Damn Vulnerable DeFi WargameContinue reading on Medium » (https://medium.com/@Zer0Luck/damn-vulnerable-defi-wargame-challenge-7-compromised-contract-analysis-%EF%B8%8F-cafc2dd11ed8?source=rss------bug_bounty-5)

Open Redirect vulnerability in igp.com
https://medium.com/@vignesh3004/open-redirect-vulnerability-in-igp-com-c1d76efc59b3?source=rss------bug_bounty-5

Hello everyone, I am Vignesh, a 20-year-old Security Researcher from TamilNadu, India.Continue reading on Medium » (https://medium.com/@vignesh3004/open-redirect-vulnerability-in-igp-com-c1d76efc59b3?source=rss------bug_bounty-5)

Open Redirect vulnerability in igp.com

Hello everyone, I am Vignesh, a 20-year-old Security Researcher from TamilNadu, India.Continue reading on Medium »
Read more...

Bpflock - eBPF Driven Security For Locking And Auditing Linux Machines
http://www.kitploit.com/2022/07/bpflock-ebpf-driven-security-for.html

or GRUB_CMDLINE_LINUX="lsm=lockdown,capability,yama,apparmor,bpf"
Update grub config with: sudo update-grub2 Reboot into your kernel. 3.2 Docker deployment To run using the default allow or privileged profile (the least secure profile): docker run --name bpflock -it --rm --cgroupns=host \
--pid=host --privileged \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock Fileless Binary Execution To log and restict fileless binary execution (https://github.com/linux-lock/bpflock/tree/main/docs/process-protections.md#fileless-memory-execution) run with: docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
-e "BPFLOCK_FILELESSLOCK_PROFILE=restricted" \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock When running under restricted profile, the container logs will display: Running under the restricted profile may break things, this is why the default profile is allow. Kernel Modules Protection To apply Kernel Modules Protection (https://github.com/linux-lock/bpflock/tree/main/docs/memory-protections.md#2-kernel-modules-protection) run with environment variable BPFLOCK_KMODLOCK_PROFILE=baseline or BPFLOCK_KMODLOCK_PROFILE=restricted: docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
-e "BPFLOCK_KMODLOCK_PROFILE=restricted" \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock Example: $ sudo unshare -p -n -f
# modprobe xfs
modprobe: ERROR: could not insert 'xfs': Operation not permitted Kernel Image Lock-down To apply Kernel Image Lock-down (https://github.com/linux-lock/bpflock/tree/main/docs/memory-protections.md#1-kernel-image-lock-down) run with environment variable BPFLOCK_KIMGLOCK_PROFILE=baseline: docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
-e "BPFLOCK_KIMGLOCK_PROFILE=baseline" \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock $ sudo unshare -f -p -n bash
# head -c 1 /dev/mem
head: cannot open '/dev/mem' for reading: Operation not permitted BPF Protection To apply bpf restriction (https://github.com/linux-lock/bpflock/tree/main/docs/memory-protections.md#3-bpf-protection) run with environment variable BPFLOCK_BPFRESTRICT_PROFILE=baseline or BPFLOCK_BPFRESTRICT_PROFILE=restricted: docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
-e "BPFLOCK_BPFRESTRICT_PROFILE=baseline" \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock Example running in a different pid and network namespaces (https://www.kitploit.com/search/label/Namespaces) and using bpftool (https://github.com/libbpf/bpftool): $ sudo unshare -f -p -n bash
# bpftool prog
Error: can't get next program: Operation not permitted Running with the -e "BPFLOCK_BPFRESTRICT_PROFILE=restricted" profile will deny bpf for all: 3.3 Configuration and Environment file Passing configuration as bind mounts can be achieved using the following command. Assuming bpflock.yaml (https://github.com/linux-lock/bpflock/blob/main/deploy/configs/bpflock/bpflock.yaml) and bpf.d profiles (https://github.com/linux-lock/bpflock/blob/main/deploy/configs/bpflock/bpf.d/) configs are in current directory inside bpflock directory, then we can just use: ls bpflock/
bpf.d bpflock.d bpflock.yaml docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
-v $(pwd)/bpflock/:/etc/bpflock \
-v /sys/kernel/:/sys/kernel/ \
-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock Passing environment variables can also be done with files using --env-file. All parameters can be passed as environment variables using the BPFLOCK_$VARIABLE_NAME=VALUE format. Example run with environment variables in a file: docker run --name bpflock -it --rm --cgroupns=host --pid=host --privileged \
--env-file bpflock.env.list \
-v /sys/kernel/:/sys/kernel/ \

-v /sys/fs/bpf:/sys/fs/bpf linuxlock/bpflock 4. Documentation Documentation files can be found here (https://github.com/linux-lock/bpflock/tree/main/docs/). 5. Build bpflock uses docker BuildKit (https://docs.docker.com/develop/develop-images/build_enhancements/) to build and Golang (https://go.dev/doc/install) to make some checks and run tests. bpflock is built inside Ubuntu container that downloads the standard golang package. Run the following to build the bpflock docker container: git submodule update --init --recursive
make Bpf programs are built using libbpf. The docker image used is Ubuntu. If you want to only build the bpf programs directly without using docker, then on Ubuntu: sudo apt install -y pkg-config bison binutils-dev build-essential \
flex libc6-dev clang-12 libllvm12 llvm-12-dev libclang-12-dev \
zlib1g-dev libelf-dev libfl-dev gcc-multilib zlib1g-dev \
libcap-dev libiberty-dev libbfd-dev Then run: make bpf-programs In this case the generated programs will be inside the ./bpf/build/... directory. Credits bpflock uses lot of resources including source code from the Cilium (https://github.com/cilium/cilium) and bcc (https://github.com/iovisor/bcc) projects. License The bpflock user space components are licensed under the Apache License, Version 2.0 (https://github.com/linux-lock/bpflock/blob/main/LICENSE). The BPF code where it is noted is licensed under the General Public License, Version 2.0 (https://github.com/linux-lock/bpflock/blob/main/src/COPYING).

