Exploit Collector
Poly EagleEye Director II 2.2.1.1 Command Injection / Authentication Bypass

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Building a REAL secure system?

This is a question for those of you who are more into theory...

Is it theoretically possible to build a safe system? Is there a conceivable Turing machine you can build up and from scratch and from which you can exclude third parties by means of architecture?

Nature has so far just come up with meta-stable solutions as (biological) viruses clearly show. Can we come up with something more solid?

Can we define at least the requirements and check one by one which is actually doable and which is not?

Thanks for your input

submitted by /u/thebanicThot
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SubstackDB: Exploiting Lax Upload Validation to Create Parasitic File Servers

https://external-preview.redd.it/XEupNQT2DKLUEvueutee62s5q5tQiG5e6X_Z9jih_LY.jpg?width=640&crop=smart&auto=webp&s=5f583e3cb5d4e62086695e94d171a92a05201bc2 submitted by /u/dgaff
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Wgel Walkthrough
https://medium.com/@amyrahm786/wgel-walkthrough-c5802548a295?source=rss------bug_bounty-5

Welcome back, folks!!
Today presenting one more boot to root kind of box from TryHackMe. It is a beginner-level box with some cool…Continue reading on Medium » (https://medium.com/@amyrahm786/wgel-walkthrough-c5802548a295?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Are You Ready for a Breach in Your Organization's Slack Workspace?

A single compromised Slack account can easily be leveraged to deceive other users and gain additional access to other users and multiple Slack channels.

Dark Reading: Attacks/Breaches
The CISO Shortlist: Top Priorities at RSA 2022

The buzz on the show floor during RSA Conference is about aligning the organization's security priorities with the right technology. Will Lin, managing director and founding member at Forgepoint Capital, weighs in on the biggest security priorities for 2022 — and what kind of tech senior-level executives are looking for.

Dark Reading: Attacks/Breaches
Cybersecurity M&A Activity Shows No Signs of Slowdown

But valuations have dropped — and investors are paying closer attention to revenues and profitability, industry analysts say.

Dark Reading: Attacks/Breaches
IBM to Buy Attack Surface-Management Firm Randori

Randori’s attack-surface management software will be integrated into IBM Security QRadar extended detection and response (XDR) features.

How I gave rest to company’s email updates service
https://medium.com/@smitgharat0001/how-i-gave-rest-to-companys-email-updates-service-79c2a66fbe55?source=rss------bug_bounty-5

Hello everyone, hope you all are doing wellContinue reading on Medium » (https://medium.com/@smitgharat0001/how-i-gave-rest-to-companys-email-updates-service-79c2a66fbe55?source=rss------bug_bounty-5)

How I gave rest to company’s email updates service

Hello everyone, hope you all are doing wellContinue reading on Medium »
Read more...

Hacking on Medium
Hacking Nginx: Best ways

https://cdn-images-1.medium.com/max/1024/1*Vgr4dyEiRLDDe-SAbpw5Xg.png
Nginx is being used in the wild since a while now. We all have seen NGINX name somewhere while coding/hacking. NGINX has always been a…

Continue reading on InfoSec Write-ups »

Hacking on Medium
BAYC are Subject to Further Attacks as 200ETH Worth of NFTs Stolen in Hack:

https://cdn-images-1.medium.com/max/1920/1*mEuYX1-XFTfwwoVLymtYog.jpeg
Already this year, the Bored Ape Yacht Club has been subject to a number of hacks and phishing scams: in April, buyers were duped by a…

Continue reading on Medium »