Hacking on Medium
WordPress User Meta Lite / Pro 2.4.3 Suffers Path Traversal Exploit

More @ https://skynettools.com 
Currently the WordPress Plugin User Meta 2.4.3, both Lite and Pro is vulnerable to a Path Traversal…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Decrypt SSD

So today I was commissioned with the task of decrypting an SSD which I currently do not have on my hands. First of all, can I get an .iso of that disc to try to decrypt it? Second, any recommendations on software/distributions for this?

​

Appreciate your help!

submitted by /u/holyshilo111
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Spectrum's Sagemcom Model SAX1V1S

Can anyone hack this model router? Us users need the ability to have 2.4 and 5ghz. Spectrum did this on purpose to cut down on connectivity problem calls to their call centers.

Many of my IOT devices are useless. I'd hate to have to buy a router. I am loving the wifi6.

submitted by /u/XxCotHGxX
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
proximity sensors- types and where to buy

This is more the building/making type of hacking rather than purely the software type, but I've got an idea for a pet project and no idea where else to ask.

I want to get some sort of proximity sensor that is low latency & has a reasonably high resolution (like 1920x1080 sorta levels.) that I can output to a PC. Depth would be an added bonus but not 100% needed. I'll want to be picking up human outlines in darkness (hence not just using a camera). I think a movement detector would probably work fine for my apllication.

Anyone who knows this kinda thing, pls point me in the right direction.

submitted by /u/TechnicalyAnIdiot
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any hacks for Time4learning.com?

Hello! I am looking for a hack / mod menu I can use on the homeschool application time4learning, I am also looking for something I can use on Samsung Dex.

submitted by /u/unicorngamerboy
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is possible to hack an automatic pet feeder?

Context. I love my cat, but I cannot stand when she yells at me for food. So few years ago I bought an automatic feeder which was a total delight until now that the backend stopped working.

I cannot connect to the app hence I cannot adjust food servings or check wifi connection. I reset the thing trying to fix it and nothing.

I just found out that the product is not for sale anymore and there's no additional info available.

Do you have any hints of how I can make this work again or is a lost battle?

The feeder is "hoison pet feeder" the apk is under the same name.

Thanks for reading 💛

submitted by /u/Claudiarana
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Part 2: A pragmatic guide to building your bug bounty program
https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-2caaf332c9d3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Budgets and payments, and dealing with beg bountiesContinue reading on Airwallex Engineering » (https://medium.com/airwallex-engineering/a-pragmatic-guide-to-building-your-bug-bounty-program-2caaf332c9d3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Boring Developer Bollocks

https://cdn-images-1.medium.com/max/2154/1*HpOTO8_eDBAn8Nmoy3pBBw.png
Coming from the world of hacking and hackers, it was a shock to find out how dull and uninspiring the talks could be at “developer”…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Linux PrivEsc

https://cdn-images-1.medium.com/max/600/1*qTRrP3GSyaMGxJ47y6qsEQ.png
Practicing Linux Privilege Escalation skills on an intentionally misconfigured Debian VM with multiple ways to get root.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnversity

https://cdn-images-1.medium.com/max/600/1*dYMi6upyzj2PuRYBpTmObQ.png
Learning about active recon, web app attacks and privilege escalation.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How Do Black Hat Hackers Differ From White Hat Hackers?

https://cdn-images-1.medium.com/max/2600/0*jVFndLfeAykGp1UV
The difference between black hat and white hat is simple in their objectives. Black hat is a form of hacking which involves dishonest or…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Cryptography a Foundation of Cyber Security.

Continue reading on Medium »
Read more...

hacking: security in practice
Free WIFI?

despite the memes around it I was wondering if anyone knew of any way of accessing the internet and so on, in a free way, ideally mobile. is there a piece of hardware that can "jack" a signal without technically breaking in? or is my knowledge completely wrong? any help or ideas are appreciated!

submitted by /u/SpiritCreations
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Hackers steal WhatsApp accounts using call forwarding trick

Hackers steal WhatsApp accounts using call forwarding trickPost Views: 4
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
There’s a trick that allows attackers to hijack a victim’s WhatsApp account and gain access to personal messages and contact list.
The method relies on the mobile carriers’ automated service to forward calls to a different phone number, and WhatsApp’s option to send a one-time password (OTP) verification code via voice call. The MMI code trickRahul Sasi, the founder and CEO of digital risk protection company CloudSEK, posted some details about the method saying that it is used to hack WhatsApp account.

BleepingComputer tested and found that the method works, albeit with some caveats that a sufficiently skilled attacker could overcome.

It takes just a few minutes for the attacker to take over the WhatsApp account of a victim, but they need to know the target’s phone number and be prepared do some social engineering.

Sasi says that an attacker first needs to convince the victim to make a call to a number that starts with a Man Machine Interface (MMI) code that the mobile carrier set up to enable call forwarding.

Depending on the carrier, a different MMI code can forward all calls to a terminal to a different number or just when the line is busy or there is no reception.

These codes start with a star (*) or a hash (#) symbol. They are easily found and from the research we did, all major mobile network operators support them.
See Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png “First, you receive a call from the attacker who will convince you to make a call to the following number **67* or *405*. Within a few minutes, your WhatsApp would be logged out, and the attackers would get complete control of your account” – Rahul Sasi
The researcher explains that the 10 digit number belongs to the attacker and the MMI code in front of it tells the mobile carrier to forward all calls to the phone number specified after it when the victim’s line is busy.

Once they tricked the victim into forwarding calls to their number, the attacker starts the the WhatsApp registration process on their device, choosing the option to receive the OTP via voice call.
https://www.bleepstatic.com/images/news/u/1100723/2022/WhatsAppOTP.jpg
Some caveatsAlthough the method seems simple, getting it to work requires a little more effort, as BleepingComputer found during testing.

First off, the attacker needs to make sure that they use an MMI code that forwards all calls, regardless of the victim device’s state (unconditionally). For example, if the MMI only forwards calls when a line is busy, call waiting may cause the hijack to fail.

During testing, BleepingComputer noticed that the target device also received text messages informing that WhatsApp is being registered on another device.

Users may miss this warning if the attacker also turns to social engineering and engages the target in a phone call just long enough to receive the WhatsApp OTP code over voice.
If call forwarding has already been activated on[...]

___________________________
@hacking_Attack
@Hacking_Video