hacking: security in practice
hello

Hi I am new to code and hacking and was wondering if anyone has any tips to help me start learning.

submitted by /u/Bless_song_king
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Paymoapp.com Take Bug But Didn’t Pay My Hardwork
https://medium.com/@SAFISEC/paymoapp-com-take-bug-but-didnt-pay-my-hardwork-bbb0b37bb90b?source=rss------bug_bounty-5

Multiple Stored XSS Endpoints On app.paymoapp.comContinue reading on Medium » (https://medium.com/@SAFISEC/paymoapp-com-take-bug-but-didnt-pay-my-hardwork-bbb0b37bb90b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Paymoapp.com Take Bug But Didn’t Pay My Hardwork

Multiple Stored XSS Endpoints On app.paymoapp.comContinue reading on Medium »
Read more...

Hacking on Medium
Intigriti June 2022 XSS Challenge Writeup

https://cdn-images-1.medium.com/max/745/1*OWMOW5hD3I-0qE6aHyFd_Q.png
Target

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Paymoapp.com Take Bug But Didn’t Pay My Hardwork

Multiple Stored XSS Endpoints On app.paymoapp.com

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Cyber Security adalah suatu aktivitas yang dilakukan dengan tujuan untuk mengamankan serta mencegah…

Dengan banyaknya kejadian cyber crime di seluruh dunia, ada baiknya kita harus menghasilkan dan mengumpulkan orang orang yang mahir dalam…Continue reading on Medium »
Read more...

HackerOne — Getting Started

So HackerOne was one of my favorite places to practice. I stopped completing the challenges so the invites could be used at a later time…Continue reading on Medium »
Read more...

Cyber Security adalah suatu aktivitas yang dilakukan dengan tujuan untuk mengamankan serta mencegah…
https://medium.com/@frozzipies/cyber-security-adalah-suatu-aktivitas-yang-dilakukan-dengan-tujuan-untuk-mengamankan-serta-mencegah-58720a0e17a2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Dengan banyaknya kejadian cyber crime di seluruh dunia, ada baiknya kita harus menghasilkan dan mengumpulkan orang orang yang mahir dalam…Continue reading on Medium » (https://medium.com/@frozzipies/cyber-security-adalah-suatu-aktivitas-yang-dilakukan-dengan-tujuan-untuk-mengamankan-serta-mencegah-58720a0e17a2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

HackerOne — Getting Started
https://medium.com/@prince0f4llsaiyanz/hackerone-getting-started-811aec7b0ffb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

So HackerOne was one of my favorite places to practice. I stopped completing the challenges so the invites could be used at a later time…Continue reading on Medium » (https://medium.com/@prince0f4llsaiyanz/hackerone-getting-started-811aec7b0ffb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Specific on Tricks to get people into infecting their devices by disgising LockBit ransomware as copyright claims.

https://external-preview.redd.it/uFkgCBXPuEdwRGqV5JAu0_KucD3GvtBR7s8KuBLSDfY.jpg?width=640&crop=smart&auto=webp&s=7c41fb8c397842e2b4d376e541c3eaab2d3963d6 submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://a.thumbs.redditmedia.com/fThS6Uv788dNdJkDrgBS6kZnHWghOijMmvi0cLqfi28.jpg Multiple command prompts like this pop up on my screen very often and I'm worried that someone has backdoor access to my laptop. They pop up for a few seconds and then they disappear.

Any idea what this is?

​

Screenshot

submitted by /u/Daddy_is_here1
[link] [comments]

hacking: security in practice
Is it possible to find a password protected ssd hashcode?

I bought a Samsung T5 a while ago, and had set up a password for it. I know what that password was, but recently I had to change it to update I think. I've forgotten what the new password is, though, so I can't access it. I wouldn't mind factory resetting it, as it just contained my steam library, but samsung requires you to go through a ridiculous process to do a factory reset. I've looked up password crackers, but it seems like I need hashcodes for them to work, and I have no idea how to find them, or if it is even possible.

submitted by /u/realphoenix2233
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
DuplicateDump : Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

DuplicateDump is a fork of MirrorDump with following modifications:

* DInovke implementation
* LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That’s why MirrorDump failed to delete the plugin.
* PID of dump process (i.e., DuplicateDump) is shared to LSA plugin through named pipe
* Passing value “0” instead of LSASS PID to MiniDumpWriteDump. This prevent MiniDumpWriteDump from opening its own handle to LSASS

DuplicateDump add custom LSA plugin that duplicate LSASS process handle from the LSASS process to DuplicateDump. So DuplicateDump has a ready to use process handle to LSASS without invoking OpenProcess.

Testing

By loading DuplicateDump in memory, it was able to dump LSASS memory without detection on

* Symantec 14.3
* Kaspersky Enterprise
* Windows Defender

Detected by Cortex XDR, Crowdstrike. Failed to dump lsass without detection on SentinalOne.

Usage

Compile LSA plugin (export either SpLsaModeInitialize or dllMain function) and provide the full path of DLL to DuplicateDump

.\DuplicateDump.exe –help
-f, –filename=VALUE The path to write the dump file to
-p, –plugin=VALUE Full file path to LSA plugin
-c, –compress GZip and delete the dump file on disk
-d, –DebugPriv Obtain SeDebugPrivilege
-h, –help Display this help

Example

.\DuplicateDump.exe -f test -c -p C:\LSAPlugin.dll
[+] Loading LSA security package
[+] Named pipe connected and replying with current PID 6492
[+] Found duplicated LSASS process handle 0x3d0
[+] Compressed dump file saved to test.gz
Download

___________________________
@hacking_Attack
@Hacking_Video