Linux Commands Cheat sheet for Web Application Hacking

Below cheat sheet commands are useful for finding bugs in web application. These are especially used by bug bounty hunters for finding…Continue reading on Medium »
Read more...

Linux Commands Cheat sheet for Web Application Hacking
https://shubhdhungana.medium.com/linux-commands-cheat-sheet-for-web-application-hacking-a47c5aa9bcb4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Below cheat sheet commands are useful for finding bugs in web application. These are especially used by bug bounty hunters for finding…Continue reading on Medium » (https://shubhdhungana.medium.com/linux-commands-cheat-sheet-for-web-application-hacking-a47c5aa9bcb4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CodeShield: Cloud Asset Inventory & Privilege Escalation Toolkit

Hello everybody! In this blog post, we will go through a Cloud Security Tool, I recently came across: Codeshield.Continue reading on Medium »
Read more...

CodeShield: Cloud Asset Inventory & Privilege Escalation Toolkit
https://medium.com/@devansh3008/codeshield-cloud-asset-inventory-privilege-escalation-toolkit-9d346c414ecf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everybody! In this blog post, we will go through a Cloud Security Tool, I recently came across: Codeshield.Continue reading on Medium » (https://medium.com/@devansh3008/codeshield-cloud-asset-inventory-privilege-escalation-toolkit-9d346c414ecf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

2FA Bypass via Google Identity & OAuth Login
https://medium.com/@sharp488/2fa-bypass-via-google-identity-oauth-login-6c991ac837af?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello All,Continue reading on Medium » (https://medium.com/@sharp488/2fa-bypass-via-google-identity-oauth-login-6c991ac837af?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Everything you need to know about Cyber Security:
https://medium.com/@cyberfromjerusalem/everything-you-need-to-know-about-cyber-security-da7f74211909?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Cybersecurity is the protection of Internet-connected systems such as hardware, software, and data from cyber threats. Individuals and…Continue reading on Medium » (https://medium.com/@cyberfromjerusalem/everything-you-need-to-know-about-cyber-security-da7f74211909?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

2FA Bypass via Google Identity & OAuth Login

Hello All,Continue reading on Medium »
Read more...

Everything you need to know about Cyber Security:

Cybersecurity is the protection of Internet-connected systems such as hardware, software, and data from cyber threats. Individuals and…Continue reading on Medium »
Read more...

Hacking on Medium
Top 10 most rated OSINT Tools on Github

https://cdn-images-1.medium.com/max/875/0*QK6yKGoP_qBFXOfu.jpeg
author — SATYAM PATHANIA

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing Admin.

Recently, my dad had my PC reset for unknown reasons but unfortunately, he made a new Admin user, (there was no Admin user before the reset) so it prevents me from downloading certain things unless I have the admin password. My dad has long since forgotten it sooo...

I have found a loophole, where I can open a new text document ----> type:
__COMPAT_LAYER=RunAsInvoker
start {program_name}

But this only works on a few applications. I need a way to find the Admin password itself. If anyone is worried, I asked my father for permission to do this and he's fine with it. So any ideas?

submitted by /u/Greedy-Researcher-59
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Websites giving access to infrastructure.

This is a question about something that confuses me and maybe someone can help me understand it. As per the courses and exams I’ve attempted (eCPPT for example). They have you hack a website which gains you a rev shell on the web server by which you can pivot, etc. but how realistic or possible is this if majority of companies host their websites on a server like GoDaddy for example? I would assume the server GoDaddy has hosted the website probably has like 10 other websites running on it as well.

So my question is Is gaining access to a company infrastructure through exploitation of a website really possible in this day and age of majority of the websites are hosted of a hosting service provider?

submitted by /u/Intelligent-Bat-8370
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Home Hardware Firewall
https://www.reddit.com/r/Pentesting/comments/wiacja/home_hardware_firewall/

I'm looking for ideas for a low cost, low energy hardware firewall for home. Grateful for any recommendations /solutions submitted by /u/bikeboardsurf (https://www.reddit.com/user/bikeboardsurf)
[link] (https://www.reddit.com/r/Pentesting/comments/wiacja/home_hardware_firewall/) [comments] (https://www.reddit.com/r/Pentesting/comments/wiacja/home_hardware_firewall/)

___________________________
@hacking_Attack
@Hacking_Video