Hacking on Medium
Trainig| Web Application Penetration Testing

https://cdn-images-1.medium.com/max/995/1*uYnG7uwWFkHgoKNcpBOerw.png
En este post te mostrare como poder levantar tu propio laboratorio de pruebas para Hacking web o Web Hacking sin la necesidad de usar XAMP…

Continue reading on Medium »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
How to list PRODUCT-GUID for some apps

This is list:

- 3D Viewer

- Alarms & Clock

- Camera

- Cortana

- Feedback Hub

- Get Help

- Groove Music

- Mail and Calendar

- Maps

- Microsoft OneDrive

- Microsoft Pay

- Microsoft Solitaire Collection

- Microsoft Sticky Notes

- Microsoft Update Health Tools

- Mixed Reality Portal

- Movies & TV

- Office

- OneNote

- People

- Skype

- Snip & Sketch

- Tips

- Weather

- Xbox

- Xbox Game bar

- Xbox Game Bar

- Xbox Game Speech Window

- Xbox Identity Provider

- Xbox Live

- Your Phone

submitted by /u/Gugi96
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
So, did anyone get a Flipper Zero?

Hi, when I read about the Flipper Zero last year, it really caught my attention and I wanted to buy it immediatelly, however it sounded too good to be true and quite expensive, so I decided to wait. They said it was going to be shipped in February 2021, however, I can't find anyone on youtube who has get their hands on it. So, was it real?

submitted by /u/FarYam7
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

hacking: security in practice
Is there a better way to get Cartoon Wars on my iPhone?

I’ve been looking around and trying to do research but I haven’t found any great way yet. One idea is to jailbreak my phone and go back to older versions of iOS but this doesn’t seem ideal for me. Is there a way to get an emulator on my iPhone of previous version of iOS. Or any other method would be great also. I just seriously loved the first cartoon wars but now it’s dead and I’m dead inside. Any help would be greatly appreciated.

submitted by /u/DemiDeafDude
[link] [comments]

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Bringing Out of Scope, In Scope

We are all aware of the CSRF on Login form being out of scope in almost all of the bug bounty programs. This post is about chaining this…Continue reading on Medium »
Read more...

___________________________

@hacking_Attack

@Hacking_Video
___________________________

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Hacking on Medium
CVE-2020–24609 Savsoft Quiz 5 — Stored Cross-Site Scripting

https://cdn-images-1.medium.com/max/1920/1*5Ej2CQxa1_cr7IZP3L2JNA.png
# Exploit Title: Savsoft Quiz 5 — Stored Cross-Site Scripting
# Date: 2020–07–28
# Exploit Author: Mayur Parmar(th3cyb3rc0p)
# Vendor…

Continue reading on System Weakness »

___________________________

@hacking_Attack

@Hacking_Video
___________________________

Course Club
[PacktPub] SEO 2020 – The Complete WordPress SEO Blueprint [Video]

https://courseclub.me/wp-content/uploads/2021/04/32654819.png
https://courseclub.me/wp-content/uploads/2021/04/32654819-243x300.png
Video Details

ISBN 9781800565838
Course Length 5 hours 6 minutes

About

Let your online presence reflect your services, products, and articles by developing a successful online business or website using effective search engine optimization (SEO) strategies! This course will help you move your website and content to the first page of Google and other major search engines by getting you up to speed with the latest SEO techniques.

The course begins with an introduction to SEO, and familiarizes you with the dos and don’ts. You’ll then learn about Yoast, a powerful plugin for WordPress SEO, and Rank Math, another useful SEO tool. Next, you’ll move on to understanding key phrases, and get to grips with using MozBar for keyword analysis. As you advance, you’ll find out how to maximize your click-through rates (CTRs), understand the importance of ALT Text, and test the speed of your website. You’ll also discover effective ways for improving the overall speed and performance of your WordPress website.

By the end of this course, you’ll be able to optimize both your content and website for all the major search engines and drastically improve your website’s ranking.

All the resources and supporting files for this course are available on GitHub at https://github.com/PacktPublishing/SEO-2020—The-Complete-WordPress-SEO-Blueprint

Author

Alexander Oni is a bestselling instructor with more than 70,000 students. His passion is teaching people through online courses in a fun and entertaining way. Alex has been teaching online for around 3 years and during this period, he has created over 25 different courses with more than 50,000 students registered worldwide. Alex believes that we all have one shot at life and should live life to the fullest. This means constantly stepping out of your comfort zone by visiting new places and trying out new things. His success in Udemy has given him both financial freedom and the ability to travel and settle anywhere. The author is currently traveling around the world, spending around a month in every city before moving on to the next. His hobbies include watching movies and playing sports and chess. Alex is also a huge fan of the game – Dead by Daylight.

