My Pentest Log -21 — (Content-Type Checks)
https://hcibo.medium.com/my-pentest-log-21-content-type-checks-9bbbaa655097?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings everyone from Porta Platea,Continue reading on Medium » (https://hcibo.medium.com/my-pentest-log-21-content-type-checks-9bbbaa655097?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 07 Cross-Side-Request-Forgery(CSRF) — Sample-2
https://as745591.medium.com/albussec-penetration-list-07-cross-side-request-forgery-csrf-sample-2-b576a13a11e3?source=rss------bug_bounty-5

Hi Information Security folk, I hope you are well and doing great in your life, Before we go to the next step, You’ll need to learn about…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-07-cross-side-request-forgery-csrf-sample-2-b576a13a11e3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to create a botnet?

uhhhhm Im not actually trying to create a botnet, relax FBI.
What Im actually interested in doing is connecting all my friend's computers into a network which will share computing resources between each other, kind of like private cloud computing but this sounds awful a lot like botnet so, does anyone have any ideas?

submitted by /u/DAutistOfWallStreet
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack hospital server, issue birth/death certificates by cyber criminals

https://cdn-images-1.medium.com/max/640/0*aGkt7BluFulWNCCD.jpg
Cybercriminals have struck again in Lucknow. This time, they have hacked into the Computer network of Balrampur Hospital and deceitfully…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ukrainian Government Websites got hacked

https://cdn-images-1.medium.com/max/640/0*1FWPBMBSWoVn2-pZ.jpg
Hackers have targeted dozens of Ukrainian government websites, advising people to “be afraid and prepare for the worst.”
During the attack…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
First step to Cyber Security

https://cdn-images-1.medium.com/max/1600/1*UDgqKZvoUwJnkfwL_2VSxQ.jpeg
As soon I started learning about Cyber Security, the first thing I got into is to learn about Computer Networking, as much possible. The…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Use of Web Archive In OSINT Investigation ! Go back to past

https://cdn-images-1.medium.com/max/855/1*V9sAWb-Sb8YGLeGz1Zc0vA.png
Using web archives allows you to see what a web page or site looked like in the past !

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can the variable in this ash script be exploited for code execution?

wget -O outputfile ${user_controlled_variable}
I’m playing with this trying to see if the lack of quotes let’s me execute a command but I’ve been unsuccessful.

The shell in question is ash from Busybox 1.21.1.

submitted by /u/kjarkr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to access a website's backend

How do you see the backend of a website? Not the source code but the actual files and folders? I've sen it done on some websites and was curious to know how to do it

submitted by /u/raheke8
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking
Exploit released for Atlassian Confluence RCE bug, update now

___________________________
@hacking_Attack
@Hacking_Video

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic
http://www.kitploit.com/2022/06/aws-threat-simulation-and-detection.html

___________________________
@hacking_Attack
@Hacking_Video

This repository is a documentation of my adventures with Stratus Red Team (https://github.com/DataDog/stratus-red-team) - a tool for adversary emulation (https://www.kitploit.com/search/label/Adversary%20Emulation) for the cloud. Stratus Red Team (https://www.kitploit.com/search/label/Red%20Team) is "Atomic Red Team (https://github.com/redcanaryco/atomic-red-team) for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner.
We run the attacks covered in the Stratus Red Team repository one by one on our AWS account. In order to monitor them, we will use CloudTrail and CloudWatch for logging and ingest these logs into SumoLogic (https://www.sumologic.com/) for further analysis.

___________________________
@hacking_Attack
@Hacking_Video