The Cross Site Scripting Guide
https://medium.com/@tobydavenn/the-cross-site-scripting-guide-8a878a709a7b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, I hope this reaches everyone well. I am going to be giving a detailed guide all about Cross Site Scripting (XSS). Many times I have…Continue reading on Medium » (https://medium.com/@tobydavenn/the-cross-site-scripting-guide-8a878a709a7b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Cross Site Scripting Guide

Hello, I hope this reaches everyone well. I am going to be giving a detailed guide all about Cross Site Scripting (XSS). Many times I have…Continue reading on Medium »
Read more...

Exploit Collector
Windows Kerberos KerbRetrieveEncodedTicketMessage AppContainer Privilege Escalation

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
On Windows 11, the Kerberos SSP's KerbRetrieveEncodedTicketMessage message can be used to get an arbitrary service ticket and session key from an AppContainer even without the enterprise authentication capability leading to elevation of privilege.

SHA-256 | 78434d5ce4cfd024dc8d980cdbc2c6c5bfc491c59fd75bca49f3b74f62b3a77a

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

A Simple Buffer Overflow Demonstration — Part 1

Hello Security folks, In today’s article, We will be talking on Buffer Overflow Attacks. As the topic is vast, we will be diversifying the…Continue reading on Medium »
Read more...

A Simple Buffer Overflow Demonstration — Part 1
https://medium.com/@tejas.kand.45/a-simple-buffer-overflow-demonstration-part-1-9e1b88686610?source=rss------bug_bounty-5

Hello Security folks, In today’s article, We will be talking on Buffer Overflow Attacks. As the topic is vast, we will be diversifying the…Continue reading on Medium » (https://medium.com/@tejas.kand.45/a-simple-buffer-overflow-demonstration-part-1-9e1b88686610?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Inside NIST's 4 Crypto Algorithms for a Post-Quantum World

With the world potentially less than a decade away from breaking current encryption around critical data, researchers weigh in on planning for the post-quantum world.

Dark Reading: Attacks/Breaches
Cybersecurity Has a Talent Shortage & Non-Technical People Offer a Way Out

It's time to tap the large reservoir of talent with analytical skills to help tackle cybersecurity problems. Train workers in cybersecurity details while using their ability to solve problems.

Dark Reading: Attacks/Breaches
Empower Your Security Operations Team to Combat Emerging Threats

When examining the modern threat landscape, empowering your security operations and overcoming the limitations inherent with other malware prevention solutions is imperative.

Dark Reading: Attacks/Breaches
Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover

Improper implementations of authentication APIs at a global crypto wallet service provider could have resulted in the loss of account control — and millions of dollars — from personal and business accounts.

hacking: security in practice
A few hundred methods to coerce a windows machine to authenticate to a Windows Machine through RPC

submitted by /u/Ooggle
[link] [comments]

hacking: security in practice
Terminals: tmux or Hyper? What is your favourite?

Currently I'm using Hyper terminal since it appears fancy even there are aspects I don't like as the absence of -e argument for running subcommands (useful on third-party applications). I used tmux time ago but I never went deeply on it. In your expercience, which one do you prefer among them? And why?

submitted by /u/D3vil0p
[link] [comments]

hacking: security in practice
Is it possible to use dorking to look for gf’s Twitter likes

Not really looking to hack. Just wondering if I can use a query to see her likes.

submitted by /u/CryBeneficial9214
[link] [comments]

hacking: security in practice
Get access to wifi

Hello! This is kind off a weird question but here goes: I rented an Airbnb for a few days. It said that it had wifi, the person giving me the keys said that it didn’t. I looked around and found the router and the box it came in. I tried the password on the back of the router but it didn’t work. Is there any way I can get access to the wifi? (Yes I am messaging them and Airbnb support)

submitted by /u/PartyPlayHD
[link] [comments]

hacking: security in practice
Brute forcing zip archive password

I have been searching for last 30 minutes but no luck. There is one program, but its for rar, so no use here. Also I'm on windows, which is very limiting, a lot of that stuff is for linux.

I know that password should be 2-6 characters long, probably only small characters and numbers. It should be reasonably easy to brute force it, if application for that exists. Unfortunately I couldn't find anything.

submitted by /u/Vichex52
[link] [comments]

hacking: security in practice
I want to got into hacking. How could i start?

I've been wanting too for a while, But how could I?

submitted by /u/AutumnTheidiot
[link] [comments]