Hacking on Medium
Protean enters the cyber security market

https://cdn-images-1.medium.com/max/640/0*18yMAz3vl4UGPNjW.png
Cyber Security is the demand of most companies in every industry. Why’s that? There are a lot of reasons for which organizations and…

Continue reading on Medium »

Hacking on Medium
TryHackMe — AgentT

https://cdn-images-1.medium.com/max/1166/1*c3N1tS6xGoffyu-JGLoEkg.png
AgentT is a CTF on TryHackMe. It is categorized as “Easy”. The room has the following description:

Continue reading on System Weakness »

Hacking on Medium
About the discovery of another security vulnerability in NASA

https://cdn-images-1.medium.com/max/2069/1*gqLYEY6TYWEqdmNvFSUllA.jpeg
- 7h3h4ckv157

Continue reading on InfoSec Write-ups »

Hacking on Medium
Free 300+ Hours Cybersecurity Course Content

Are you worrying that you cannot afford cybersecurity courses?

Continue reading on Medium »

hacking: security in practice
Taking Cybersecurity in University.

What jobs can i get after this? Any tips for further studies?

submitted by /u/Roflolmaoguy
[link] [comments]

https://b.thumbs.redditmedia.com/hdOFgJno9WjxotCxOyra7GfORo5W51wPU6Oipop9vtk.jpg i was just searching something in my c drive when i saw this .txt file named setup in my c drive folder (which i didnt put it in) and it was a log of something, can anyone tell if this some virus installed or something

log screenshot

submitted by /u/Tricky-Cost9076
[link] [comments]

hacking: security in practice
Deep search engine recommended

I've done some research recently on some RaaS and wanted to try Atom Ransomware and study its behaviour on virtual machines for research purposes.

I have read that it is accessible online but can't find it on the web, so I turned myself into deep web searches. For some time now I have been wanted to learn web queries to find what I want and thus, I am new to it and asking for advices. Using Duckduckgo seems to bring same results as Google.. I am doing something wrong ?

submitted by /u/Disastrous_Ad_7334
[link] [comments]

hacking: security in practice
Can anyone remotely wipe my laptop?

So my laptop was taken I need it wiped. I tried thru my account but it says it’s a zero % and no location available. Is there any hope to blip the damn thing or set it to erase if plugged in?

submitted by /u/Weird_Apple_8096
[link] [comments]

Pentester Promiscuous Notebook

gitbook for keeping my pentest notes on hand. It’s far from being perfect in terms of organization (that’s why I call it “promiscuous”)…Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Researcher bypass email filter – XSS in Gmail’s AMP For Email

Researcher bypass email filter – XSS in Gmail’s AMP For EmailPost Views: 54 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A cross-site scripting (XSS) vulnerability in AMP for Email, Gmail’s dynamic email feature, has netted a security researcher a $5,000 bug bounty payout.AMP for Email brings AMP functionality to rich, interactive emails. AMP itself is an open source HTML framework used to optimize websites for web browsing on mobile.

Adi Cohen, who unearthed the security flaw, said he had no problem finding a vector that triggered an XSS within the AMP playground, but found bypassing Gmail’s XSS filter a much tougher assignment.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Rendering contextsThe “easiest way to circumvent an XSS filter is by tricking it into a different rendering context than what the browser will actually use to render a given piece of code”, observed Cohen in a blog post.

Since AMP for Email forbids the likes of templates, SVG, math, and CSS, he instead targeted stylesheets as a potential path to an XSS payload with multiple rendering contexts.

This required a discrepancy between how the stylesheet is rendered by the filter and browser, either by “tricking the filter into believing a fake style tag is real”, or “the exact opposite”.

Cohen’s initial vector worked in the sandbox because AMP “leaves the CSS context as soon as it encounters the string ‘’ even if it doesn’t have a closing bracket (>) or at least a whitespace after it”.

He was then able to “trick the filter into believing we’re back in HTML context, while the browser obviously ignores entirely and stays well within the realm of CSS”.
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure over substanceBut “what looked like a promising vector in AMP, seemed way less interesting after Gmail ran its magic on it,” said Cohen.

A breakthrough came when he harnessed a CSS selector, which ensured the payload was returned unchanged by Gmail – “no escaping or other mutations”.

However, the malicious payload prompted an error after the AMP sandbox encountered ‘’, so Cohen tried , but Gmail’s filter was wise to its resemblance to .

What worked instead was testing a benign payload with an encoded selector – because Gmail decoded it, he could use the selector to inject a closing style tag.

Cohen reported the issue to Google on March 27, 2021, and noticed on July 7 that it had been fixed.

As previously reported by The Daily Swig, Google addressed an unrelated, notable XSS in AMP For Email back in 2019, after security researcher Michał Bentkowski leveraged id attributes in tags to enable ‘DOM clobbering’ attacks.
Trending: New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-1-300x150.png Twitter confirms zero-day used to expose data of 5.4 million accountsAugust 8, 2022
Reading Time: 4 minutes

*[...]

https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-2-300x150.png New Linux malware called RapperBot brute-forces Linux SSH servers to breach networksAugust 5, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-300x150.png Jenkins security: Unpatched XSS, CSRF bugs included in latest plugin advisoryAugust 4, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-300x150.png VMware urges admins to patch critical auth bypass bug immediatelyAugust 3, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Researcher bypass email filter – XSS in Gmail’s AMP For Email first appeared on Black Hat Ethical Hacking.

Zero to Hero Malware Reverse Engineering & Threat Intelligence
https://www.reddit.com/r/redteamsec/comments/wjyjh0/zero_to_hero_malware_reverse_engineering_threat/

submitted by /u/cybersocdm (https://www.reddit.com/user/cybersocdm)
[link] (https://www.reddit.com/r/cybersocitlibrary/comments/wjyfpf/zero_to_hero_malware_reverse_engineering_threat/) [comments] (https://www.reddit.com/r/redteamsec/comments/wjyjh0/zero_to_hero_malware_reverse_engineering_threat/)

Pentester Promiscuous Notebook
https://medium.com/@reconshell.com/pentester-promiscuous-notebook-a230d880a924?source=rss------bug_bounty-5

gitbook for keeping my pentest notes on hand. It’s far from being perfect in terms
of organization (that’s why I call it “promiscuous”)…Continue reading on Medium » (https://medium.com/@reconshell.com/pentester-promiscuous-notebook-a230d880a924?source=rss------bug_bounty-5)

TOP Cross-Chain Bridge Open Test Is Underway
https://medium.com/top-network/top-cross-chain-bridge-open-test-is-underway-ecbfa224d9b7?source=rss------bug_bounty-5