Hacking on Medium
Cybonet — Unrestricted File Upload to Remote Code Execution

https://cdn-images-1.medium.com/max/940/1*NUZyEcLrBnYJep6I-XBVKQ.png
Highlights:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Cross Site Scripting Guide

https://cdn-images-1.medium.com/max/1000/0*X8fDMzJ6TowPGuWZ.png
Hello, I hope this reaches everyone well. I am going to be giving a detailed guide all about Cross Site Scripting (XSS). Many times I have…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Crema Finance Hacker Returns $7.6 Million, Keeps $1.6 Million as Bounty

https://cdn-images-1.medium.com/max/1000/0*HdjrksBXtmenLbmN
After exploiting Solana-based concentrated liquidity protocol Crema Finance the party responsible has returned some funds to the platform.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
VULNHUB WALKTHROUGH_2 (fourandsix)

https://cdn-images-1.medium.com/max/1811/1*JwYQmH3FaCkKDbqvth_VSg.png
2. CTF’imizin adı ‘fourandsix’.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

The Cross Site Scripting Guide
https://medium.com/@tobydavenn/the-cross-site-scripting-guide-8a878a709a7b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, I hope this reaches everyone well. I am going to be giving a detailed guide all about Cross Site Scripting (XSS). Many times I have…Continue reading on Medium » (https://medium.com/@tobydavenn/the-cross-site-scripting-guide-8a878a709a7b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Cross Site Scripting Guide

Hello, I hope this reaches everyone well. I am going to be giving a detailed guide all about Cross Site Scripting (XSS). Many times I have…Continue reading on Medium »
Read more...

Exploit Collector
Windows Kerberos KerbRetrieveEncodedTicketMessage AppContainer Privilege Escalation

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
On Windows 11, the Kerberos SSP's KerbRetrieveEncodedTicketMessage message can be used to get an arbitrary service ticket and session key from an AppContainer even without the enterprise authentication capability leading to elevation of privilege.

SHA-256 | 78434d5ce4cfd024dc8d980cdbc2c6c5bfc491c59fd75bca49f3b74f62b3a77a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

A Simple Buffer Overflow Demonstration — Part 1

Hello Security folks, In today’s article, We will be talking on Buffer Overflow Attacks. As the topic is vast, we will be diversifying the…Continue reading on Medium »
Read more...

A Simple Buffer Overflow Demonstration — Part 1
https://medium.com/@tejas.kand.45/a-simple-buffer-overflow-demonstration-part-1-9e1b88686610?source=rss------bug_bounty-5

Hello Security folks, In today’s article, We will be talking on Buffer Overflow Attacks. As the topic is vast, we will be diversifying the…Continue reading on Medium » (https://medium.com/@tejas.kand.45/a-simple-buffer-overflow-demonstration-part-1-9e1b88686610?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Inside NIST's 4 Crypto Algorithms for a Post-Quantum World

With the world potentially less than a decade away from breaking current encryption around critical data, researchers weigh in on planning for the post-quantum world.

Dark Reading: Attacks/Breaches
Cybersecurity Has a Talent Shortage & Non-Technical People Offer a Way Out

It's time to tap the large reservoir of talent with analytical skills to help tackle cybersecurity problems. Train workers in cybersecurity details while using their ability to solve problems.

Dark Reading: Attacks/Breaches
Empower Your Security Operations Team to Combat Emerging Threats

When examining the modern threat landscape, empowering your security operations and overcoming the limitations inherent with other malware prevention solutions is imperative.

Dark Reading: Attacks/Breaches
Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover

Improper implementations of authentication APIs at a global crypto wallet service provider could have resulted in the loss of account control — and millions of dollars — from personal and business accounts.

hacking: security in practice
A few hundred methods to coerce a windows machine to authenticate to a Windows Machine through RPC

submitted by /u/Ooggle
[link] [comments]