Hacking on Medium
How I found my first RCE!

https://cdn-images-1.medium.com/max/600/0*8qjdds8s4qEkojdN
Remote code executions (RCEs) are dreams of all, but only some of them have found it. This story is about how I was able to find my RCE…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How to study Cyber Security on your own for free?

This was always the question in my mind from the very beginning and after studying for months and doing deep analysis and research, I came…Continue reading on Medium »
Read more...

hacking: security in practice
$4.7M Stolen in Uniswap Fake Token Phishing Attack

https://external-preview.redd.it/CFtmf2ynyhdkH8IjWXEZT7s97kCC7xzpmEAA4JnPpg8.jpg?width=640&crop=smart&auto=webp&s=10472ca0d4c400368322175a1619a2344a5297fc submitted by /u/skiingbog
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SOS Devices

So I have an elderly relative living alone and she falls a lot but there's nobody to help and she's really bad with smartphones and technology altogether. I am trying to think of a way to give her an sos device so that she can push one simple big red button and that this would call police or ambulance for help. I have seen little devices online but they all link to some app and that's too complicated for her. I basically need a remote with 1 big button that when pressed does an automatic dial to an emergency number to call for help. Any ideas?

submitted by /u/SuperSoakerGuyx
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brute forcing a website link

Let's say there is a example website with parameters Id and Name in the link.

https://www.website.com/home/login?Id=A45NB6&Name=John

With the name known the goal is to brute force Id which consist of 6 random uppercase alphanumeric characters. If the Id doesn't exist for the name the link will send you to https://www.website.com/error

So for the Id there are around 2 billion possible combinations. What are fast ways / programs to use to find the right Id? The website doesn't have any captcha or limited attempts per IP address.

submitted by /u/pduk19
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hackers stole $620 million from Axie Infinity via fake job interviews

https://external-preview.redd.it/hlDDymgKU27S22utvn64iyFOqJalHjKNcP-VV_LsPco.jpg?width=640&crop=smart&auto=webp&s=b3c18093a197d5c8cc590860b1df99f77274d158 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any way to get someone's Gmail password using a website without any input from the user?

As the title says, me and my friend were wondering if there's a way to make a website, that would be able to get anyone's Gmail password, just by them visiting the site?

submitted by /u/IronDeer_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

BEST FREE PHP COURSES ONLINE
https://www.reddit.com/r/Pentesting/comments/vy5ois/best_free_php_courses_online/

BEST FREE PHP COURSES ONLINE PHP for Beginners — Become a PHP Master — CMS Project This is simply the best course to learn PHP from scratch and if you have to choose one course, buy this one. This is a comprehensive course, but the instructor breaks it down pretty well so that you are not overwhelmed. This course is very in-depth. Support was top-notch whenever I needed it. This is a project-based course and there is a lot of practice exercises. Every section inside this course has a practice lecture at the end, reinforcing everything with went over in the lectures. ENROLL NOW (https://pentestingguide.com/free-php-courses-for-beginners/) Object-Oriented PHP & MVC This is a great course to learn PHP by none other than Brad Traversy, one of my favorite instructors on Udemy and Youtube, and this is another gem from him. In this course, we will go step by step to build a complete custom MVC (Model View Controller) framework Called TraversyMVC using object-oriented PHP. We will build something similar to Codeigniter but much much lighter. ENROLL NOW (https://pentestingguide.com/free-php-courses-for-beginners/) Beginner PHP and MySQL Tutorial This is another one of the best free courses to learn PHP and MySQL tutorials. It’s a free course but much better than several other PHP and MySQL paid courses you will find on Udemy. The course is very well structured and teaches you all the essential PHP and MySQL concepts, tools, and resources you need to build your web application. ENROLL NOW (https://pentestingguide.com/free-php-courses-for-beginners/) Building Web Applications in PHP This is another awesome free course for learning Web development using PHP on Coursera. This course is offered by none other than the University of Michigan, one of the top universities. In this course, you’ll learn the basic structure of a web application, and how a web browser interacts with a web server. You’ll learn about the request/response cycle, including GET/POST/Redirect. ENROLL NOW (https://pentestingguide.com/free-php-courses-for-beginners/) Creating a Simple Newsletter Signup — PHP and MySQL This is another awesome free course to learn PHP and MySQL from Udemy. While the previous course was great in terms of educating you with PHP and MySQL and showing some of the essential stuff, you really need to do a project by yourself to apply whatever you have learned. This is critical for your learning and this is what this course teaches you. ENROLL (https://pentestingguide.com/free-php-courses-for-beginners/) NOW (https://pentestingguide.com/free-php-courses-for-beginners/) submitted by /u/Effective-End5561 (https://www.reddit.com/user/Effective-End5561)
[link] (https://www.reddit.com/r/Pentesting/comments/vy5ois/best_free_php_courses_online/) [comments] (https://www.reddit.com/r/Pentesting/comments/vy5ois/best_free_php_courses_online/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Sourcegraph gitserver sshCommand Remote Command Execution

___________________________
@hacking_Attack
@Hacking_Video

Useful Offensive Snippets
https://int0x33.medium.com/useful-offensive-snippets-823a322669f7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I will update this post regularly, I am starting with a few of my most commonly used snippets.Continue reading on Medium » (https://int0x33.medium.com/useful-offensive-snippets-823a322669f7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Useful Offensive Snippets

I will update this post regularly, I am starting with a few of my most commonly used snippets.Continue reading on Medium »
Read more...

OTP Bypass via Response Manipulation
https://medium.com/@tariqrafiqkehar1/otp-bypass-via-response-manipulation-cda985e37e65?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Readers, I am Tariq Rafiq Kehar , a bug hunter.Continue reading on Medium » (https://medium.com/@tariqrafiqkehar1/otp-bypass-via-response-manipulation-cda985e37e65?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
3 Golden Rules of Modern Third-Party Risk Management

It's time to expand the approach of TPRM solutions so risk management is more effective in the digital world.