hacking: security in practice
Confluence Webshells in the PwnDefend honeypot

I'm seeing lots of exploitation occuring:

https://www.pwndefend.com/2022/06/08/learn-to-soc-java-webshell-via-confluence/

might be useful to understrand from a red and blue perspective.

submitted by /u/Mr-R3b00t
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Part 1: Three Years of Bug Bounty Hunting and Responsible Disclosure

https://external-preview.redd.it/cLO-vnHPr15hsK6RBULSz9DSp6tRGDl4BZ349XpskbQ.jpg?width=640&crop=smart&auto=webp&s=e1ee21925bef3e041b995dcb1ec1de6bbc6ca29e submitted by /u/ibuydan
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hiding Your Covenant Grunts
https://www.reddit.com/r/redteamsec/comments/v7mbap/hiding_your_covenant_grunts/

submitted by /u/Diesl (https://www.reddit.com/user/Diesl)
[link] (https://cr.culbertreport.com/2022/06/covenant-in-2022.html) [comments] (https://www.reddit.com/r/redteamsec/comments/v7mbap/hiding_your_covenant_grunts/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Do We Secure Our Cities From Attack?

Physical access matters in keeping people and buildings safe. Points to consider when establishing a physical security protocol are ways to lock down an area to keep people safe, approaches to communicate clear safety directions, and access control.

[BugBounty] Tips to Find Stored XSS
https://infosecwriteups.com/bugbounty-tips-to-find-stored-xss-9995814d353f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IntroContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/bugbounty-tips-to-find-stored-xss-9995814d353f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

I'm trying to apply for Australian universities, they have this syllabus ICTCYS404.anyone from Australia? how to get the study guide books for this syllabus?
https://www.reddit.com/r/Pentesting/comments/v7qyi4/im_trying_to_apply_for_australian_universities/

submitted by /u/cybosri (https://www.reddit.com/user/cybosri)
[link] (https://www.reddit.com/r/Pentesting/comments/v7qyi4/im_trying_to_apply_for_australian_universities/) [comments] (https://www.reddit.com/r/Pentesting/comments/v7qyi4/im_trying_to_apply_for_australian_universities/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Spring4Shell Vulnerability Explanation

https://cdn-images-1.medium.com/max/836/1*eQoFPiwRYN8OMg7a55U3QQ.png
1- Summary

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Huoxian (White Hat Hackers Empowering Cloud Security)

https://cdn-images-1.medium.com/max/2600/1*mff0loXQCdBfTm8Edy20yQ.jpeg
Huoxian, a community-based cloud security platform, pilots a human-computer collaboration approach in security with crowdsourced testing…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Future Is Quite

https://cdn-images-1.medium.com/max/2600/0*-vSAOyzeevAcdnYG
Enough to slow

Continue reading on MIDFORM »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers

https://cdn-images-1.medium.com/max/728/0*n-FAjjrNEVYI5Jw9
The U.S. National Security Agency, the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Socialhunter - Crawls The Website And Finds Broken Social Media Links That Can Be Hijacked

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ9WACcbHYIsnowomItI03uZiIvSPaIDmutH7ITlpTBhwYKZfgmw3o0BD-8vNIK33h6Z_GmY9UzM1C8AtjZTgHfgIrnTHEfzafjDmDC8XwO6FPELdMnsUMkb4faZz7bep4qZ0YLPla13I5XP3aqAAkpMHRzBK2lB1C61R_s1iFLpLhPF3vUjvwsSgR/w640-h478/Socialhunter.png
Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attacks. It also can cost a loss of the company's reputation. Broken social media hijack issues are usually accepted on the bug bounty programs.
Currently, it supports Twitter, Facebook, Instagram and Tiktok without any API keys.

https://camo.githubusercontent.com/65bbd741a7a85edfd02cd1b08d28c021a33eeda8f30f37855ee26f02f028ba1c/68747470733a2f2f61736369696e656d612e6f72672f612f77594d565849484378784f423351505771344665384164766e2e737667

Installation

From Binary

You can download the pre-built binaries from the releases page and run. For example:

wget https://github.com/utkusen/socialhunter/releases/download/v0.1.1/socialhunter_0.1.1_Linux_amd64.tar.gz

tar xzvf socialhunter_0.1.1_Linux_amd64.tar.gz

./socialhunter --help

From Source

1. Install Go on your system
2. Run: go get -u github.com/utkusen/socialhunter

Usage

socialhunter requires 2 parameters to run:

-f: Path of the text file that contains URLs line by line. The crawl function is path-aware. For example, if the URL is https://utkusen.com/blog, it only crawls the pages under /blogpath

-w: The number of workers to run (e.g -w 10). The default value is 5. You can increase or decrease this by testing out the capability of your system.
Download Socialhunter

___________________________
@hacking_Attack
@Hacking_Video

Socialhunter - Crawls The Website And Finds Broken Social Media Links That Can Be Hijacked
http://www.kitploit.com/2022/06/socialhunter-crawls-website-and-finds.html

___________________________
@hacking_Attack
@Hacking_Video