Hacking on Medium
Follina: Zero-Day en Office con macros deshabilitadas (actualizado 31/05)

https://cdn-images-1.medium.com/max/1593/0*KRSIJMxlcI9KCXS8
PUBLICADO EN 1 JUNIO, 2022POR EHACKING

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Zap-Scripts - Zed Attack Proxy Scripts For Finding CVEs And Secrets

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6O4MyYOqUqFTS2rpBr0I9ZLKPPQdTo8uAfiOopgC6ZdH-EGwFR3YGQ8rGudMkcbeBUSetDLmGRvScNGdHTW4raeIM6rLoiHSblxxe0pFFHYiW5WxKKe4aTRMSmBhECoJzhq6ExCguzgThGpMH0oy0orSeckkZtUgVbO3wcvqBwho3mdGv4Eq7DQ49/w400-h343/Zed%20Attack.png
Zed Attack Proxy Scripts for finding CVEs and Secrets.

Building

This project uses Gradle to build the ZAP add-on, simply run:

./gradlew build

in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/.
Usage

The easiest way to use this repo in ZAP is to add the directory to the scripts directory in ZAP (under Options -> Scripts).

however, you can also build the add on and install it (under File -> Load Addon File...).

License

This software is distributed under the MIT License.

Credits

*
The scripts under the activedirectory are mostly ported from the amazing nuclei-templates repository, so huge shoutout to projectdiscovery and the community.

*
secret-finder.jsuses regex patterns from the awesome gitleaks project.

*
takeover-finder.jsuses patterns from the awesome nuclei-templates repository.
LEGAL NOTICE

THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS.

Get Involved

Please, send us pull requests!
Download Zap-Scripts

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does anyone know how to track an IP adress?

Hi! I am trying to find my friend's address so I can send them a gift.

This probably sounds weird or like spam but I cannot ask them.

So does anyone know how to trace an IP address to get an address?

submitted by /u/Spicy_Pepper4925
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Advice on how to take down a scam site that's affecting people

I hope I'm not breaking any rules and I apologize in advance but I stumbled upon a Mexican site that's posing as a very big Mexican Apple retailer and stealing from people a lot of money (starting from $500). Is there a safe and easy way to grab their IP/shut them down, anything? They've been operating for more than 2 years apparently.

submitted by /u/Analogkid1984
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Managing Extended Software Supply Chain Risks

Supply chain woes have dominated headlines, but there's another type of supply chain that's also increasingly at risk: the cloud supply chain.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Darktrace's Brianna Leddy on How Ransomware Groups Adapt to New Defenses

In this Tech Talk, Darktrace's Brianna Leddy and Dark Reading's Terry Sweeney discuss ways ransomware groups adapt their activities as enterprise security teams evolve their defenses and controls.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to use Twitter to market your business

https://cdn-images-1.medium.com/max/640/1*AdFxGg2pDqNERfD6OJskIw.jpeg
Use Twitter to build relationships.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Realistic Mission 14

https://cdn-images-1.medium.com/max/600/0*-paUT8fFQVkxZutm.jpg
Alright so this mission unfortunately is broken, I played around for a bit on the website and couldn’t find anything easy to exploit.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Basic Mission 7

https://cdn-images-1.medium.com/max/700/0*-paUT8fFQVkxZutm.jpg
We are back hacking another one of Sam’s pages trying to obtain a password. This time his daughter wrote us a fancy calendar script that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection On Trio App

Hey Hackers!!! I am back again! My name is Krishnadev P Melevila, To know more about me, Search on Google “ Who is Krishnadev P Melevila”!Continue reading on InfoSec Write-ups »
Read more...

Hi I'm completely new my manager asked me to do this. As a Cybersecurity Analyst, you have been asked to perform the security testing on given virtual machine and provide the brief documentation with all vulnerabilities along with mitigation approach for detected vulnerabilities
https://www.reddit.com/r/Pentesting/comments/v30qhi/hi_im_completely_new_my_manager_asked_me_to_do/

Can you tell me any sample presentation for it? submitted by /u/cybosri (https://www.reddit.com/user/cybosri)
[link] (https://www.reddit.com/r/Pentesting/comments/v30qhi/hi_im_completely_new_my_manager_asked_me_to_do/) [comments] (https://www.reddit.com/r/Pentesting/comments/v30qhi/hi_im_completely_new_my_manager_asked_me_to_do/)

___________________________
@hacking_Attack
@Hacking_Video

HTML Injection On Trio App
https://infosecwriteups.com/html-injection-on-trio-app-92f039c500a7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Hackers!!! I am back again! My name is Krishnadev P Melevila, To know more about me, Search on Google “ Who is Krishnadev P Melevila”!Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/html-injection-on-trio-app-92f039c500a7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video