Kategori OWASPContinue reading on Medium » (https://medium.com/@ajisnt1907/msa-weekly-5-how-to-get-sensitive-data-exposure-on-web-application-b2ff7483f056?source=rss------bug_bounty-5)

First Job as Penetration Tester (entry-level)
https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/

<!-- SC_OFF -->Hi I want to ask the essential question I am currently new to penetration I have done quite a lot of rooms in tryhackme (around 85) I do have some good base knowledge about networking and I studied the OWASP Top 10 (https://owasp.org/www-project-top-ten/) vulnerabilities and watch a lot of course about web application penetration I have some basic understanding of Metasploit Burpsuite NMAP kali Wireshark and some other tools I don't have any cert for now and I am asking please if anyone can suggest me one cert to take to get a job what would be??? I actually need this job very hard and I don't have money for oscp it's very very expensive actually please I really need a job as soon as possible <!-- SC_ON --> submitted by /u/PsychologicalMud59 (https://www.reddit.com/user/PsychologicalMud59)
[link] (https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/) [comments] (https://www.reddit.com/r/Pentesting/comments/w7qihg/first_job_as_penetration_tester_entrylevel/)

hacking: security in practice
What are some general ways a website could dump access to cookies or passwords with permission?

I am building app and I want to be able to export user's passwords or cookies to specific websites. One way is to export cookies with an extension but I would prefer for it to be as frictionless as possible. Are their any other ways that we could do this? The user can opt-in so it doesn't need to be silent, we just want it to be easy for them. Short of typing out their password, of course.

submitted by /u/fadyman23
[link] [comments]

hacking: security in practice
Do you think Hacking/bug bounties and just messing with computers best jobs for Hikkokomori?

Hikkokomori is a person who never leaves his house. He stays inside for years due to anxiety or many other problems.

I didn't leave my house for past 7 years and stayed home I have the capacity to sit on computer for 18 to 20 hours a day messing with it. I always wished ,I had genius IQ so I can be a top level hacker and Excel in other fields of computing.

I always had a dream of making good money by teaching myself to find bugs, create or sell 2 D games or applications even make malwares.

It's childish but still😭

submitted by /u/Ok_Durian_3015
[link] [comments]

hacking: security in practice
Idea's On How to Filter Out a Pre-set MySQL Statement

I have this MySQL database pre-set statement and I am wondering if anyone has any techniques on how to essentially comment out the statement that occurs after the hackme' input.

I know -- Comment exists, but using it correctly has dumbfounded me.

hackme' was a user inputted parameter.
[ SELECT * FROM teaching_periods WHERE availability_student LIKE '% hackme' %' ORDER BY `order` ASC, code ASC ]
submitted by /u/kirik42069
[link] [comments]

hacking: security in practice
Does anyone get depressed or sad that despite hard work or perseverance they won't be as great like Marcus Hutchins or top 0.1 hackers because our their brain is wired differently?

My post is controversial and stupid. My IQ is only 84. I want to find bugs, mess with computers and learn about computing. But the mere thought of not achieving anything not even finding bug or excelling in anything makes me feel so inadequate.

They can see patterns and troubleshoot inside their head. They can think faster, code more efficiently and find explois normal plebs can't see. Marcus Hutchins started going and by his teens he reverse engineered zeus malware. Ofcourse he has genius IQ with luck.

Many hackers who are in top 0.1 are lucky high IQ prodigies. Their brain is wired differently.

submitted by /u/Ok_Durian_3015
[link] [comments]

hacking: security in practice
InfoSec Resources + Paid Course Leaks

https://1do7.github.io/blogs/InfoSec_Resources.html

submitted by /u/Useful-Shoe914
[link] [comments]

hacking: security in practice
[challenge] "Guess" the random number using a simple stack overflow

It shouldn't be a hard challenge, but it would be nice to see more than one way to solve it.

https://platform.intervee.io/challengeinfocard/guess
The link is optional, you can also read the code below:

include <stdio.h
#include <string.h#include <stdlib.h#include <time.h#include <stdio.h#include <string.h#include <stdlib.h#include <time.hint checkNumber(char * number) { int input = 0; int right_input = 0; int j = 0; char only_numbers[10] = "012345"; char right_numbers[10] = "012345"; srand ( time(NULL) ); for (int i = 0 ; i < 9 ; i++) { right_numbers[i] = rand()%10 + '0'; } for (int i = 0 ; i < 9 ; i++) { if (number[i] >= '0' && number[i] <=
submitted by /u/iva3210
[link] [comments]

hacking: security in practice
Wifi in a group home

Say if someone was in a group home where everyone had wifi, give me a list of stuff that someone could do with that hacking wise

submitted by /u/popapuudy
[link] [comments]

hacking: security in practice
Free to attend webinar: Game Hacking - Breaking The Blockchain.

We are just 3 days away from our brand new webinar, Game Hacking - Breaking The Blockchain.

Join over 500 people this Wednesday at 4PM CEST/ 3PM GMT, and don’t miss this exciting opportunity to see Cyrex CTO and expert ethical hacker Tim De Wachter talk about Blockchain Gaming and Cyrex's experiences dealing with industry targeting hackers. If you’re involved in the gaming industry, or simply interested in hacking, gaming and blockchain, this is the perfect webinar for YOU! Secure your seat today: https://www.linkedin.com/events/webinar-gamehacking-breakingthe6948193428748857344/about/

Hope to see you there!

