Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
Elastic search databases on Shodan

Does anybody collect data from open elastic search databases? I have in the past using shodan and the elastic search crawler script, but I'm not too knowledgeable in parsing data. What's the best way to organize and search data sets? Any recommendations?

submitted by /u/ItsAllPartofTheShow
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Website Vulnerability

Hello there guys,

To anyone whos familiar with the GDPR I've got a question, I found out recently a 'bug' in a website register form, it turns out in the email textbox form, there's an active POST request being made where it will send a payload of the user's typed email address and it will return either "OK", in case the email is not taken and "ERROR" in case the email is already registered.

The issue is that it is possible to brute-force said POST request without any sort of limitation, so it'd be possible to have a 'wordlist' of emails and brute force them to know whether or not it is already registered.



My question is if this is worth sending an email to the cybersecurity team of the said website, and wewhetherther or not it might go against any GDPR law.

submitted by /u/brunommpreto
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
How to Crack & Install BurpSuite Professional in Kali Linux

Steps to crack & Install Burpsuite Pro in Kali-LinuxContinue reading on Medium »
Read more...
PicoCTF Review

Hi! Guys I’m back with a new blog and I’m so excited because with this site you can learn a LOT!Continue reading on Medium »
Read more...