Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
My old phone (got reciept)

I have an old Oneplus 6 that I have not used in a long time, and have therefor forgot the screen code. I contacted Oneplus but they said the only way to unlock it was to do a factort reset wich Kinda defeats the purpose.

Is there any way I can get in to the phone without deleting its data? As I said its mine and I got original reciept so nothing shady

submitted by /u/Drakenbror
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My old phone (got reciept)

I have an old Oneplus 6 that I have not used in a long time, and have therefor forgot the screen code. I contacted Oneplus but they said the only...

7 viewsedited 04:04

Hacking Articles Tips Tricks Videos Tutorials

2FA Bypass due to unauthorized 2FA disabling via X/CSRF
https://sadc0d3r.medium.com/2fa-bypass-due-to-unauthorized-2fa-disabling-via-x-csrf-2ddc167f2d2a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

2FA Bypass due to unauthorized 2FA disabling via X/CSRF

Product Info

6 viewsedited 04:13

Hacking Articles Tips Tricks Videos Tutorials

6 views04:13

Hacking Articles Tips Tricks Videos Tutorials

Product InfoContinue reading on Medium » (https://sadc0d3r.medium.com/2fa-bypass-due-to-unauthorized-2fa-disabling-via-x-csrf-2ddc167f2d2a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

2FA Bypass due to unauthorized 2FA disabling via X/CSRF

Product Info

8 viewsedited 04:13

Hacking Articles Tips Tricks Videos Tutorials

2FA Bypass due to unauthorized 2FA disabling via X/CSRF

Product InfoContinue reading on Medium »
Read more...

12 views04:56

Hacking Articles Tips Tricks Videos Tutorials

10 views06:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Red Team Server

https://cdn-images-1.medium.com/max/1280/1*_w8vIWUURZI1krQAyga70g.jpeg
Red Team Server (RTS)

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Medium

Red Team Server

Red Team Server (RTS)

8 viewsedited 06:36

Hacking Articles Tips Tricks Videos Tutorials

7 views06:36

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
TOP SEVEN CYBERSECURITY SUGGESTIONS FOR KEEPING YOUR DATA SAFE AND PRIVATE

https://cdn-images-1.medium.com/max/1920/1*6phgvbEIibuovStC_Cz4fA.jpeg
Cybersecurity tips are profoundly fundamental for keeping up with information security and eliminating information break

Continue reading on Coinmonks »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Medium

TOP SEVEN CYBERSECURITY SUGGESTIONS FOR KEEPING YOUR DATA SAFE AND PRIVATE

Cybersecurity tips are profoundly fundamental for keeping up with information security and eliminating information break

8 viewsedited 06:36

Hacking Articles Tips Tricks Videos Tutorials

6 views08:04

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
CVE-2022-26134: 0-day vulnerability in Atlassian Confluence

https://external-preview.redd.it/Tg0-BkXmviozHn656IcmeMLJZI1QmWNE9U3r_P5g9zQ.jpg?width=216&crop=smart&auto=webp&s=739341c3ae909df901ca3805d460801846330dfa submitted by /u/CyberMasterV
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

CVE-2022-26134: 0-day vulnerability in Atlassian Confluence

Posted in r/hacking by u/CyberMasterV • 1 point and 0 comments

8 viewsedited 08:04

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Trying to understand how webpages see IP addresses

I'm not. sure if this is the place to post but I'm desperate.

So my university has been insane this season and our we now have a fail rate of over 80%. It's a small uni in a tiny country so no ones been regulating the immense failure rate.

I'm on my last attempt for this subject and I don't really see an issue with cheesing this because

a. I still have to do the oral after this and

b. I've studied my ass off

Our university checks that we submit the page from their laptops (connected to a wifi that only they know the password to) and has caught students attempting from off campus.

But I was wondering if I start the exam on their laptop, leave the hall without submitting and finish the answers elsewhere ON CAMPUS (but a different wifi) can they see something fishy?

