Hacking on Medium
Cybercriminals Have Stolen Over $100 Million in NFTs

https://cdn-images-1.medium.com/max/1000/0*cfBYIO2PC-IJbrLX.jpg
Over $100 million in NFTs have been stolen in the last year, according to a new report by blockchain analysis firm Elliptic. The report…

Continue reading on Medium »

Hacking on Medium
Hackers Using this to Distribute Malware

https://cdn-images-1.medium.com/max/728/0*LvOyXYhf0Ay1voqk.jpg
WordPress sites are being hacked to display fraudulent Cloudflare DDoS protection pages that lead to the delivery of malware such as…

Continue reading on Medium »

Hacking on Medium
My Top 3 HACKING Tools

https://cdn-images-1.medium.com/max/2600/1*qeSefUItx-p3rcLWe9FHNw.jpeg
For a Penetration Tester the right methodology is key. In order to implement that methodology, it is still crucial to have some sort of a…

Continue reading on Medium »

Hacking on Medium
Easy & Step-By-Step Ways of Finding Bugs in Software

The bug is one of the most horrifying words for many developers. Even many experienced and highly skilled developers encounter bugs as it…

Continue reading on Medium »

This SIMPLE trick will exploit image uploads - $2500 TikTok bug bounty.
https://infosecwriteups.com/this-simple-trick-will-exploit-image-uploads-2500-tiktok-bug-bounty-41fc01128ee?source=rss------bug_bounty-5

Stored XSS in SVG files.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/this-simple-trick-will-exploit-image-uploads-2500-tiktok-bug-bounty-41fc01128ee?source=rss------bug_bounty-5)

Top Golang Bug Bounty tools and repositories on Github
https://medium.com/@sam5epi0l/top-golang-bug-bounty-tools-and-repositories-on-github-d721547d2adc?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@sam5epi0l/top-golang-bug-bounty-tools-and-repositories-on-github-d721547d2adc?source=rss------bug_bounty-5)

Top Golang Bug Bounty tools and repositories on Github

Continue reading on Medium »
Read more...

dBmonster - Track WiFi Devices With Their Recieved Signal Strength
http://www.kitploit.com/2022/08/dbmonster-track-wifi-devices-with-their.html

With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength (dBm (https://en.m.wikipedia.org/wiki/DBm)) of their sent packets (https://www.kitploit.com/search/label/Packets) (sniffed with TShark (https://tshark.dev/setup/about/#what-is-tsharkdev)). These dBm values will be plotted to a graph (https://www.kitploit.com/search/label/Graph) with matplotlib (https://matplotlib.org/). It can help you to identify the exact location of nearby WiFi devices (use a directional WiFi antenna (https://simplewifi.com/blogs/news/omni-directional-vs-antennadirectional-antenna) for the best results) or to find out how your self made antenna (https://www.makeuseof.com/10-diy-long-range-wi-fi-antennas-you-can-make-at-home/) works the best (antenna radiation patterns (https://help.ui.com/hc/en-us/articles/115012664088-UniFi-Introduction-to-Antenna-Radiation-Patterns)).
Features on Linux and MacOS Feature Linux MacOS Listing WiFi interfaces ✅ ✅ Track & scan on 2.4GHz ✅ ✅ Track & scan on 5GHz ✅ ✅ Scanning for AP ✅ ✅ Scanning for STA ✅ Beep when device found ❓ ✅ Installation git clone https://github.com/90N45-d3v/dBmonster
cd dBmonster

# Install required tools (On MacOS without sudo)
sudo python requirements.py

# Start dBmonster
sudo python dBmonster.py
Has been successfully tested on... Platform  WiFi Adapter  Kali Linux ALFA AWUS036NHA, DIY Bi-Quad WiFi Antenna (https://www.instructables.com/Bi-Quad-WiFi-Antenna/) MacOS Monterey Internal card 802.11 a/b/g/n/ac (MBP 2019) * should work on any MacOS or Debian (https://www.kitploit.com/search/label/Debian) based system and with every WiFi card that supports monitor-mode Troubleshooting for MacOS Normally, you can only enable monitor-mode on the internal wifi card from MacOS with the airport (https://osxdaily.com/2007/01/18/airport-the-little-known-command-line-wireless-utility/) utility from Apple. Somehow, wireshark (https://www.kitploit.com/search/label/Wireshark) (or here TShark) can enable it too on MacOS. Cool, but because of the MacOS system and Wireshark’s workaround, there are many issues running dBmonster on MacOS. After some time, it could freeze and/or you have to stop dBmonster/Tshark manually from the CLI with the ps command. If you want to run it anyway, here are some helpful tips: Kill dBmonster, if you can't stop it over the GUI Look if there are any processes, named dBmonster, tshark (https://www.kitploit.com/search/label/Tshark) or python: sudo ps -U root
Now kill them with the following command: sudo kill
Stop monitor-mode, if it's enabled after running dBmonster sudo airport sniff
Press control + c after a few seconds * Please contact me on twitter (https://twitter.com/90N45), if you have anymore problems Working on... Capture signal strength data for offline graphs Generate graphs from normal wireshark.pcapng file Generate multiple graphs in one coordinate system Additional information If the tracked WiFi device is out of range or doesn't send any packets, the graph stops plotting till there is new data. So don't panic ;) dBmonster wasn't tested on all systems... If there are any errors or something is going wrong, contact me. If you used dBmonster on a non-listed Platform or WiFi Adapter, please open an issue (with Platform and WiFi Adapter information) and I will add your specification to the README.md

Download dBmonster (https://github.com/90N45-d3v/dBmonster)

More Hackers Adopt Sliver Toolkit as a Cobalt Strike Alternative
https://www.reddit.com/r/redteamsec/comments/wxe8q7/more_hackers_adopt_sliver_toolkit_as_a_cobalt/

submitted by /u/anusec (https://www.reddit.com/user/anusec)
[link] (https://www.bleepingcomputer.com/news/security/more-hackers-adopt-sliver-toolkit-as-a-cobalt-strike-alternative/) [comments] (https://www.reddit.com/r/redteamsec/comments/wxe8q7/more_hackers_adopt_sliver_toolkit_as_a_cobalt/)

SQL Injection
https://medium.com/@rajeevranjancom/sql-injection-dc256dd9060e?source=rss------bug_bounty-5

In this section, I’ll explain what SQL injection is, describe some common examples, explain how to find and exploit various kinds of SQL…Continue reading on Medium » (https://medium.com/@rajeevranjancom/sql-injection-dc256dd9060e?source=rss------bug_bounty-5)

hacking: security in practice
How would I fix this issue with airmon-ng?

I'm currently on Windows 10 and with Linode, have Ubuntu 18.04 and can use it through cmd. When I run the command "airmon-ng start wlan0mon" it returns the error "ls: cannot access '/sys/class/ieee80211/': No such file or directory". I've done some looking around but can't seem to find anything to help fix it.

submitted by /u/JustSomeIdot
[link] [comments]

Hacking on Medium
Tryhackme Confidential Makine Çözümü

https://cdn-images-1.medium.com/max/600/1*JAC8J25pk5M6YXcvKjps9Q.png
Açıklama: Selam arkadaşlar, Tryhackme plartformunda bulunan ‘Confidential’ isimli makinenin çözümünü sizinle paylaşıyor olacağım.

Continue reading on Medium »