Vulnerabilities Scan

Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…Continue reading on Medium »
Read more...

hacking: security in practice
Giving away 2 Tryhackme 1 Month Vouchers

Comment a website which you very actively use as a good resource for pentesting.

Also, would be good if you giveaway a one liner for the site

This is basically a thread where people can maybe share some good resources with the comm.

This is a big sub and i bet 95% of us a newbies trynna learn our way in into this thing.

There are others in here too who are actively giving away these vouchers to help ones in need gain a new expereince or maybe continue their expereince via tryhackme, thumbs up to all those and i will keep doing these sorta giveaways so stay tuned if you somehow didnt get 1 this time.

submitted by /u/irankai
[link] [comments]

hacking: security in practice
Cariddi (tool) - Recon + Info disclosure

Hi,

On my Github profile you can find cariddi (https://github.com/edoardottt/cariddi), a Golang cli tool.

It takes a list of domains as input, crawls all possible urls and scans for endpoints, secrets, api keys, file extensions, tokens and more.

This tool will be useful for Penetration tests, bug bounty and other hacking stuff for web based applications.

If you have suggestions or problems just open an issue :)

submitted by /u/edoardottt
[link] [comments]

hacking: security in practice
How does someone intercept an SMS MFA code?

A little while ago my FB was hacked and deactivated. I had received two MFA codes in the middle of the night that I didn’t respond to because I was asleep.

Someone got into my account changed my password and removed all of my contact info. After going round and round I was finally able to recover my account.

I now know that SMS Texts are not secure. My question is how would someone intercept the message without access to the phone?

submitted by /u/Gamer79952073
[link] [comments]

Hacking on Medium
Vulnerabilities Scan

https://cdn-images-1.medium.com/max/1200/1*JcNxL2FiKBFKGW8P2xPNtQ.png
Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

Continue reading on Medium »

Hacking on Medium
Spyware in the spotlight, UEFI threats and GPS jamming

https://cdn-images-1.medium.com/max/2500/1*cJFB1ZyWSaW9yRiF-zyi-A.png
Welcome to Changelog for 7/31/22, published by Synack! Open source coder John Wiseman rolled out a fascinating map of global GPS…

Continue reading on README_ »

Hacking on Medium
Keylogger Full Analysis msdsrv.exe

https://cdn-images-1.medium.com/max/664/1*s0xaFcfbHhqGFOMfAeHN4w.jpeg
This is a fascinating sample due to its aggressive keylogging properties and the domain it calls out to is still active. Furthermore, from…

Continue reading on Medium »

Hacking on Medium
HacktheBox[Sauna]

https://cdn-images-1.medium.com/max/675/1*9jE4Hadz7oteUR7OFA2-4Q.png
Sauna was an easy box on HacktheBox platform that involved enumerating users with Kerbrute to identify a user that does not require…

Continue reading on Medium »

Hacking on Medium
HackTheBox: Lame— Walkthrough

https://cdn-images-1.medium.com/max/764/1*SHdOWEJgmQqNXSwjXZWhiQ.png
Welcome! It is time to look at the Lame machine on HackTheBox. I am making these walkthroughs to keep myself motivated to learn cyber…

Continue reading on Medium »

Hacking on Medium
Jak postawić krok w stronę at APT poprzez programowanie?

Haker by móc sprawnie wykonywać swój zawód, musi/powinien znać parę języków poza Python’em, oto one: C, Assembler, VBS, PHP, HTML, CSS…

Continue reading on Medium »

How this EASY vulnerability resulted in a $20,000 bug bounty from GitLab

The hidden dangers of numerical IDsContinue reading on InfoSec Write-ups »
Read more...

Why this EASY vulnerability resulted in a $20,000 bug bounty from GitLab
https://infosecwriteups.com/how-this-easy-vulnerability-resulted-in-a-20-000-bug-bounty-from-gitlab-d9dc9312c10a?source=rss------bug_bounty-5

The hidden dangers of numerical IDsContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-this-easy-vulnerability-resulted-in-a-20-000-bug-bounty-from-gitlab-d9dc9312c10a?source=rss------bug_bounty-5)