Size: 1.69 GB

Download Now

https://www.packtpub.com/product/seo-2020-the-complete-wordpress-seo-blueprint-video/9781800565838.

The post [PacktPub] SEO 2020 – The Complete WordPress SEO Blueprint [Video] appeared first on Course Club.

Deep Web
Like the Limitless guy

Do you know where I can find, out of pure curiosity, a drug on the deepweb that activates 100% of the brain like the guy in the movie Limitless does? Does a similar substance even exist? And if it does, can it be bought legally? I have so many things to do in so little time (my Bachelor thesis, an exam on an Asian language, a piano competition etc) and I would really need a brain booster right now. Please let me know, and thank you to whoever wants to help me!!!

submitted by /u/Lemon9800
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posta - Cross-document Messaging Security Research Tool

Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser.Prerequisites Google Chrome / Chromium Node.js (optional) Installation Development Environment Run Posta in a full development environment with a dedicated browser (Chromium): Install Posta git clone https://github.com/benso-io/postacd postanpm install Launch the dedicated Chromium session using the following command: node posta Click on the Posta extension to navigate to the UI Dev mode includes a local web server that serves a small testing site and the exploit page. When running in dev mode, you can access the exploit page at http://localhost:8080/exploit/ Chrome Extension Run Posta as a Chrome / Chromium Extension: Clone the repo: git clone https://github.com/benso-io/posta.git Navigate to chrome://extensions Make sure Developer mode is enabled Click on Load unpacked Choose the chrome-extension directory inside Posta and upload it to your browser Load the extension Pin the extension to your browser Browse to the website you would like to examine Click on the Posta extension to navigate to the UI Tabs In the Tabs section we can find our main Origin, with the iframes it hosts and communicates with through the session. We can choose the specific frame by clicking on it, and observe the postMessages related to that frame only.Messages In the Messages section, we can inspect all postMessage traffic being sent from the origin to its iframes, and vice versa. We can select specific communication for further examination by clicking on it. The Listeners area presents the code which is in charge of handling the communication, we can click and copy its contents for JS code observation. Console In the console section, we can modify the original postMessage traffic, and replay the messages with the tampered values which will be sent from the Origin to its iframe. We should make tests and see if we can affect the behavior of the website by changing the postMessage content. If we manage to do so, it's time to try and exploit if from a different Origin, by clicking "Simulate exploit". Exploit Click on the "host" button inorder to navigate to the exploitation window. In the Exploit section, Posta will try and host the specified origin as an iframe in order to initiate postMessage communication. Most of the time we won't be able to do so, due to X-Frame-Options being enabled on the origin website. Therefore, in order to continue with our exploitation, we'll need to gain communication reference with our Origin by initiating the window.open method, which can be achieved by clicking on "Open as tab". We have the console to our right which will help us modify and craft our specified payloads and test them in Cross-Origin Communication, initiated by clicking on the Exploit button.Authors Chen Gour Arie Barak Tawily Gal Nagli Omer Yaron Download Posta
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Hacking GraphQL for Fun and Profit — Part 1 — Understanding GraphQL Basics

Hello everyone!!
Read more...

https://b.thumbs.redditmedia.com/eXrz20OGEUxW33rKkf-kP5tZOlyoONTIfpinFibNvhs.jpg ​

So i was just looking for some libraries in Google Search, i just opened the first page links and went on doing something else, later found out that browser was asking for captcha for both of them, i was thinking that something is off, anyways i opened the links and found a copy of Github website, which was doing everything but was not loading any code files, noticed i am logged out, that's where all of my alarms goes off, this is indeed a site to get GitHub passwords. The bad thing is GitHub own links were on page two and these were on first page for me, now i understand how some of the famous Libs [antd] goes black back in jan or feb and then got restored.

​

​

https://preview.redd.it/58ijapbnqav61.png?width=619&format=png&auto=webp&s=54f29ca6dc350bd449be329825e0112356dbea7f

Edit - snapshots

​

https://preview.redd.it/h5ohy9zlsav61.png?width=993&format=png&auto=webp&s=e9204828ec63166abe8544766a5c753da222e913

​

it won't open any thing, it's just a dummy page

​

submitted by /u/GroundbreakingWolf7
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Unknown phone number

So, this may not be a subreddit for this, but last night and today, my brother has been getting calls on viber and whatsapp from a Totally random number that's from a different country. I don't know what it is but is it a scam or a hacker maybe? Can anyone help me?

submitted by /u/zargug2
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video

___________________________
@hacking_Attack
@Hacking_Video