0 Day Vulnerability — URI Normalization Issue — Access the Internal Tomcat Server

Description:Continue reading on Medium »
Read more...

Linux is not used at work
https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/

I recently landed my first pentesting job at a super large company, but with a really really small red team area. I am not yet a super expert but all I have learnt about ethical hacking and pentesting was using Linux, specifically Kali. So the question is whether the red team area at work using mainly Windows is kind of normal or should I ask whether it is possible to use Linux to conduct the pentesting activities? submitted by /u/EktorMG (https://www.reddit.com/user/EktorMG)
[link] (https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/) [comments] (https://www.reddit.com/r/Pentesting/comments/va13y0/linux_is_not_used_at_work/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
RFID resources

Where can I read about RFID and RFID cloning?

submitted by /u/suspiciously_tasty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Did I get hacked? ok.ru and zendesk.com running in my network apps?(never heard of them) I live in the USA.

I have been dealing with a problem on my pc, and can't find out what it is. so I have tried everything to fix it. fresh windows reset, only crashes when I connect to the internet. I was looking in my network apps and I found an ok.ru and Zendesk.com app on my network. I never heard of them, so I blocked them and now my computer seems to be working okay, for now. should I be worried? I have only a basic understanding of computers.

submitted by /u/Matso12
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Would there be a use case for this tool?

submitted by /u/The-Lozenger
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cross-Platform XSS
https://medium.com/@1337Mo/cross-platform-xss-ac0f1873a793?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Fellows,
In this article, I will demonstrate a vulnerability idea that I have encountered multiple times lately during penetration…Continue reading on Medium » (https://medium.com/@1337Mo/cross-platform-xss-ac0f1873a793?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My first CVE-2022–31289
https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium » (https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

0 Day Vulnerability — URI Normalization Issue — Access the Internal Tomcat Server
https://medium.com/@Dhamuharker/0-day-vulnerability-uri-normalization-issue-access-the-internal-tomcat-server-8b99d9790519?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Description:Continue reading on Medium » (https://medium.com/@Dhamuharker/0-day-vulnerability-uri-normalization-issue-access-the-internal-tomcat-server-8b99d9790519?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My second CVE-2022–30930
https://medium.com/@pmmali/my-second-cve-2022-30930-4f9aab047518?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cross-Site Request Forgery (CSRF) on Open-Source software Tourism Management SystemContinue reading on Medium » (https://medium.com/@pmmali/my-second-cve-2022-30930-4f9aab047518?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

OUs and GPOs and WMI Filters, Oh My!
https://www.reddit.com/r/redteamsec/comments/va2s26/ous_and_gpos_and_wmi_filters_oh_my/

submitted by /u/5ub34x_ (https://www.reddit.com/user/5ub34x_)
[link] (https://rastamouse.me/ous-and-gpos-and-wmi-filters-oh-my/) [comments] (https://www.reddit.com/r/redteamsec/comments/va2s26/ous_and_gpos_and_wmi_filters_oh_my/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cross-Platform XSS

https://cdn-images-1.medium.com/max/1105/1*KxkzrQL-v_XWgqhDG8uSaQ.png
Hello Fellows,
In this article, I will demonstrate a vulnerability idea that I have encountered multiple times lately during penetration…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video