I'm desperate at this point

submitted by /u/Cuddle_Cloud
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Trying to understand how webpages see IP addresses

I'm not. sure if this is the place to post but I'm desperate. So my university has been insane this season and our we now have a fail rate of...

8 viewsedited 08:04

Hacking Articles Tips Tricks Videos Tutorials

7 views08:07

Hacking Articles Tips Tricks Videos Tutorials

Photo

Black Hat Ethical Hacking
Critical Atlassian Confluence zero-day actively used in attacks

Critical Atlassian Confluence zero-day actively used in attacksPost Views: 18
Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-3.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes
Hackers are actively exploiting a new Atlassian Confluence zero-day vulnerability tracked as CVE-2022-26134 to install web shells, with no fix available at this time.
Today, Atlassian released a security advisory disclosing that CVE-2022-26134 is a critical unauthenticated, remote code execution vulnerability tracked in both Confluence Server and Data Center.

Atlassian says that they confirmed the vulnerability in Confluence Server 7.18.0 and believe that Confluence Server and Data Center 7.4.0 and higher are also vulnerable.

The advisory warns that threat actors are actively exploiting Confluence Server 7.18.0.

As there are no patches available, Atlassian is telling customers to make their servers inaccessible by one of these two methods:

*
Restricting Confluence Server and Data Center instances from the internet.

*
Disabling Confluence Server and Data Center instances.
There are no other ways to mitigate this vulnerability.

Organizations that use Atlassian Cloud (accessible via atlassian.net) are unaffected by this vulnerability.

Atlassian is actively working on a patch and will release further information in their advisory when it becomes available.

The Cybersecurity and Infrastructure Security Agency (CISA) has added this zero-day to its ‘Known Exploited Vulnerabilities Catalog‘ and is requiring federal agencies to block all internet traffic to Confluence servers by tomorrow, June 3rd.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Servers exploited for initial accessIn a coordinated disclosure, cybersecurity firm Volexity explained that the vulnerability was discovered over the Memorial Day weekend while performing incident response.

After conducting the investigation, Volexity could reproduce the exploit against the latest Confluence Server version and disclosed it to Atlassian on May 31st.

“After a thorough review of the collected data, Volexity was able to determine the server compromise stemmed from an attacker launching an exploit to achieve remote code execution,” explains a blog post by Volexity.

“Volexity was subsequently able to recreate that exploit and identify a zero-day vulnerability impacting fully up-to-date versions of Confluence Server.”

In the breach analyzed by Volexity, threat actors installed BEHINDER, a JSP web shell that allows threat actors to execute commands on the compromised server remotely.
See Also: Malicious PyPI package opens backdoors on Windows, Linux, and Macs See Also: Offensive Security Tool: Arjun The threat actors then used BEHINDER to install the China Chopper web shell and a simple file upload tool as backups.

From Volexity’s investigation, the threat actors dumped the user tables of the Confluence server, wrote additional webshells, and altered access logs to evade detection.

Volexity says that they believe the multiple threat actors from China are utilizing these exploits.

As there are no patches available, Volexity also recommends that Confluence admins disconnect their servers from the Internet until Atlassian releases a fix.

Volexity has released a list of IP addresses behind the attacks and Yara rules to identify web shell activity on Confluence servers. Are u a security researcher? Or a company that writes articles or write ups about Cyber Security,[...]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

Critical Atlassian Confluence zero-day actively used in attacks | Black Hat Ethical Hacking

Hackers are actively exploiting a new Atlassian Confluence zero-day vulnerability tracked as CVE-2022-26134 to install web shells, with no fix available at this time.

10 viewsedited 08:07

Hacking Articles Tips Tricks Videos Tutorials

Black Hat Ethical Hacking Critical Atlassian Confluence zero-day actively used in attacks Critical Atlassian Confluence zero-day actively used in attacksPost Views: 18 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon…