Easy four XSS in Nokia bug bounty program
https://medium.com/@kogx84/easy-four-xss-in-nokia-bug-bounty-program-ce0c95115151?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@kogx84/easy-four-xss-in-nokia-bug-bounty-program-ce0c95115151?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
Easy four XSS in Nokia bug bounty program
Introduction
IntroductionContinue reading on Medium » (https://medium.com/@kogx84/easy-four-xss-in-nokia-bug-bounty-program-ce0c95115151?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
Easy four XSS in Nokia bug bounty program
Introduction
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
So you wanna be a hacker? Be able to detect em first. — level: medium
I thought it a good idea to post an article on how I have (in the past) detected, and thwarted attacks on my systems. Also the best method…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
So you wanna be a hacker? Be able to detect em first. — level: medium
I thought it a good idea to post an article on how I have (in the past) detected, and thwarted attacks on my systems. Also the best method…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
So you wanna be a hacker? Be able to detect em first. — level: medium
I thought it a good idea to post an article on how I have (in the past) detected, and thwarted attacks on my systems. Also the best method…
Join PentesterLab discord : https://discord.gg/th8vRsQA
https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/
group study/sharing and learning knowledge together join pen tester labs discord https://discord.gg/th8vRsQA submitted by /u/Opposite_Ad_8926 (https://www.reddit.com/user/Opposite_Ad_8926)
[link] (https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/) [comments] (https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/)
___________________________
@hacking_Attack
@Hacking_Video
https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/
group study/sharing and learning knowledge together join pen tester labs discord https://discord.gg/th8vRsQA submitted by /u/Opposite_Ad_8926 (https://www.reddit.com/user/Opposite_Ad_8926)
[link] (https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/) [comments] (https://www.reddit.com/r/Pentesting/comments/v9uoum/join_pentesterlab_discord_httpsdiscordggth8vrsqa/)
___________________________
@hacking_Attack
@Hacking_Video
Discord
Join the PentesterLab Discord Server!
Check out the PentesterLab community on Discord - hang out with 1 other members and enjoy free voice and text chat.
Same bug different platform
At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.Continue reading on Medium »
Read more...
At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.Continue reading on Medium »
Read more...
From blind SSRF to localhost dirbusting and asset enumeration
HTML to PDF generators are, in general, known to “very challenging” when it comes to security.Continue reading on Medium »
Read more...
HTML to PDF generators are, in general, known to “very challenging” when it comes to security.Continue reading on Medium »
Read more...
WhiteBeam - Transparent Endpoint Security
http://www.kitploit.com/2022/06/whitebeam-transparent-endpoint-security.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/06/whitebeam-transparent-endpoint-security.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
WhiteBeam - Transparent Endpoint Security
Transparent endpoint security
Features Block and detect advanced attacks Modern audited cryptography: RustCrypto (https://github.com/RustCrypto) for hashing (https://www.kitploit.com/search/label/Hashing) and encryption Highly compatible: Development focused on all platforms (incl. legacy) and architectures Source available: Audits welcome Reviewed by security researchers with combined 100+ years of experience
In Action Video demonstration of detection and prevention capabilities (https://whitebeamsec.com/) Testing WhiteBeam against zeroday exploits (https://vs.whitebeamsec.com/) Recorded attacks against the WhiteBeam honeypot (https://asciinema.org/~wbhoneypot) Installation From Packages (Linux) Distro-specific packages have not been released yet for WhiteBeam, check again soon! From Releases (Linux) Download the latest release (https://github.com/WhiteBeamSec/WhiteBeam/releases) Ensure the release file hash matches the official hashes (https://www.kitploit.com/search/label/Hashes) (How-to (https://github.com/WhiteBeamSec/WhiteBeam/wiki/Verifying-file-hashes)) Install: ./whitebeam-installer install From Source (Linux) Run tests (Optional): cargo run test Compile: cargo run build Install WhiteBeam: cargo run install Quick start Become root (sudo su/su root) Set a recovery (https://www.kitploit.com/search/label/Recovery) secret. You'll be able to use this with whitebeam --auth to make changes to the system: whitebeam --setting RecoverySecret mask How to Detect Attacks with WhiteBeam Multiple guides are provided depending on your preference. Contact us (mailto:info@whitebeamsec.com) so we can help you integrate WhiteBeam with your environment. Serverless guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review osquery Fleet setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review WhiteBeam Server setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for active (https://www.kitploit.com/search/label/Active) response How to Prevent Attacks with WhiteBeam WhiteBeam is experimental software. Contact us (mailto:info@whitebeamsec.com) for assistance safely implementing it. Become root (sudo su/su root) Review the baseline at least 24 hours after installing WhiteBeam: whitebeam --baseline Add trusted behavior to the whitelist, following the whitelisting guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki) Enable WhiteBeam prevention: whitebeam --setting Prevention true
