Finding 0-days in Enterprise Application

A tale of ‘Site-wide Account Takeover’Continue reading on InfoSec Write-ups »
Read more...

Pivoting For Pentesters
https://www.reddit.com/r/Pentesting/comments/w1dsgw/pivoting_for_pentesters/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/subsonic68 (https://www.reddit.com/user/subsonic68)
[link] (https://www.stevencampbell.info/Pivoting-for-pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/w1dsgw/pivoting_for_pentesters/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
FFUF-ing RECON

https://cdn-images-1.medium.com/max/720/1*o29QbJycAhYssrg274Fz5w.png
, or how to get to P1–P3 from a slightly different recon

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Library Gateway | Defend the Web

https://cdn-images-1.medium.com/max/700/0*juf7MF9hVYHl-_5s.jpg
If you read a new book on web development, by the time you finished it’ll be outdated

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Gauing+Nuclei for Instant Bounties

https://cdn-images-1.medium.com/max/600/1*-Y-J5Wr8hevwoACejD1WmA.png
Back again with the instant bounties series. Last time we learned how to score instant bounties with Google dorks so check that out if you…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers hacking your crypto accounts to save your money from thieves

https://cdn-images-1.medium.com/max/960/0*-hncJym_W_Uu3LyW.jpg
As hackers attack crypto accounts and Web3 projects, heroes emerge to fight back.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Masters Programs in Cybersecurity

Masters Programs in Cybersecurity

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Полезные и эффективные алгоритмы для эллиптической кривой secp256k1

https://cdn-images-1.medium.com/max/800/0*TFwApqSDFum3Ps1K.png
В этой статье мы рассмотрим несколько полезных и эффективных алгоритмов для эллиптической кривой E над полем GF(p) , заданной коротким…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Understanding and Exploiting Graph QL

https://cdn-images-1.medium.com/max/1342/0*dAyRNkMHbEXt4RQA
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How does Shodan grab RDP screenshots of Windows machines, post-Server 2003?

Hi folks,

Something I've been curious about is how Shodan manages to grab screenshots of unauthenticated Console sessions ("RDP Screenshots") on machines newer than Server 2003, and how I can do the same from my machine. On Server 2003 and older, you can use the -console flag with mstsc.exe (e.g. mstsc -v:(Hostname or IP Address) -console) to initiate this console session, and present a logon screen as if you were physically at the device, with no authentication needed.

However, this was removed in Server 2008 for obvious security reasons, and trying to use the -console flag to connect to a Server 2008 and later machine is ignored - you are prompted for authentication and if successful enter a standard RDP session.

Does anyone know how Shodan does it? Thanks in advance!

submitted by /u/BloodyGenius
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Open innovation: it sounds like a good idea, but in reality…

https://cdn-images-1.medium.com/max/1280/1*bcKtyaLEJsQk2bWSE0VbCg.jpeg
Experience has led me to be increasingly skeptical about open innovation programs in large companies: in most cases I know, the mindset is…

Continue reading on Enrique Dans »

___________________________
@hacking_Attack
@Hacking_Video