A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and moreContinue reading on Medium » (https://medium.com/@reconshell.com/hacker-search-engines-f20bbe276c79?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

XSS cheatsheet payloads
https://medium.com/@Anonysm/xss-cheat-payloads-d43e0461c27b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

XSS PAYLOADSContinue reading on Medium » (https://medium.com/@Anonysm/xss-cheat-payloads-d43e0461c27b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

OpenSSH CVE-2018–15473 User Enumeration Vulnerability
https://medium.com/@Dhamuharker/openssh-cve-2018-15473-user-enumeration-vulnerability-1ad8c7b6c66f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Description:Continue reading on Medium » (https://medium.com/@Dhamuharker/openssh-cve-2018-15473-user-enumeration-vulnerability-1ad8c7b6c66f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Learning OT hacking

Hi all,

Good resources to learn about OT security?

Thanks.

submitted by /u/Morgue0xFF
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to bypass the admin Wall and install a program in Windows?

For example a School computer where you want to download a program but don’t have the admin password.

submitted by /u/LucasIsaksen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Critical Infrastructure for aviation?

Hello, I have a background as an avionics technician for the military and now a private company.

Gonna be pursuing a degree in Cyber Security/Critical Infrastructure. Was wondering if anyone on this subreddit had experience in the field and any advice they could offer me as far as career plans, education, general guidance, etc.

Thanks.

submitted by /u/CookiesNCraem
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BELARUS 🇧🇾Telecom pwned for #OpRussia and #DarkLulz (and yeah, I looked… they are BREACHED. Glory to #Ukraine ✊🏻🇺🇦) #LulzSec

https://external-preview.redd.it/6PdXXYwqSkndWWozRvXP1f_D16dkuOa0CGrxrJYSdZQ.jpg?width=108&crop=smart&auto=webp&s=d5fd465d3cc9c0903318e0bec5fb4380673e3194 submitted by /u/lulzsecoperations
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing 403 Forbidden

Hey guys. I am facing a problem, the server does allow PUT method, but Apache Tomcat on version 7.0.14 gives me 403 Forbidden after using burpsuite and trying to use PUT method on it. Any ideas how to bypass that?

submitted by /u/mirahacker
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Ransomware Volume Nearly Doubles 2021 Totals in a Single Quarter

Like a hydra, every time one ransomware gang drops out (REvil or Conti), plenty more step up to fill the void (Black Basta).

Dark Reading: Attacks/Breaches
A WAF Is Not a Free Lunch: Teaching the Shift-Left Security Mindset

Developers need to think like WAF operators for security. Start with secure coding and think of Web application firewalls not as a prophylactic but as part of the secure coding test process.

Dark Reading: Attacks/Breaches
Can Zero-Knowledge Cryptography Solve Our Password Problems?

Creating temporary keys that are not stored in central repositories and time out automatically could improve security for even small businesses.

Dark Reading: Attacks/Breaches
Atlassian Confluence Exploits Peak at 100K Daily

Swarms of breach attempts against the Atlassian Confluence vulnerability are likely to continue for years, researchers say, averaging 20,000 attempts daily as of this week.

Dark Reading: Attacks/Breaches
China-Backed APT Pwns Building-Automation Systems with ProxyLogon

The previously unknown state-sponsored group is compromising industrial targets with the ShadowPad malware before burrowing deeper into networks.

Microsoft Sentinel Automation Tips & Tricks – Part 1: Automation rules
https://www.reddit.com/r/redteamsec/comments/vmsqsf/microsoft_sentinel_automation_tips_tricks_part_1/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/SentinelTipsPart1) [comments] (https://www.reddit.com/r/redteamsec/comments/vmsqsf/microsoft_sentinel_automation_tips_tricks_part_1/)

___________________________
@hacking_Attack
@Hacking_Video