#webinar #blockchain #gaming

submitted by /u/IandianaJones
[link] [comments]

$1.333 For Account Takeover Via Reset Password

Assalamualaikum, Halo Bug Hunter! Kali ini gw nemu celah keamanan yang Sangat Critical pada salah satu Aplikasi. Tanpa basa basi, langsung…Continue reading on Medium »
Read more...

MSA Weekly 5 - “How to Get Sensitive Data Exposure on Web Application”

Kategori OWASPContinue reading on Medium »
Read more...

How I Gained Access To A Finance Company’s Accounts (Session Hijacking)

In a web application security test, I’ve gained access to hundreds of accounts that have belonged to a finance company.Continue reading on Medium »
Read more...

Pivoting with Socks and Proxychains
https://www.reddit.com/r/redteamsec/comments/w7quwn/pivoting_with_socks_and_proxychains/

submitted by /u/Clement_Tino (https://www.reddit.com/user/Clement_Tino)
[link] (https://medium.com/@tinopreter/pivoting-with-socks-and-proxychains-e9df908bacaa) [comments] (https://www.reddit.com/r/redteamsec/comments/w7quwn/pivoting_with_socks_and_proxychains/)

How I Gained Access To A Finance Company’s Accounts (Session Hijacking)
https://medium.com/@talhakarakumru/how-i-gained-access-to-a-finance-companys-accounts-session-hijacking-2c6c5d9d84bd?source=rss------bug_bounty-5

In a web application security test, I’ve gained access to hundreds of accounts that have belonged to a finance company.Continue reading on Medium » (https://medium.com/@talhakarakumru/how-i-gained-access-to-a-finance-companys-accounts-session-hijacking-2c6c5d9d84bd?source=rss------bug_bounty-5)

Kali Linux Tutorials
MITM_Intercept : A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others

MITM_Intercept is a little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments.

An improved version of the fantastic mitm_relay project. The StoryAs part of our work in the research department of CyberArk Labs, we needed a way to inspect SSL and TLS communication over TCP and have the option to modify the content of packets on the fly. There are many ways to do so (for example, the known Burp Suite extension NoPE), but none of them worked for us in some cases. In the end we stumbled upon mitm_relay.

mitm_relay is a quick and easy way to perform MITM of any TCP-based protocol through existing HTTP interception software like Burp Suite’s proxy. It is particularly useful for thick clients security assessments. But it didn’t completely work for us, so we needed to customize it. After a lot of customizations, every new change required a lot of work, and we ended up rewriting everything in a more modular way.

We hope that others will find this script helpful, and we hope that adding functionality will be easy. How does it workFor a start, listeners’ addresses and ports need to be configured. For each listener, there also needs to be a target configured (address and port). Every data received from the listener will be wrapped into a body of an HTTP POST request with the URL containing “CLIENT_REQUEST”. Every data received from the target will be wrapped into a body of an HTTP POST request with the URL containing “SERVER_RESPONSE”. Those requests are sent to a local HTTP interception server.

There is the option to configure an HTTP proxy and use a tool like burp suite as an HTTP interception tool and view the messages there. This way, it is easy to modify the messages by using Burp’s “Match and Replace”, extensions or even manually (Remember, the timeout mechanism of the intercepted protocol can be very short).

Another way to modify the messages is by using a python script that the HTTP interception server will run when it receives messages.

The body of the messages sent to the HTTP interception server will be printed to the shell. The messages will be printed after the changes if the modification script is given. After all the modifications, the interception server will also echo back as an HTTP response body.

To decrypt the SSL/TLS communication, mitm_intercept need to be provided a certificate and a key that the client will accept when starting a handshake with the listener. If the target server requires a specific certificate for a handshake, there is an option to give a certificate and a key.

A small chart to show the typical traffic flow:
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOzc8PK56sjKtR8fh-FJM1qoAm-C1p8YgvOuuLNxOrf0uPmHnevlP2DQsXWcYX_Mzxhfhg0TK5QQ-_zHfIvzZ4jp3rEO6fHKFGkjCIVxTqN9IP-MTh_f-dRwtjOGJ5S29Qih1Wj-nsEv98WYWx-6eos3fTYCdJRoEJ5qdaeHpy-MnmOeUNjBpDa59Q/s741/162932536-c720802f-2523-4b62-902c-df0fa2a2ca0d.jpg Differences from mitm_relaymitm_intercept is compatible with newer versions of python 3 (python 3.9) and is also compatible with windows (socket.MSG_DONTWAIT does not exist in windows, for example). We kept the option of using “STARTTLS,” and we called it “Mixed” mode. Using the SSL key log file is updated (the built-in option to use it is new from python 3.8), and we added the option to change the sni header. Now, managing incoming and outgoing communication is done by socketserver, and all the data is sent to a subclass of ThreadingHTTPServer that handle the data representation and modification. This way, it is possible to see the changes applied by the modification script in the response (convenient for using Bu[...]