hacking: security in practice
Question regarding dns redirect

Quick question for you guys.

Doing some experimentation with JS injection into http websites.

Obviously, most websites use https. The main workaround is to attempt to perform an sslstrip or HSTSHijack to try to downgrade the site to http. From there we can inject a hook and try from there.

However, most large sites have a strong HSTS policy that will not allow this to work.

My question is, would it be easier to just create a DNS redirect that forces users to a predefined http website. Meaning, if I go to https://google.com, it would redirect to http://palms.myspecies.info/

Obviously, this would get noticed by the target host, but that is not important as this is for testing purposes on my own machine.

submitted by /u/whatthe12234
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/u--Pugw0F5elNZSsOqTH_p6epidmBJXpK4QRtlozw6g.jpg submitted by /u/Yechezkel_Kohen
[link] [comments]

hacking: security in practice
Is this still an Open redirect vulnerability?

I failed my security course twice and ironically I’m now tasked to fix security issues on an internal web app for my employer.

They’re cybersecurity 101 type of attacks but I’m still confused, is the following example still an open redirect, or is it a false positive?

the user inputs a URL on browser and the controller/service grabs the Base url of that URL and appends “custom.html” Then passes that to the servlets redirect function.

Pseudo code:

MyController(request, response) {

BaseURL = request.substring()

Response.redirect(BaseURL + “custom.html”)

}

submitted by /u/GuerroCanelo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to break into old yahoo mail account that I madr 6 years ago

Hello

I made a yahoo email that I used to create a Facebook account and now I need to access it for some security code. The problem is that I only know one of the security questions but not the other one. Can you give me some websites for this type of service?

submitted by /u/AlexPascu007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there a way to intervene as user on TikTok collecting personal data?

I'm concerned, as I used TikTok about three months naively not understanding what I signing up for. After reading through and seeing that you they gain notable information past the application in their terms of service. I would like to make sure that I am not having my data used by them.

Is there anyway I can make sure they aren't doing such things at the current moment?

Is there a way to trace what you have available to these apps?

Do these apps continue to monitor even after you have deleted the app?

Appreciate any of the feedback.

submitted by /u/RecipeAwkward
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I Created an Open Source Program for Keystroke Reflection Side Channel Attack using an Arduino Pro Micro

https://external-preview.redd.it/8piG72lLtgDZaKK_BRaupnFgb3jrRL0jNtsvFRC7G-g.png?width=640&crop=smart&auto=webp&s=961d802522e3a8e3f5103c48de6bcf65754cb8cb submitted by /u/zebrazookeeper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
US data transfer unlawful according to German procurement authority

https://external-preview.redd.it/r2qDyspfqd13suJ7T_4bdbzbXX7nzp686CVPRhL8Yoc.jpg?width=640&crop=smart&auto=webp&s=1fa2558b4915bf9af5751d792708d912a428547f submitted by /u/DonutAccomplished422
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A Brief History of Decentralization

submitted by /u/rkmoore3
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Does a used 4G LTE modem store data?

My dad gave me a used modem and I am wanting to pawn it off for some extra cash. We installed Starlink at our family ranch and we no longer need it. That being said, I am wondering if there is any way that people could pull any personal information from it. Its a LB1120 Netgear modem. Thanks for any information!

submitted by /u/Some_Human_Person
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
What is a basic kit for deep web? What is an emergency kit for deep web?

Extra:What virus and antivirus are the "best ones"

submitted by /u/patito454
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
RazorBlack: Active Directory Room From TryHackMe By Hashar Mujahid

https://cdn-images-1.medium.com/max/600/1*tCQ6yBOpEMHtfJlT0hGtAg.jpeg
These guys call themselves hackers. Can you show them who’s the boss ??

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Segurança em dispositivos iOS

https://cdn-images-1.medium.com/max/600/1*8IBTekrtpUvI6my1IFP1GA.gif
Muito se fala sobre Android vs iOS no quesito segurança, mas afinal, iOS é realmente mais seguro?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Curve Finance Hack Resolved, Assets Worth $570K Stolen

https://cdn-images-1.medium.com/max/910/1*3pFlO31wmbT7ai_qCu6Zwg.png
Curve Finance, one of the leading DeFi protocols in Ethereum blockchain made headlines as it announced on its official social media…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Walkthrough: Basic Pentesting [PT/BR]

https://cdn-images-1.medium.com/max/700/0*nsvI6sCW5ueErKIt.png
Ei, e aí! Tranquilo? Hoje vou resolver a máquina “Basic Pentest”.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video