hacking: security in practice
ffuf can’t find txt file

I’ve been trying to run the command ffuf -u https://website.com/FUZZ -w code.txt and ffuf -u https://website.com/FUZZ -w ./code It says 1 errors occured. *stat code.txt: no such file or directory

The code.txt file is located on the D drive, I tried moving it to C drive too. How do I get ffuf to find the file?

submitted by /u/wahedstrijder
[link] [comments]

hacking: security in practice
stealing logins with cookies

Hello black hoodie wearers of Reddit,

Today I had a interesting discussion with a colleague of mine. We thought about how login data is stored on the internet. To my knowledge a website stores login data, e.g. when I login into a forum and store the login so I am already logged in when I visit the site next time, in the form of cookies. Now, I that’s true, what would happen if I took the cookie from one computer, copied it to a usb stick and copied it to the right place on another computer? How is it prevented that someone takes the cookies and logs in with them?

submitted by /u/Schievel1
[link] [comments]

hacking: security in practice
ffuf txt file defined, but not found in headers, method, URL or POST data

The command ffuf -u https://codingo.com/FUZZ/ -w D:/code.txt gives the following error I wrote in the title. (Keyword /code.txt defined, but not in headers, method, URL or POST data. What can I do to fix it?

submitted by /u/wahedstrijder
[link] [comments]

Dark Reading: Attacks/Breaches
DHS Review Board Deems Log4j an 'Endemic' Cyber Threat

Vulnerability will remain a "significant" threat for years to come and highlighted the need for more public and private sector support for open source software ecosystem, Cyber Safety Review Board says.

Dark Reading: Attacks/Breaches
New Phishing Kit Hijacks WordPress Sites for PayPal Scam

Attackers use scam security checks to steal victims' government documents, photos, banking information, and email passwords, researchers warn.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Bishop Fox Secures $75 Million in Growth Funding From Carrick Capital Partners

Offensive security leader continues to defy market and economic trends with record growth and recognized innovation.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ex ingeniero de la CIA condenado por filtrar herramientas de piratería de ‘Vault 7’ a Wikileaks

https://cdn-images-1.medium.com/max/1200/0*uOXfhtIK0uGdRe8F.jpg
PUBLICADO EN 14 JULIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El nuevo ataque de ejecución especulativa ‘Retbleed’ afecta a las CPU AMD e Intel

https://cdn-images-1.medium.com/max/1699/0*fbIEUkC6VH6yhLYq
PUBLICADO EN 14 JULIO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HACKER DOUBLE SUMMER 2022 GUIDES — Part Ten: The Diana Initiative

https://cdn-images-1.medium.com/max/782/1*YzH5fkPPDNNysEzEbzrfvA.png
Welcome to the DCG 201 guide to Hacker Double Summer! This is part of a series where we are going to cover all the various hacker…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Internet [part -II]- few famous Cyber attacks after the Internet was publicised.

https://cdn-images-1.medium.com/max/1248/1*Q2MX8zIrP9IOQmL1U2EA4A.jpeg
Cyber Attack — it’s not a word that is reserved for techies and huge corporations alone anymore . It is out in the air , happening all…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Secure hacking

Hi community,

I currently have a personal mac computer that I use for studying and to access bank accounts and etc. I use Kali Linux in a VMware and I'm learning to do a lot of OSINT but I'm not sure if I'm safe using it on my personal computer even if using in a virtual machine. Do I have any risks by doing this? If so would you guys recommend using a spare computer to do that? How can I maximize security on my side?

​

I also have a spare computer that I have installed windows + kali linux bare metal. Should I use this to carry out my OSINT?

​

Also, VPN would increase my security?

​

Thanks in advance.

submitted by /u/Tekeia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any distro for forensic blue team?

Hi, I always see tools and distros specialized in pentesting or otherwise for redteam. So I would like to know if there are any specialized distros for the blue team. By the way, tools like "responder" and distributions like Kali, currently have some rasomwares also something I found in debian and Ubuntu, does anyone know anything about that? I was seeing that no one has talked about this, it is even rare that situation.

submitted by /u/jazhield
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Malware scripting for windows

Question, what language do you consider the best for low level (networking, keylogger etc) scripting? As far as i know linux uses shell but after searching online i couldn't find in what language windows targeting malware is written in.

submitted by /u/shurikkenn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Can SMTP be used for anything other than Recon (& emailing)?

I’ve been stuck on a CTF for awhile, and all the machine has open is: DNS, SMTP, and SSH. I’ve done the User Enumeration from SMTP, and I’m assuming that one of them can be used for SSH later, but an entire day of unsuccessful Brute-Forcing with Hydra makes me think I’m missing something. One of the “users” is MySQL, but I don’t think I can do anything with that until I SSH in.

TL;DR

All the guides I see online for Pen-testing SMTP servers are about User Enumeration or sending spoofed emails. Is that all SMTP is good for?

If any 1337 hackers have advice for a noob, I’d really appreciate it. Thanks for your time!

submitted by /u/Agent-BTZ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does reconnaissance work in real life?

When I do CTF or hackthebox, I usually don't hesitate to launch nmap/burp to scan everything I can to gather as much info as possible. However, I imagine in real life security systems will detect unusual activity after a reasonable amount of probes. So how does this work in real life? It seems to me that any scanning probes would be immediately banned. How do pentesters overcome this?

submitted by /u/kasssom
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Paramspider lead to find SQLI vulnerability
https://medium.com/@arshiadev/paramspider-lead-to-find-sqli-vulnerability-995f6159564c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video