Hacking on Medium
“Damn Vulnerable DeFi Wargame” Challenge #4 — Side entrance Contract Analysis

https://cdn-images-1.medium.com/max/1920/1*tN70E4Q0uH0WgH7qMvM5Tw.png
Wargame Provider: @tinchoabbate

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: John The Ripper — Walkthrough

https://cdn-images-1.medium.com/max/1764/1*1EGGPKj14viwJm0NU3RnAQ.png
Hi! This is my walkthrough covering the hash cracking tool John The Ripper. I am making these walkthroughs to keep myself motivated to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What’s Behind Bypass Vulnerability of Apple Game Center?

https://cdn-images-1.medium.com/max/640/0*ASYvUcJob0AsJGVH.jpg
Apple Game Center

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
According to Google, an Italian spyware organization is hacking into various iOS and Android…

https://cdn-images-1.medium.com/max/640/0*70XJbmfSyHyDZPyw.png
A Google report has shown that the RCS Lab spyware utilizes familiar exploits to compromise individual user databases.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ukrainian Government Websites got hacked

https://cdn-images-1.medium.com/max/640/0*fmenVGkXpBlYYsaB.jpg
Hackers have targeted dozens of Ukrainian government websites, advising people to “be afraid and prepare for the worst.”
During the attack…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Beware! Public Phone Chargers New Hacking Hubs Around Delhi-NCR

https://cdn-images-1.medium.com/max/640/0*anq6-sSj67sgcjZa.jpg
Beware! Public Phone Chargers New Hacking Hubs Around Delhi-NCR

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Deep Dive Into an NSO Zero-Click iMessage Exploit

https://cdn-images-1.medium.com/max/870/0*QzPqTKXy2hYWL3cx.jpg
A deep dive into an NSO zero-click iMessage manipulate Remote Code Implementation

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
I was able to alter any user’s info, Banking info too… | IDOR Bug.

https://cdn-images-1.medium.com/max/2600/0*esZK600Zlzo4z43W
I Identify as “Ethical Student”. An amateur Bug Hunter from patriotic India who appreciates Cybersecurity.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How to find bugs : ULTIMATE TIPS

There is consistently one more bug to fix. On the off chance that we don’t fix 100% of the bugs in our site, the site will be totally…Continue reading on Medium »
Read more...

MSA Weekly 1 — “5 OS Cyber Security, kamu harus tau!”

Dimasa digital saat ini, kita tentu tidak asing dengan istilah keamanan siber atau cyber security. dikutip dari Cisco, cyber security…Continue reading on Medium »
Read more...

Scout - Lightweight URL Fuzzer And Spider: Discover A Web Server'S Undisclosed Files, Directories And VHOSTs
http://www.kitploit.com/2022/06/scout-lightweight-url-fuzzer-and-spider.html

___________________________
@hacking_Attack
@Hacking_Video

Scout is a URL fuzzer (https://www.kitploit.com/search/label/Fuzzer) and spider (https://www.kitploit.com/search/label/Spider) for discovering undisclosed VHOSTS, files and directories on a web server.
A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage Discover URLs on a given web server. version Display scout version. vhost Discover VHOSTs on a given web server. Flags: -d, --debug Enable debug logging. -h, --help help for scout -n, --no-colours Disable coloured output. -p, --parallelism int Parallel routines to use for sending requests. (default 10) -k, --skip-ssl-verify Skip SSL certificate verification. -w, --wordlist string Path to wordlist (https://www.kitploit.com/search/label/Wordlist) file. If this is not specified an internal wordlist will be used. ">Usage:
scout [command]

Available Commands:
help Help about any command
url Discover URLs on a given web server.
version Display scout version.
vhost Discover VHOSTs on a given web server.

Flags:
-d, --debug Enable debug logging.
-h, --help help for scout
-n, --no-colours Disable coloured output.
-p, --parallelism int Parallel routines to use for sending requests. (default 10)
-k, --skip-ssl-verify Skip SSL certificate verification.
-w, --wordlist string Path to wordlist file. If this is not specified an internal wordlist will be used.
Discover URLs Flags -x, --extensions File extensions to detect. (default php,htm,html,txt]) -f, --filename Filename to seek in the directory (https://www.kitploit.com/search/label/Directory) being searched. Useful when all directories report 404 status. -H, --header Extra header to send with requests e.g. -H "Cookie: PHPSESSID=blah" -c, --status-codes HTTP status codes which indicate a positive find. (default 200,400,403,500,405,204,401,301,302) -m, --method HTTP method to use. -s, --spider Scan page content for links and confirm their existence. Full example $ scout url http://192.168.1.1

[+] Target URL http://192.168.1.1
[+] Routines 10
[+] Extensions php,htm,html
[+] Positive Codes 200,302,301,400,403,500,405,204,401,301,302

[302] http://192.168.1.1/css
[302] http://192.168.1.1/js
[302] http://192.168.1.1/language
[302] http://192.168.1.1/style
[302] http://192.168.1.1/help
[401] http://192.168.1.1/index.htm
[302] http://192.168.1.1/image
[200] http://192.168.1.1/log.htm
[302] http://192.168.1.1/script
[401] http://192.168.1.1/top.html
[200] http://192.168.1.1/shares
[200] http://192.168.1.1/shares.php
[200] http://192.168.1.1/shares.htm
[200] http://192.168.1.1/shares.html
[401] http://192.168.1.1/traffic.htm
[401] http://192.168.1.1/reboot.htm
[302] http://192.168.1.1/debug
[401] http://192.168.1.1/debug.htm
[401] http://192.168.1.1/debug.html
[4 01] http://192.168.1.1/start.htm

Scan complete. 28 results found.
Discover VHOSTs $ scout vhost https://google.com

[+] Base Domain google.com
[+] Routines 10
[+] IP -
[+] Port -
[+] Using SSL true

account.google.com
accounts.google.com
blog.google.com
code.google.com
dev.google.com
local.google.com
m.google.com
mail.google.com
mobile.google.com
www.google.com
admin.google.com
chat.google.com

Scan complete. 12 results found.
Installation curl -s "https://raw.githubusercontent.com/liamg/scout/master/scripts/install.sh" | bash

Download Scout (https://github.com/liamg/scout)

___________________________
@hacking_Attack
@Hacking_Video

How to find bugs : ULTIMATE TIPS
https://medium.com/@ishantchandola9890/there-is-consistently-one-more-bug-to-fix-c5016ebde4b1?source=rss------bug_bounty-5

There is consistently one more bug to fix. On the off chance that we don’t fix 100% of the bugs in our site, the site will be totally…Continue reading on Medium » (https://medium.com/@ishantchandola9890/there-is-consistently-one-more-bug-to-fix-c5016ebde4b1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video