Hacking on Medium
Hackers Exploit Twitter Vulnerability to Exposes 5.4 Million Accounts

Twitter on Friday revealed that a now-patched zero-day bug was used to link phone numbers and emails to user accounts on the social media…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Hack Absolutely Anyone? — Part 1 [R3C0N]

https://cdn-images-1.medium.com/max/1300/1*eKcTKvorc37Nxh1JyzrQfA.jpeg
Disclaimer: You shouldn’t just try to complete this guide as quick as possible, rather try and understand these underlying concepts. It…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberTalents BootCamp 2022 #Greeks

https://cdn-images-1.medium.com/max/1181/1*qKV5_xviFE2dEOq4AlZ8UQ.png
~ f3ru0s Kormy says … Congratulations!!! For making it to CyberTalents BootCamp 2022. Good Luck in your journey :)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Php Object Injection Demo

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Closed-source C++ DLL read buffer value when exported function is called by application

Hi there,

I trying to reverse engineer a DLL which is closed source. Out of the about 150 exported functions of this C++ DLL I was able to reverse engiener the header. I am now stuck on one function called: VNL_SetBridgeState(byte* buffer, uint bufferLen). I know the first parameter is a pointer to an byte array with a length of 0x855c. Unfortunatly I currently dont know the exact data set in the buffer (first parameter).

This DLL is also within the application, so I tried debugging the application using Ghidra and Cutter. But without any luck (breakpoints are not triggered for some reason). Now my idea is that I could try to 'override' the exported function and log the data in the buffer (to registry or some file on the disk). So this means I somehow need to override this function.

After some research I found out that this shouls be possible somehow with DLL injection or function hot patching.

Any ideas how I can read the paramter passed to this function for the application?

submitted by /u/Stogoh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Web Application Reconnaissance Guide, Cybersec | Shubham Dhungana
https://shubhdhungana.medium.com/web-application-reconnaissance-guide-cybersec-shubham-dhungana-17858c967e2b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must…Continue reading on Medium » (https://shubhdhungana.medium.com/web-application-reconnaissance-guide-cybersec-shubham-dhungana-17858c967e2b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Php Object Injection Demo
https://medium.com/@pentesterclubpvtltd/php-object-injection-demo-1b90e24cba9e?source=rss------bug_bounty-5

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/php-object-injection-demo-1b90e24cba9e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Enterprise: Active Directory Room From TryHackMe

You just landed in an internal network. You scan the network and there’s only the Domain Controller…Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Web For Pentester sql injection example 3

https://cdn-images-1.medium.com/max/1279/1*Kf7lYDAQ2QrsinwA3G0Knw.png
This challenge is exactly the same as the previous one, we will use payload /**/ and skip space

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CyberTalents BootCamp 2022 #JTAG Dump

https://cdn-images-1.medium.com/max/1149/1*cYausZjfHrcbYmj1jIg6kw.png
~ f3ru0s Kormy says … Congratulations!!! For making it to CyberTalents BootCamp 2022. Good Luck in your journey :)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
North Korea’s hacker group at large again!!

https://cdn-images-1.medium.com/max/750/1*GBioMXUTJr7uVa5RyzYt7A.jpeg
North Korea’s state-supported hacker group known as The Lazarus Group attacks blockchain platform DeBridge Finance.

Continue reading on CryptoStars »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Web For Pentester sql injection example 4

https://cdn-images-1.medium.com/max/1279/1*d8aODTIFFKHgXMJ_Lyqsfg.png
Let’s get started and see what this challenge has in store for us

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video