Intigriti — XSS Challenge — February 2022  — Bug Bounty Hunting — Writeup

Hello guys I am back. This challenge was awesome btw. So let’s start talking.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Ransomware's ROI Retreat Will Drive More BEC Attacks

Crackdowns are driving down ransomware profits, and analysts see signs that operators are pivoting to business email compromise attacks, security researcher warned.

Hacking on Medium
HackThisSite JavaScript Mission 2

https://cdn-images-1.medium.com/max/700/0*ov2JOYE9L2-q89zZ.jpg
Another mission modifying how our web browser operates. This one is dead simple, but does require the most important piece of knowledge as…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Revelation Befalling Me: Cybersecurity Methodology

https://cdn-images-1.medium.com/max/1964/0*4ThHk5-4AHY5BZBs.jpeg
Everybody chooses a life. Some choose to hack and those who do need to read this. It explains in detail the journey to take.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PowerShell 基礎用法

https://cdn-images-1.medium.com/max/858/1*4SA2EYnzxxbe77so2ZK3Rw.png
PowerShell tutorial

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

Find Atlassian Confluence via HTTP Header (Atlassian Confluence Data Center)
https://www.reddit.com/r/Pentesting/comments/v6l766/find_atlassian_confluence_via_http_header/

___________________________
@hacking_Attack
@Hacking_Video

HTTP Header doesn't lie. The link on Search Page https://www.criminalip.io/asset/search?query=X_Confluence_Cluster_Node_Name https://preview.redd.it/1p98o7y2a4491.png?width=1644&format=png&auto=webp&s=437670f613c707811224b0992c39d1819b16f4b8 submitted by /u/Late_Ice_9288 (https://www.reddit.com/user/Late_Ice_9288)
[link] (https://www.reddit.com/r/Pentesting/comments/v6l766/find_atlassian_confluence_via_http_header/) [comments] (https://www.reddit.com/r/Pentesting/comments/v6l766/find_atlassian_confluence_via_http_header/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Clonbrowser Review

Looking for a clonbrowser review maybe looking to but it for geolocation spoofing and e-commerce management a review for anyone who has bought it.

submitted by /u/Mahomeboi1595
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Report on CVE-2022-26134, 0 day vulnerability in Atlassian Confluence : Still exposed to the internet.

https://external-preview.redd.it/V8Qwin-G8N2kgh7zhN__Fvqsqr61sDf11AWn9_CZ20c.jpg?width=640&crop=smart&auto=webp&s=6dce75ec8902bc90facefc686341f90e33b94dd4 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Russian hack-and-leak operation

https://cdn-images-1.medium.com/max/850/1*8eekRWAAJVC68K1XGE3yow.png
Last week I was informed of an attempt to hack my secure email account. I am not certain if the attack was successful, but an individual…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
THE UPCOMMING CYBER WARRIOR MANJEET

MANJEET PRASAD ( WhiteHatRed ) is an self-proclaimed “GREY HAT HACKER” of computer systems, whose skills and ethics have been debated…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Reverse Shell using Ngrok

https://cdn-images-1.medium.com/max/1028/1*PkIGPSOwXvI5HtNFdByG5w.png
Hi! this is Roshan aka 1mper1us. Here i am going to get Reverse Shell with the help of ngrok and netcat. Hope you guys will find it…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Jfscan : A Super Fast And Customisable Port Scanner, Based On Masscan And NMap

JFScan (Just Fu*king Scan) is a wrapper around a super-fast port scanner Masscan. It’s designed to simplify work when scanning for open ports on targets in a variety of formats. The JFScan accepts a target in the following forms: URL, domain, or IP (including CIDR). You can specify a file with targets using argument or use stdin.

The JFScan also allows you to output only the results and chain it with other tools like Nuclei. The domain:port output of JFScan is crucial if you want to discover vulnerabilities in web applications as the virtual host decides which content will be served.

Finally, it can scan discovered ports with Nmap. You can also define custom options and use Nmap’s amazing scripting capabilities. Features* Perform a large-scale scans using Nmap! Allows you to use Masscan to scan targets and execute Nmap on detected ports with custom settings. Nmap on steroids. *
* Scans targets in variety of formats, including domain names!
* Results can be produced in domain:port format.
* It works in stdin/stdout mode, allowing you to stream results to/from other tools.
* Auto-adjusts a packet rate for masscan so you don’t have to (disable it by –disable-auto-rate).
* Produces a standard Nmap XML report.
* Fully supports IPv6.
* Supports scope control, only targets defined in scope will be scanned. Usageusage: jfscan [-h] [–targets TARGETS] (-p PORTS | –top-ports TOP_PORTS | –yummy-ports) [–resolvers RESOLVERS] [–enable-ipv6] [–scope SCOPE] [-r MAX_RATE] [–wait WAIT] [–disable-auto-rate] [-i INTERFACE] [–source-ip SOURCE_IP]
[–router-ip ROUTER_IP] [–router-mac ROUTER_MAC] [–router-mac-ipv6 ROUTER_MAC_IPV6] [-oi] [-od] [-o OUTPUT] [-q | -v] [–nmap] [–nmap-options NMAP_OPTIONS] [–nmap-threads NMAP_THREADS] [–nmap-output NMAP_OUTPUT] [–version]
[target]
JFScan – Just Fu*king Scan
optional arguments:
-h, –help show this help message and exit
-p PORTS, –ports PORTS
ports, can be a range or port list: 0-65535 or 22,80,100-500,…
–top-ports TOP_PORTS
scan only N of the top ports, e. g., –top-ports 1000
–yummy-ports scan only for the most yummy ports
-q, –quite output only results
-v, –verbose verbose output
–nmap run nmap on discovered ports
–nmap-options NMAP_OPTIONS
nmap arguments, e. g., –nmap-options=’-sV’ or –nmap-options=’-sV –script ssh-auth-methods’
–nmap-threads NMAP_THREADS
number of nmaps to run concurrently, default 8
–nmap-output NMAP_OUTPUT
output results from nmap to specified file in standard XML format (same as nmap option -oX)
target a target or targets separated by a comma, accepted form is: domain name, IPv4, IPv6, URL
–targets TARGETS file with targets, accepted form is: domain name, IPv4, IPv6, URL
-oi, –only-ips output only IP adresses, default: all resources
-od, –only-domains output only domains, default: all resources
-o OUTPUT, –output OUTPUT
output masscan’s results to specified file
–resolvers RESOLVERS
custom resolvers separated by a comma, e. g., 8.8.8.8,1.1.1.1
–enable-ipv6 enable IPv6 support, otherwise all IPv6 addresses will be ignored in the scanning process
–scope SCOPE file path with IP adresses and CIDRs to control scope, expected format: IPv6, IPv4, IPv6 CIDR, IPv4 CIDR
-r MAX_RATE, –max-rate MAX_RATE
max kpps rate for the masscan
–wait WAIT a number of seconds to wait for packets to arrive (when scanning large networks), option for the masscan
–disable-auto-rate disable rate adjustment mechanism for masscan (more false positives/negatives)
-i INTERFACE, –interface INTERFACE
interface for masscan and nmap to use
–source-ip SOURCE_IP
IP address of your interface for the masscan
–router-ip ROUTER_IP
IP address of your router for the masscan
–router-mac ROUTER_MAC
MAC address of your router for the masscan
–router-mac-ipv6 ROUTER_MAC_IPV6
MAC address of your IPv6 router for the masscan
–version show program’s versio[...]

___________________________
@hacking_Attack
@Hacking_Video