Hacking on Medium
What is Hacker Inc?

https://cdn-images-1.medium.com/max/770/1*X_ojoixQJjfwjaQtt1sDzA.jpeg
What is Hacker, Inc? Simply put, Hacker, Inc is a black hat firm dedicated to aggressively and offensively serving the needs of its global…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackThisSite Extended Basic Mission 2

https://cdn-images-1.medium.com/max/700/0*nuhzWV73QgGJhD8_.jpg
Onto the next mission, instead of a buffer overflow attack now we get to practice directory traversing. If you don’t know much about PHP…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The terrifying world of Cross-Site Scripting (XSS) (Part 2) — StackZero

https://cdn-images-1.medium.com/max/1280/1*55mfYgdaxF8YQrh2hCPilQ.jpeg
We are going to build a web application vulnerable to all XSS types and see how to exploit and mitigate the vulnerabilities.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Problems Reverse Shell
https://www.reddit.com/r/Pentesting/comments/vbr4my/problems_reverse_shell/

I am not getting a reverse shell, for getting started, I uploaded a web shell and now I have an access with a www-data user. Make my attempted using :Bash script, Python script, PHP script, NetCat, MsfVenom (Encoded, Non Encoded), but no successful. What it's looks like it is a UFW blocking all or almost outgoing ports, but what I have a question about it, Once I have comunication using HTTP Protocol, I can presume that I'm have not problem with routes, I thought which I needed add a route manually, but the user does not have permission. ​ I need tips, anyone can help with it? submitted by /u/huge_cock_123 (https://www.reddit.com/user/huge_cock_123)
[link] (https://www.reddit.com/r/Pentesting/comments/vbr4my/problems_reverse_shell/) [comments] (https://www.reddit.com/r/Pentesting/comments/vbr4my/problems_reverse_shell/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Ransomware gangs are actively exploiting CVE-2022-26134 remote code execution (RCE) flaw in Atlassian Confluence Server and Data Center.

https://external-preview.redd.it/OslTnAwiWvY6_N7zpv7BljbqGDNOliRJx6DSPvgAjb4.jpg?width=216&crop=smart&auto=webp&s=7c8d5cf0ab0e7326edc3a952b90d40fcbfea8895 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What software of brute force attack can I download to recover passwords?

I already have a file with more than 10k of words in there, including words I use day to day, related to my family and such and now the only thing I need is a good brute force attack software.

submitted by /u/toodip
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to retrieve the password to this type of password protection for static pages? It uses the SHA1 hash of the password.

https://github.com/matteobrusa/Password-protection-for-static-pages

submitted by /u/theonewithgeass
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

2FA Bypass via Basic Authentication on private bug bounty program
https://medium.com/@sharp488/2fa-bypass-via-basic-authentication-on-private-bug-bounty-program-93bb457cd065?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Friends,Continue reading on Medium » (https://medium.com/@sharp488/2fa-bypass-via-basic-authentication-on-private-bug-bounty-program-93bb457cd065?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

403 bypass on a fortune 100 financial institution (P3)
https://medium.com/@damaidec/403-bypass-on-a-fortune-100-financial-institution-p3-156d33bc6ed?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This is my first P3 Bug and I found it after just a few hours. The method I learned from the Ambassador world cup CTF I used it here in…Continue reading on Medium » (https://medium.com/@damaidec/403-bypass-on-a-fortune-100-financial-institution-p3-156d33bc6ed?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

2FA Bypass via Basic Authentication on private bug bounty program

Hello Friends,Continue reading on Medium »
Read more...

403 bypass on a fortune 100 financial institution (P3)

This is my first P3 Bug and I found it after just a few hours. The method I learned from the Ambassador world cup CTF I used it here in…Continue reading on Medium »
Read more...