How I hacked one of the biggest Airline in the world
https://medium.com/@sazouki/how-i-hacked-one-of-the-biggest-airline-in-the-world-e7810dc43791?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Bug Bounty community, this is my first write up about a bug that I managed to takeover all accounts in one of well known Airline in…Continue reading on Medium » (https://medium.com/@sazouki/how-i-hacked-one-of-the-biggest-airline-in-the-world-e7810dc43791?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I hacked one of the biggest Airline in the world

Hello Bug Bounty community, this is my first write up about a bug that I managed to takeover all accounts in one of well known Airline in…Continue reading on Medium »
Read more...

OAuth Misconfiguration Leads To Pre-Account Takeover

Hello,Continue reading on Medium »
Read more...

hacking: security in practice
how long does brute force last

If you don't know their password could it possibly take years before you crack it? Depending on the length of their password

submitted by /u/Energy_Swimming
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Some Charles Proxy Activation Codes for Pentesters

Charles is somewhat similar to Burpsuite

Username: Irankai4a3

[Key]: 343BA06C69CD3E0875

------------------------

Username: Irankailrs

[Key]: 6232E1951B3FA6290B

------------------------

Username: Irankaioi7

[Key]: B0C06D5D29014FCACB

------------------------

Username: Irankai36y

[Key]: 599DDC6831090EE1FE

------------------------

Username: Irankai122

[Key]: 31219988D0E4C4FD5F

------------------------

Username: Irankaigsv

[Key]: 8DB5D87D84397D6448

------------------------

Username: Irankaieuz

[Key]: B5768248ADDE5AC6FF

------------------------

Username: Irankaiv84

[Key]: 702E6FB8DBA1AFB8CF

------------------------

Username: Irankaidiy

[Key]: 1DC869ABD8C55BDAB4

------------------------

​

Do comment if you redeemed

submitted by /u/irankai
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My neighbor is causing trouble in the neighborhood

This young fellow in an adjacent house is stealing essentially all of my parents, (who happen to be my neighbors), bandwidth. He is causing some sort of issue that makes it impossible to use any of their devices on wifi. I have reset their network numerous times and changed all login info and within days, their devices are unable to use the network and unknown devices are shown. My house is the second closest to his and I am also having very regular issues with greatly limited wireless bandwidth although I am on fiber. I have gone through 3 routers with various security protocols and have resorted to hard line connections wherever possible. I am concerned that he may be involved in further nefarious activity while having access to our networks. He is very stand-offish and always sits in his screened in porch, hidden in a corner on his laptop. I am 99% sure it is him, knowing the rest of my neighbors. What is my recourse? How do I protect myself and my folks? Help please.

submitted by /u/Ship_Adrift
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do I brute force my admin's passcode on Windows 10?

I'm trying to hack into my parent's account, but I can't seem to find a way (without installing any crap) on how to do it (Maybe with CMD, Python...) If you could help me, I'd appreciate it if you let a comment. Thank you!

submitted by /u/IguanaaaMBB
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Nightingale - Docker Environment For Pentesting Which Having All The Required Tool For VAPT
http://www.kitploit.com/2022/06/nightingale-docker-environment-for.html

___________________________
@hacking_Attack
@Hacking_Video

In today's technological era, docker is the most powerful technology in each and every domain, whether it is Development, cyber security, DevOps, Automation, or Infrastructure. Considering the demand of the industry, I would like to introduce my idea to create a NIGHTINGALE: docker image for pentesters. This docker image is ready to use environment will the required tools that are needed at the time of pentesting on any of the scopes, whether it can be web application penetration testing, network penetration testing, mobile, API, OSINT, or Forensics. The best part is you can either create an altered docker image or pull the pre-built docker image from the hub. Some of the best features are listed below, I would highly recommend going through it and starting penetrating into the application. Link to access tool list : tool list (https://owasp.org/www-project-nightingale/)
Pros No need to install multiple programming language support and multiple modules. Booting process is very fast as per the virtualization (https://www.kitploit.com/search/label/Virtualization) concept. Need as per use resource of the host machine. All pre-install tools are installed and if you install any new software or tool use can go with that option. You can perform vulnerability assessment (https://www.kitploit.com/search/label/Vulnerability%20Assessment) and penetration testing (https://www.kitploit.com/search/label/Penetration%20Testing) of any scope. You can access this docker container via browser by calling your local address. Cons You can run the container over cloud server but can’t perform mobile pentesting. Creating tunnel with SSH can’t help you to provide the connection to your physical device or virtual environment. Why? The Reason behind creating this Docker file is to make a platform-independent penetration toolkit. It includes all the useful tools that will be required for a penetration tester (You can refer to the tool list section for the same). Architecture Diagram of the NIGHTINGALE. Diagram (https://github.com/RAJANAGORI/Nightingale/blob/main/assets/images/architecture.jpg) Docker Image Build and Run Take a clone of the repository git clone --depth 1 https://github.com/RAJANAGORI/Nightingale.git
Change the Directory cd Nightingale
Now build the Docker Image. docker build -t rajanagori/nightingale .
After Creating the Docker Image, Login into the image and Happy Hacking.... ;-) docker run -ti --hostname nightingale rajanagori/nightingale /bin/bash
Now, you can directly access Nightingale interactive terminal using the browser docker run -it -p 0.0.0.0:8080:7681 -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash
If you want to run MobSF along with the nightingale then I will give you good news now you can do the same....!! part 1 docker run -it -p 0.0.0.0:8080:7681 -p 0.0.0.0:8081:8081 -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash
part 2 cd /home/tools_mobile_vapt/Mobile-Security-Framework-MobSF/
source venv/bin/activate
./run 0.0.0.0:8081 &
Call your browser and hit 127.0.0.1:8080 for the nightingale terminal and 127.0.0.1:8081 for MobFs to become you will be prooo!!!! If you want to bind your host machine directory to your container directory then you can do the same. docker run -it -p 0.0.0.0:8080:7681 -p 0.0.0.0:8081:8081 -v /:/ -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash
For Localtunnel Hit 127.0.0.1:8080 in your browser and you will be able to access the Nightingale terminal Now, run the following command in your terminal nvm install v16.14.0 && npm install -g localtunnel
and hit this command lt --port 7681 --subdomain nightingale
Now, Click on the link generated and have fun with Nightingale !!! To start, Restart and Stop the Postgresql database To start the service service postgresql start
To Restart the service service postgresql restart

___________________________
@hacking_Attack
@Hacking_Video

To Stop the service service postgresql stop
Note: Use of Postgresql is for msfConsole. Please feel free to contribute to the tool

Download Nightingale (https://github.com/RAJANAGORI/Nightingale)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
30K Microsoft Exchange Servers Again Vulnerable to New Tactics

https://cdn-images-1.medium.com/max/640/0*g_HP2BA0XhJU8PTm.jpg
30K Microsoft Exchange Servers Again Vulnerable to New Tactics

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Write-up: Exploiting XSS to perform CSRF @ PortSwigger Academy

https://cdn-images-1.medium.com/max/843/0*s6LonCiraQMIGw7z.png
This write-up for the lab Exploiting XSS to perform CSRF is part of my walk-through series for PortSwigger’s Web Security Academy.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Frauds on Instagram (Part 1)

https://cdn-images-1.medium.com/max/2500/1*4eLj9bArS2MDm_Z9EZ4cpQ.png
I would love to call them Frauds instead of hackers because they are using cheap social engineering tricks to manipulate naïve people and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video