Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Exploit SQL Injection and bypass captcha with SQLMAP
https://cdn-images-1.medium.com/max/1348/1*o8ax7RraNXzPFGk9H64j_Q.png
Kenzy challenge (Cyber wargames 2022)
Continue reading on Medium »
Exploit SQL Injection and bypass captcha with SQLMAP
https://cdn-images-1.medium.com/max/1348/1*o8ax7RraNXzPFGk9H64j_Q.png
Kenzy challenge (Cyber wargames 2022)
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Creating a basic backdoor on an android mobile
https://cdn-images-1.medium.com/max/1234/1*ibDE3fFXByCy_7kEchL31A.png
in this article you’ll be learning the most basic way to hack an android mobile phone using Metasploit framework.
Continue reading on Medium »
Creating a basic backdoor on an android mobile
https://cdn-images-1.medium.com/max/1234/1*ibDE3fFXByCy_7kEchL31A.png
in this article you’ll be learning the most basic way to hack an android mobile phone using Metasploit framework.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Check Your Whatsapp is Hacked or Not
https://cdn-images-1.medium.com/max/600/0*K4Fii3IfZIu3uhaT.jpg
HELLO GUYS! I AM BACK AGAIN WITH A NEW TRICK FOR YOU. THE TRICK IS THAT HOW CAN YOU CHECK THAT YOUR WHATSAPP ACCOUNT IS SECURE OR NOT. FOR…
Continue reading on Medium »
Check Your Whatsapp is Hacked or Not
https://cdn-images-1.medium.com/max/600/0*K4Fii3IfZIu3uhaT.jpg
HELLO GUYS! I AM BACK AGAIN WITH A NEW TRICK FOR YOU. THE TRICK IS THAT HOW CAN YOU CHECK THAT YOUR WHATSAPP ACCOUNT IS SECURE OR NOT. FOR…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Arab Cyber War Games NoSQL Challenge (Doctor X).
https://cdn-images-1.medium.com/max/996/1*zVOXP2eDAR3nq05OsRcJEw.png
In this CTF I developed a Nosql challenge that needs the penetration tester to Inject in many forms to find the flag.
Continue reading on Medium »
Arab Cyber War Games NoSQL Challenge (Doctor X).
https://cdn-images-1.medium.com/max/996/1*zVOXP2eDAR3nq05OsRcJEw.png
In this CTF I developed a Nosql challenge that needs the penetration tester to Inject in many forms to find the flag.
Continue reading on Medium »
hacking: security in practice
Thoughts about WP
So I've been discussing if WP (wordpress) really is worth using due to the constant update conflicts and security problems with web developers and I get so much hate. So I thought I'd take it up with you guys. Would you build your website usung wp, drupal or code from scratch?
submitted by /u/Error_co-Id10T
[link] [comments]
Thoughts about WP
So I've been discussing if WP (wordpress) really is worth using due to the constant update conflicts and security problems with web developers and I get so much hate. So I thought I'd take it up with you guys. Would you build your website usung wp, drupal or code from scratch?
submitted by /u/Error_co-Id10T
[link] [comments]
reddit
Thoughts about WP
So I've been discussing if WP (wordpress) really is worth using due to the constant update conflicts and security problems with web developers and...
hacking: security in practice
How easy is to hack a windows 7 machine connected to my network?
Title
Edit:Standard windows 7 laptop used only for personal usage,nothing hosted on it.
submitted by /u/Free_Ice2752
[link] [comments]
How easy is to hack a windows 7 machine connected to my network?
Title
Edit:Standard windows 7 laptop used only for personal usage,nothing hosted on it.
submitted by /u/Free_Ice2752
[link] [comments]
reddit
How easy is to hack a windows 7 machine connected to my network?
Title
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
capability of NSA forensics
Most people say if you over write your whole drive a few times the data can't be recovered. However if the NSA got there hands on it you don't know what types of forensic recovery tools they have. So overwriting the drive numerous times is it really wiped? Could be recovered theoretically?
submitted by /u/dannova23
[link] [comments]
capability of NSA forensics
Most people say if you over write your whole drive a few times the data can't be recovered. However if the NSA got there hands on it you don't know what types of forensic recovery tools they have. So overwriting the drive numerous times is it really wiped? Could be recovered theoretically?
submitted by /u/dannova23
[link] [comments]
reddit
capability of NSA forensics
Most people say if you over write your whole drive a few times the data can't be recovered. However if the NSA got there hands on it you don't...
