Defeat the HttpOnly flag to achieve Account Takeover | RXSS

Hello folks, I’m Mohamed Tarek aka Timooon at Bugcrowd and HackerOne, In this write up I will explain how I get the victim’s session when…Continue reading on Medium »
Read more...

Defeat the HttpOnly flag to achieve Account Takeover | RXSS
https://medium.com/@mohamedtarekq/defeat-the-httponly-flag-to-achieve-account-takeover-rxss-c16849d3d192?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello folks, I’m Mohamed Tarek aka Timooon at Bugcrowd and HackerOne, In this write up I will explain how I get the victim’s session when…Continue reading on Medium » (https://medium.com/@mohamedtarekq/defeat-the-httponly-flag-to-achieve-account-takeover-rxss-c16849d3d192?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I earned a $6000 bug bounty from Cloudflare
https://deb0con.medium.com/how-i-earned-a-6000-bug-bounty-from-cloudflare-db6949e39cf7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Introduction:Continue reading on Medium » (https://deb0con.medium.com/how-i-earned-a-6000-bug-bounty-from-cloudflare-db6949e39cf7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I earned a $6000 bug bounty from Cloudflare

Introduction:Continue reading on Medium »
Read more...

Defensics Fuzz Testing VS Core Impact
https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/

Hi everyone.
I am quite new to PenTesting. Sorry if my question is stupid So my place got new hardware and stuff. And i got a mission to figure out the difference between these 2 penetration tests tools. Defensics Fuzz Testing and Core Impact So would you guys help me out understanding what the differences between those two are. And if i have one of them. Which will be better?? Or will i need to have both to cover everything??? Many thanks reddit community!!! submitted by /u/gameboybin (https://www.reddit.com/user/gameboybin)
[link] (https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/)

___________________________
@hacking_Attack
@Hacking_Video

My Experience on Hacking the Dutch Government

Hello, fellow Bug Hunters! It’s me again Jefferson Gonzales, and in this article, I’ll tell you about how I got my dream Dutch Government…Continue reading on Medium »
Read more...

My Experience on Hacking the Dutch Government
https://gonzx.medium.com/my-experience-on-hacking-the-dutch-government-a2c5a5f43d83?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, fellow Bug Hunters! It’s me again Jefferson Gonzales, and in this article, I’ll tell you about how I got my dream Dutch Government…Continue reading on Medium » (https://gonzx.medium.com/my-experience-on-hacking-the-dutch-government-a2c5a5f43d83?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Panera Bread Public Network security is just sad.
https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/

I recently was at a Panera Bread, and their public network security was just horrible. Two of the main issues included: A: no good qos system, i was able to DoS the network by simply hogging the bandwith with masscan. no webpages or anything could load for other users while this command was running on my laptop B: Port 25 outbound is not blocked, which makes it extremely easy to scan the internet for open smtp relays to send spam mail from, this could be happening from a malicous actor in the building or a compromised computer on the network. So yeah the security sucks and it is very exploitable, especially for use to connect to unsecure smtp servers and send spam mail. submitted by /u/EvansMBgaming (https://www.reddit.com/user/EvansMBgaming)
[link] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates.The highlights for Kali’s 2022.3’s release:Discord Server - Kali’s new community real-time chat option has launched!Test Lab Environment - Quickly create a test bed to learn, practice, and benchmark tools and compare their resultsOpening Kali-Tools Repo - We have opened up the Kali tools repository & are accepting your submissions!Help Wanted - We are looking for a Go developer to help us on an open-source projectKali NetHunter Updates - New releases in our NetHunter storeVirtual Machines Updates - New VirtualBox image format, weekly images, and build-scripts to build your ownNew Tools In Kali - Would not be a release without some new tools!For more details, see the bug tracker changelog.More info here.Download Kali Linux 2022.3
Read more...

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution
http://www.kitploit.com/2022/08/kali-linux-20223-penetration-testing.html

___________________________
@hacking_Attack
@Hacking_Video

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates.
The highlights for Kali’s 2022.3’s release:Discord Server (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-is-on-discord) - Kali’s new community real-time chat option has launched!Test Lab Environment (https://www.kali.org/blog/kali-linux-2022-3-release/#test-lab-environment) - Quickly create a test bed to learn, practice, and benchmark tools and compare their resultsOpening Kali-Tools Repo (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-tools-documentation) - We have opened up the Kali tools repository & are accepting your submissions!Help Wanted (https://www.kali.org/blog/kali-linux-2022-3-release/#help-wanted) - We are looking for a Go developer to help us on an open-source projectKali NetHunter Updates (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-nethunter-updates) - New releases in our NetHunter storeVirtual Machines Updates (https://www.kali.org/blog/kali-linux-2022-3-release/#kali-for-virtual-machines) - New VirtualBox image format, weekly images, and build-scripts to build your ownNew Tools In Kali (https://www.kali.org/blog/kali-linux-2022-3-release/#new-tools-in-kali) - Would not be a release without some new tools!For more details, see the bug tracker changelog (https://bugs.kali.org/changelog_page.php).
More info here (https://www.kali.org/blog/kali-linux-2022-3-release/).


Download Kali Linux 2022.3 (https://www.kali.org/get-kali/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
socks5 proxies opsec

When you connect to a socks5 proxy what information can it log about your system when you connect to it?

submitted by /u/dannova23
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
how do black hat wifi hackers make money?

Do they sell the packages they sniffed or what?

submitted by /u/Killbot001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FedTAFE is offering free self-paced CCNA right now. Offer expires on the 17th.

submitted by /u/PM_ME_PICS_OF_ROB0TS
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video