Hacking on Medium
TryHackMe : Wgel CTF Write-up

https://cdn-images-1.medium.com/max/640/1*pI7cqF5nfQM77Yia7h8GPg.png
I start usually by updating the hosts file on my computer, in order to make accessing the machine easier without the need of typing the IP…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
XSS in chat section

https://cdn-images-1.medium.com/max/943/1*x5eHDO5YMpZkHj89cu0i2Q.png
Hi Guys my name is jagannath mohanty. i am a bug bounty hunter.i want to tell you about my first XSS in chat story .i start now lets jump…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
CRLFsuite - Fast CRLF Injection Scanning Tool

https://blogger.googleusercontent.com/img/a/AVvXsEiJkJ69M3maKmrVidTnhKM3rUJF6XdT5D12-25-Ls7xjKKReHkHjyrFaL5P31zBk8vj8O-YY3ZGOuCq83e1gKzbH0oMsCl2xJ-j_t4UB0XiZ_mKOd6Eetswch1wwbSEH99whZLare1j9Jsb1UqSkJDbd6ns0ius3XFWJ3TdrkLWazG2RnUo8Zo28KdO=w640-h362
CRLFsuite is a fast tool specially designed to scan CRLF injection.
Installation

$ git clone https://github.com/Nefcore/CRLFsuite.git
$ cd CRLFsuite
$ sudo python3 setup.py install
$ crlfsuite -h


Features

* Single URL scanning
* Multiple URL scanning
* Stdin supported
* GET & POST method supported
* Concurrency
* Best Payloads list
* Headers supported
* Fast and efficient scanning with negligible false-positive

Usage


Single URL scanning:

$ crlfsuite -u "http://testphp.vulnweb.com"

Multiple URLs scanning:

$ crlfsuite -i targets.txt


from stdin:

$ subfinder -d google.com -silent | httpx -silent | crlfsuite -s

Specifying cookies


:
$ crlfsuite -u "http://testphp.vulnweb.com" --cookies "key=val; newkey=newval"

Using POST method:

$ crlfsuite -i targets.txt -m POST -d "key=val&newkey=newval"


Bug report


If You're facing some errors or issues with this tool, you can open a issue here:
Open a issue
Download CRLFsuite

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Would a hacker ever claim the account owner is dead- Is this a known scam?

To keep this as brief as possible my mothers friend she only communicates with through Facebook went MIA for months, and then she gets a message from someone claiming to be her friends young son saying her friend died a few months ago, my mother thinks it’s a hacker, I don’t want to upset her but I’ve never heard of a hacker doing anything like that before, there was no link or anything it was just a message, any similar stories and advice would be greatly appreciated

submitted by /u/EvangelineElouisa
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
what are the system security benchmark tools for Kali Linux?

I need to produce a benchmark of Kali Linux security system for my project. I found openscap tool for other linux can I use it on Kali and suggest me other such benchmarking or automated tool that produces results based on check lists

submitted by /u/ImaGoodGuy2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

SynAck Red Team
https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/

Hi, I saw many people mentioning they're part of SynAck Red Team. Is that a job ? are they getting paid ? submitted by /u/Spare_Prize1148 (https://www.reddit.com/user/Spare_Prize1148)
[link] (https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/) [comments] (https://www.reddit.com/r/Pentesting/comments/v4s68u/synack_red_team/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to use Pintrest to market your business

https://cdn-images-1.medium.com/max/640/1*SWwS0dsetgyQQv98sBCesg.png
Create plenty of images, even if they are very similar.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox:Timelapse

https://cdn-images-1.medium.com/max/1400/1*2pxkeeMxZ-7laQAxCJaPLw.png
Overview:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
“Hacking Kubernetes: Threat Driven Analysis and Defense” Chapter 5 Notes: Networking

https://cdn-images-1.medium.com/max/1125/1*YMS7BltK5IIahPfAX9IimA.jpeg
Prefer videos over articles? Check out the video book review here

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Iagon Token Bridge UI Bug Bounty
https://medium.com/iagon-official/iagon-token-bridge-ui-bug-bounty-5136032c7b0a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

You better watch out, it’s bug hunting season!Continue reading on Iagon Official » (https://medium.com/iagon-official/iagon-token-bridge-ui-bug-bounty-5136032c7b0a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Iagon Token Bridge UI Bug Bounty

You better watch out, it’s bug hunting season!Continue reading on Iagon Official »
Read more...

hacking: security in practice
Anonymous social media presence

Why hasnt the government tried to catch members of anonymous through tracing their twitter posts? How do they prevent this from being traced back to their location? And why hasnt twitter removed their account?

submitted by /u/ICumToOsama2021
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Secure p2p connection to my home internet

Thanks for reading my post

I am in a situation where I am travelling a lot ( aboard ) and would like to use my home internet, by going through other post and research what I find out, please correct me into this,

1. I have linksys wrt3200acm router and plug to home modem, enable its own built in openvpn feature to make it a server (https://www.linksys.com/us/support-article?articleNum=157327)
2. Buy another router probably same open source router (linksys wrt3200acm) and use ddwrt image on it and connect it to my home router/linksys wrt3200acm openvpn server as a client

I just want to connect to my home internet to access internet while im travelling within usa or even aboard. Thanks

submitted by /u/cskhan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does MovieBox ensure it’s opsec while having open payment methods?

MovieBox allows users to pay a subscription based fee for enhanced quality of movies and shows. They allow you to pay through credit cards and PayPal. How do they route these payments without being exposed or getting their accounts frozen?

submitted by /u/TheKrunkk
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video