hacking: security in practice
hi there is a really shit magic link vuln in reddit
if you have access to the account email and the magic link https://www.reddit.com/account/magic_link/landing/MIT:/ you can fish for login without pass and take over a reddit account as i have shown here.
to the dude that owns this just password reset and you will be fine, sorry just having fun. next time use 2FA and dont use mailinator. i would have replied to your chat, but i pressed the wrong button lols
submitted by /u/ocoio
[link] [comments]
hi there is a really shit magic link vuln in reddit
if you have access to the account email and the magic link https://www.reddit.com/account/magic_link/landing/MIT:/ you can fish for login without pass and take over a reddit account as i have shown here.
to the dude that owns this just password reset and you will be fine, sorry just having fun. next time use 2FA and dont use mailinator. i would have replied to your chat, but i pressed the wrong button lols
submitted by /u/ocoio
[link] [comments]
reddit
hi there is a really shit magic link vuln in reddit
if you have access to the account email and the magic link...
hacking: security in practice
Getting past maximum Password attempts limitations in brute force attacks
Attacks using brute force are quite frequent. Each day, large websites deal with thousands of these attacks. And I especially receive this question frequently.
Websites are frequently targets of two types of brute force attacks.
"Dictionary" attacks attempt to get in using widely used passwords such as "password1!" "Credential stuffing" attacks exploit stolen username: password combinations from prior website breaches in the hope that the victim will repeat the same login and password on another site. On the black market, lists of these stolen credentials are widely available.
Attackers circumvent retry limits by sending requests from many computers. These are frequently hacked end user devices (bots) or AWS/Azure/GCP virtual servers established with stolen passwords or payment cards. Rather of constantly hitting one account, dictionary assaults are dispersed across numerous accounts at once.
Which is very logical because you want to get lucky, So why not cast the net as wide as possible.
Another type of brute force attack happens when an attacker has compromised a system and stolen password hashes but not plaintext passwords.
The attacker wishes to obtain the plaintext passwords in order to attempt to enter into other systems using them. The attacker saves the password hashes to their own computer, generally in the cloud, and then brute forces the passwords there.
This attack works by repeatedly hashing passwords from a password dictionary and comparing the hashed passwords to the stolen passwords. Because it happens on computers controlled by the attacker, there are no retry limitations.
An attacker who has compromised a low privilege account may also try a brute force against the root password.
But in most of my attacking scenarios this only works if the system is poorly configured.
How many attempts do you think it would take to conduct a brute force attack on DES? provide your answers below. its open for discussion
submitted by /u/Simonvilla1
[link] [comments]
Getting past maximum Password attempts limitations in brute force attacks
Attacks using brute force are quite frequent. Each day, large websites deal with thousands of these attacks. And I especially receive this question frequently.
Websites are frequently targets of two types of brute force attacks.
"Dictionary" attacks attempt to get in using widely used passwords such as "password1!" "Credential stuffing" attacks exploit stolen username: password combinations from prior website breaches in the hope that the victim will repeat the same login and password on another site. On the black market, lists of these stolen credentials are widely available.
Attackers circumvent retry limits by sending requests from many computers. These are frequently hacked end user devices (bots) or AWS/Azure/GCP virtual servers established with stolen passwords or payment cards. Rather of constantly hitting one account, dictionary assaults are dispersed across numerous accounts at once.
Which is very logical because you want to get lucky, So why not cast the net as wide as possible.
Another type of brute force attack happens when an attacker has compromised a system and stolen password hashes but not plaintext passwords.
The attacker wishes to obtain the plaintext passwords in order to attempt to enter into other systems using them. The attacker saves the password hashes to their own computer, generally in the cloud, and then brute forces the passwords there.
This attack works by repeatedly hashing passwords from a password dictionary and comparing the hashed passwords to the stolen passwords. Because it happens on computers controlled by the attacker, there are no retry limitations.
An attacker who has compromised a low privilege account may also try a brute force against the root password.
But in most of my attacking scenarios this only works if the system is poorly configured.
How many attempts do you think it would take to conduct a brute force attack on DES? provide your answers below. its open for discussion
submitted by /u/Simonvilla1
[link] [comments]
reddit
Getting past maximum Password attempts limitations in brute force...
Attacks using brute force are quite frequent. Each day, large websites deal with thousands of these attacks. And I especially receive this...