Download Bpflock (https://github.com/linux-lock/bpflock)

$1.333 For Account Takeover Via Reset Password
https://medium.com/@ibnu1337/1-333-for-account-takeover-via-reset-password-349f0c455555?source=rss------bug_bounty-5

Assalamualaikum, Halo Bug Hunter!
Kali ini gw nemu celah keamanan yang Sangat Critical pada salah satu Aplikasi. Tanpa basa basi, langsung…Continue reading on Medium » (https://medium.com/@ibnu1337/1-333-for-account-takeover-via-reset-password-349f0c455555?source=rss------bug_bounty-5)

MSA Weekly 5 - “How to Get Sensitive Data Exposure on Web Application”
https://medium.com/@ajisnt1907/msa-weekly-5-how-to-get-sensitive-data-exposure-on-web-application-b2ff7483f056?source=rss------bug_bounty-5

Kategori OWASPContinue reading on Medium » (https://medium.com/@ajisnt1907/msa-weekly-5-how-to-get-sensitive-data-exposure-on-web-application-b2ff7483f056?source=rss------bug_bounty-5)

First Job as Penetration Tester (entry-level)
https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/

<!-- SC_OFF -->Hi I want to ask the essential question I am currently new to penetration I have done quite a lot of rooms in tryhackme (around 85) I do have some good base knowledge about networking and I studied the OWASP Top 10 (https://owasp.org/www-project-top-ten/) vulnerabilities and watch a lot of course about web application penetration I have some basic understanding of Metasploit Burpsuite NMAP kali Wireshark and some other tools I don't have any cert for now and I am asking please if anyone can suggest me one cert to take to get a job what would be??? I actually need this job very hard and I don't have money for oscp it's very very expensive actually please I really need a job as soon as possible <!-- SC_ON --> submitted by /u/PsychologicalMud59 (https://www.reddit.com/user/PsychologicalMud59)
[link] (https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/) [comments] (https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/)

hacking: security in practice
What are some general ways a website could dump access to cookies or passwords with permission?

I am building app and I want to be able to export user's passwords or cookies to specific websites. One way is to export cookies with an extension but I would prefer for it to be as frictionless as possible. Are their any other ways that we could do this? The user can opt-in so it doesn't need to be silent, we just want it to be easy for them. Short of typing out their password, of course.

submitted by /u/fadyman23
[link] [comments]

hacking: security in practice
Do you think Hacking/bug bounties and just messing with computers best jobs for Hikkokomori?

Hikkokomori is a person who never leaves his house. He stays inside for years due to anxiety or many other problems.

I didn't leave my house for past 7 years and stayed home I have the capacity to sit on computer for 18 to 20 hours a day messing with it. I always wished ,I had genius IQ so I can be a top level hacker and Excel in other fields of computing.

I always had a dream of making good money by teaching myself to find bugs, create or sell 2 D games or applications even make malwares.

It's childish but still😭

submitted by /u/Ok_Durian_3015
[link] [comments]

hacking: security in practice
Idea's On How to Filter Out a Pre-set MySQL Statement

I have this MySQL database pre-set statement and I am wondering if anyone has any techniques on how to essentially comment out the statement that occurs after the hackme' input.

I know -- Comment exists, but using it correctly has dumbfounded me.

hackme' was a user inputted parameter.
[ SELECT * FROM teaching_periods WHERE availability_student LIKE '% hackme' %' ORDER BY `order` ASC, code ASC ]
submitted by /u/kirik42069
[link] [comments]

hacking: security in practice
Does anyone get depressed or sad that despite hard work or perseverance they won't be as great like Marcus Hutchins or top 0.1 hackers because our their brain is wired differently?

My post is controversial and stupid. My IQ is only 84. I want to find bugs, mess with computers and learn about computing. But the mere thought of not achieving anything not even finding bug or excelling in anything makes me feel so inadequate.

They can see patterns and troubleshoot inside their head. They can think faster, code more efficiently and find explois normal plebs can't see. Marcus Hutchins started going and by his teens he reverse engineered zeus malware. Ofcourse he has genius IQ with luck.

Many hackers who are in top 0.1 are lucky high IQ prodigies. Their brain is wired differently.

submitted by /u/Ok_Durian_3015
[link] [comments]

hacking: security in practice
InfoSec Resources + Paid Course Leaks

https://1do7.github.io/blogs/InfoSec_Resources.html

submitted by /u/Useful-Shoe914
[link] [comments]

hacking: security in practice
[challenge] "Guess" the random number using a simple stack overflow

It shouldn't be a hard challenge, but it would be nice to see more than one way to solve it.

https://platform.intervee.io/challengeinfocard/guess
The link is optional, you can also read the code below:

include <stdio.h
#include <string.h#include <stdlib.h#include <time.h#include <stdio.h#include <string.h#include <stdlib.h#include <time.hint checkNumber(char * number) { int input = 0; int right_input = 0; int j = 0; char only_numbers[10] = "012345"; char right_numbers[10] = "012345"; srand ( time(NULL) ); for (int i = 0 ; i < 9 ; i++) { right_numbers[i] = rand()%10 + '0'; } for (int i = 0 ; i < 9 ; i++) { if (number[i] >= '0' && number[i] <=
submitted by /u/iva3210
[link] [comments]