Download WhiteBeam (https://github.com/WhiteBeamSec/WhiteBeam)
___________________________
@hacking_Attack
@Hacking_Video
Features Block and detect advanced attacks Modern audited cryptography: RustCrypto (https://github.com/RustCrypto) for hashing (https://www.kitploit.com/search/label/Hashing) and encryption Highly compatible: Development focused on all platforms (incl. legacy) and architectures Source available: Audits welcome Reviewed by security researchers with combined 100+ years of experience
In Action Video demonstration of detection and prevention capabilities (https://whitebeamsec.com/) Testing WhiteBeam against zeroday exploits (https://vs.whitebeamsec.com/) Recorded attacks against the WhiteBeam honeypot (https://asciinema.org/~wbhoneypot) Installation From Packages (Linux) Distro-specific packages have not been released yet for WhiteBeam, check again soon! From Releases (Linux) Download the latest release (https://github.com/WhiteBeamSec/WhiteBeam/releases) Ensure the release file hash matches the official hashes (https://www.kitploit.com/search/label/Hashes) (How-to (https://github.com/WhiteBeamSec/WhiteBeam/wiki/Verifying-file-hashes)) Install: ./whitebeam-installer install From Source (Linux) Run tests (Optional): cargo run test Compile: cargo run build Install WhiteBeam: cargo run install Quick start Become root (sudo su/su root) Set a recovery (https://www.kitploit.com/search/label/Recovery) secret. You'll be able to use this with whitebeam --auth to make changes to the system: whitebeam --setting RecoverySecret mask How to Detect Attacks with WhiteBeam Multiple guides are provided depending on your preference. Contact us (mailto:info@whitebeamsec.com) so we can help you integrate WhiteBeam with your environment. Serverless guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review osquery Fleet setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for passive review WhiteBeam Server setup guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki), for active (https://www.kitploit.com/search/label/Active) response How to Prevent Attacks with WhiteBeam WhiteBeam is experimental software. Contact us (mailto:info@whitebeamsec.com) for assistance safely implementing it. Become root (sudo su/su root) Review the baseline at least 24 hours after installing WhiteBeam: whitebeam --baseline Add trusted behavior to the whitelist, following the whitelisting guide (https://github.com/WhiteBeamSec/WhiteBeam/wiki) Enable WhiteBeam prevention: whitebeam --setting Prevention true
Download WhiteBeam (https://github.com/WhiteBeamSec/WhiteBeam)
___________________________
@hacking_Attack
@Hacking_Video
GitHub
Rust Crypto
Cryptographic algorithms written in pure Rust. Rust Crypto has 40 repositories available. Follow their code on GitHub.
Same bug different platform
https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5
At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.Continue reading on Medium » (https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5
At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.Continue reading on Medium » (https://prajwoldhungana487.medium.com/same-bug-different-platform-4c648e91af6b?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
Medium
Same bug different platform
At the moment I am on a break from the Bug hunting so thought of writing this article about a bug I found couple of months ago.
From blind SSRF to localhost dirbusting and asset enumeration
https://medium.com/@joshibeast/from-blind-ssrf-to-localhost-dirbusting-and-asset-enumeration-dc0179310038?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
https://medium.com/@joshibeast/from-blind-ssrf-to-localhost-dirbusting-and-asset-enumeration-dc0179310038?source=rss------bug_bounty-5
___________________________
@hacking_Attack
@Hacking_Video
Medium
From blind SSRF to localhost dirbusting and asset enumeration
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.
HTML to PDF generators are, in general, known to “very challenging” when it comes to security.Continue reading on Medium » (https://medium.com/@joshibeast/from-blind-ssrf-to-localhost-dirbusting-and-asset-enumeration-dc0179310038?source=rss------bug_bounty-5)
___________________________
@hacking_Attack
@Hacking_Video
___________________________
@hacking_Attack
@Hacking_Video
Medium
From blind SSRF to localhost dirbusting and asset enumeration
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe- Frank and Herby try again walkthrough
https://cdn-images-1.medium.com/max/992/1*QF8OXEVXLCMCuO5i4jfpKQ.png
This is the walkthrough of the machine frank and herby try again from TryHackMe.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
TryHackMe- Frank and Herby try again walkthrough
https://cdn-images-1.medium.com/max/992/1*QF8OXEVXLCMCuO5i4jfpKQ.png
This is the walkthrough of the machine frank and herby try again from TryHackMe.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
TryHackMe- Frank and Herby try again walkthrough
This is the walkthrough of the machine frank and herby try again from TryHackMe.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
From blind SSRF to localhost dirbusting and asset enumeration
https://cdn-images-1.medium.com/max/789/1*0SZ7naSUSS3FbzOuBZ-cNQ.png
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
From blind SSRF to localhost dirbusting and asset enumeration
https://cdn-images-1.medium.com/max/789/1*0SZ7naSUSS3FbzOuBZ-cNQ.png
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
From blind SSRF to localhost dirbusting and asset enumeration
Story about how inconsistent printing of img alt tag in WeasyPrint pdf generator can turn blind SSRF into localhost dirbuster.