Hi, My name is Hashar Mujahid, Today we are going to solve some more SSTI labs from Portswiggers. If you want to learn what Server Side…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/server-side-template-injections-portswiggers-labs-walkthrough-part-iii-bc6983412a3d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
MacroPack - will simplify antimalware solutions bypass and automatize the process from vb source to final Office document or other maldoc payload type. This tool can be used for red teaming, pentests, demos, and social engineering assessments.

https://external-preview.redd.it/XBGvKd2L4z_W1548iqGagPaeXMmp5pgRXH--7acm3gg.jpg?width=640&crop=smart&auto=webp&s=2c15d389bdc2ceb84641054602ed8d753bb5fd69 submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Phishing: Não morda essa isca!

https://cdn-images-1.medium.com/max/1640/1*GJb8wz6cAWDmspGS_cS3Lg.png
Neste artigo vou caminhar com você na tentativa de responder as seguintes perguntas: O que é? Por que ainda é tão recorrente? Quais são os…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Certificates as a self employed pentester needed?
https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/

<!-- SC_OFF -->I‘m planning to become a self employed pentester soon. I work as a pentester since 5 months already and have a degree in cybersecurity. How important is it to have certifications when I want to become an independent pentester? At my work I also do all the pentests alone and it doesn‘t seem to be a problem to find customers for my company. <!-- SC_ON --> submitted by /u/Kamelbaum1 (https://www.reddit.com/user/Kamelbaum1)
[link] (https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/) [comments] (https://www.reddit.com/r/Pentesting/comments/wzgc0i/certificates_as_a_self_employed_pentester_needed/)

hacking: security in practice
Rubber ducky untraceable reverse tcp

I have an older USB rubber ducky and I’ve been messing around with some of the reverse tcp scripts using meterpreter and stuff. Is it possible to link into these remotely through like a proxy network or something?

submitted by /u/bltburglar
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

DoS and DDoS attacks
https://medium.com/@rajeevranjancom/dos-and-ddos-attacks-4cfe5926826c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks are malicious attempts ton disrupt the normal operations of a…Continue reading on Medium » (https://medium.com/@rajeevranjancom/dos-and-ddos-attacks-4cfe5926826c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

DoS and DDoS attacks

Denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks are malicious attempts ton disrupt the normal operations of a…Continue reading on Medium »
Read more...

OWASP: The Open Web Application Security Project

The Open Web Application Security Project (OWASP) is a non-profit foundation dedicated to improving software security.Continue reading on Medium »
Read more...

hacking: security in practice
Hack during contactless pay with amdroid(not android pay)

Lets say hypothetically if someone were trying to hack a device while a target is checking out with a qr code not NFC. With the goal being control over the device not the payment information, how much information could they get about the device itself. I said in the title not with android pay but lets say that vendor has a payment method, so for s#its and giggles we'll say that vendor is Kmart(just go with it). And Kmart has an app you enter your debit card in that app and you scan a QR code at checkout to pay.

Im open to all possibilities and likelihoods, if the attackers were nearby with a signal catcher to idk malware laiden in the device, the registers QR code is falsified and your information is rerouted. You choose thw scenario, its less important for whaty real question above is.

How much information about my device is transferred during that transaction? And I use a VPN with an obfuscated connection 24/7

submitted by /u/AnybodyOdd9509
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Chrome allows websites to write to the clipboard without the user’s permission

submitted by /u/fap_fap_fap_fapper
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

OWASP: The Open Web Application Security Project
https://medium.com/@capturethebugs/owasp-the-open-web-application-security-project-fc358b20e0d2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Open Web Application Security Project (OWASP) is a non-profit foundation dedicated to improving software security.Continue reading on Medium » (https://medium.com/@capturethebugs/owasp-the-open-web-application-security-project-fc358b20e0d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nuclei for Bug Bounties Hunters
https://kd-200.medium.com/nuclei-for-bug-bounties-hunters-f24665300399?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Nuclei is used to send requests across targets based on a template, providing fast scanning on a large number of hosts.Continue reading on Medium » (https://kd-200.medium.com/nuclei-for-bug-bounties-hunters-f24665300399?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video