Hacking on Medium
Directory Traversal — Explicação [PT/BR]

https://cdn-images-1.medium.com/max/700/0*pdn60eczwDoYlW3A.png
Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Ultimate Guide to free Pentesting Learning Resources!

https://cdn-images-1.medium.com/max/1280/1*-rIA1p0kyqdn5B-chmxL2g.jpeg
A simple list of resources that will help your learning process in penetration testing

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal — Explicação [PT/BR]

Hoje eu resolvi fazer um pouco diferente, normalmente eu tenho mais o hábito de escrever sobre write-ups do que sobre as vulnerabilidades…Continue reading on Medium »
Read more...

An Unusual Tale of Email Verification Bypass

Hey Guys. I’m Sagar Sajeev .Continue reading on Medium »
Read more...

An Unusual Tale of Email Verification Bypass
https://sagarsajeev.medium.com/an-unusual-tale-of-email-verification-bypass-dcf884d544eb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Guys. I’m Sagar Sajeev .Continue reading on Medium » (https://sagarsajeev.medium.com/an-unusual-tale-of-email-verification-bypass-dcf884d544eb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Latest Bug Bounty Programs, this Aug, Proud Year 2022

Have you heard about the daily bug bounty programs that invite programmers to find out issues with the software or app they have developed…Continue reading on Medium »
Read more...

Latest Bug Bounty Programs, this Aug, Proud Year 2022
https://medium.com/@crawsecurity/latest-bug-bounty-programs-this-aug-proud-year-2022-1cc7247dde6b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Have you heard about the daily bug bounty programs that invite programmers to find out issues with the software or app they have developed…Continue reading on Medium » (https://medium.com/@crawsecurity/latest-bug-bounty-programs-this-aug-proud-year-2022-1cc7247dde6b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
check blackhatworld

https://external-preview.redd.it/g2RMio4UBjD7mcP7YvkN_v4TSqGBof8UoKHjVmaXt6U.jpg?width=216&crop=smart&auto=webp&s=d7595a72b906b41d3d9fc5707ac157178ed820a4 submitted by /u/Iamdrasnia
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Wifi hacking - ESP32 or ESP8266

Hey, I wanted to learn a bit more about wifi hacking and maybe later on build a small device like WiFi Nugget.

I wanted to buy ESP32 because it's newer but then I've noticed that all of the tutorials / devices use older ESP8366. Why?

submitted by /u/Loiuy123_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
US govt offering $10 million for info on Conti ransomware members

https://external-preview.redd.it/KLsgl5ZqTNHLzuXw6acpCSmvjYCQr9RND0OWjm6kveU.jpg?width=640&crop=smart&auto=webp&s=dbc5eb32458b69438ac893f7e101efefcd282685 submitted by /u/EspoJ
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Open Source Project for the Community

Conviso Vulnerable Web Application is the OSS project from the Conviso Application Security for the community.

The project represents a vulnerable web application to practice security testing and improve your learning in the field.

In constant development, CVWA is a great free tool for students, developers and security professionals looking to deepen their knowledge as an ethical hacker and in the detection and prevention of vulnerabilities in web applications.

Your contributions and suggestions are welcome!

https://github.com/convisolabs/CVWA

submitted by /u/gabrielgaldino
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
What is the most bizzare/entertaining/interresting exploit you have heard about?

Hello!

I'm working on a presentation for our job event about weird exploits, side-channel attacks and vulnerabilities, since I have seen several exploits that are mind-blowing or simply funny and would love to compile it into a light-hearted presentation. Since there is a lot of interesting exploits and it's a topic that is pretty hard to google for effectively, I'm asking for help here to help with crowd-sourcing some of cool vulnerabilities you have seen or read about.

I'm mostly interested in exploits that are somewhat strange, maybe even borderline useless but still pretty cool or really unique, which makes them interesting. Something that makes you stop and think along the lines of "wow, I'd have never though about that, but it makes sense". Or generally anything bizzare or just fun. The point of the presentation is more to entertain than teach any serious or useful knowledge. Even outdated or useless exploits are all right.

As for examples of what I'm talking about, here are some of my favorite cool exploits:

* Voice command injection over radio using headphones as a receiving antenna.
* Keylogger using a gyroscope/accelerometer/microphone of a phone lying next to your keyboard.
* Exfiltrating data from air-gapped networks by generating radio signals using GPU/monitor
* Exfiltrating data from air-gapped networks using PC LEDs and security cameras.
* While a pretty well known, the way Stuxnet subtly destroyed nuclear turbines is cool.
* Side channel attacks - decoding crypto secrets and breaking algs using EM-emission/power consumption is mind blowing.

So, what cool or entertaining exploits have you seen?
Thanks for any reply!

submitted by /u/Mikina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video