

To anyone whos familiar with the GDPR I've got a question, I found out recently a 'bug' in a website register form, it turns out in the email textbox form, there's an active POST request being made where it will send a payload of the user's typed email address and it will return either "OK", in case the email is not taken and "ERROR" in case the email is already registered.

The issue is that it is possible to brute-force said POST request without any sort of limitation, so it'd be possible to have a 'wordlist' of emails and brute force them to know whether or not it is already registered.



My question is if this is worth sending an email to the cybersecurity team of the said website, and wewhetherther or not it might go against any GDPR law.

submitted by /u/brunommpreto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video