Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Gate.io Doubles Down on User Safety and Product Innovation Despite Global Economic Turmoil
https://cdn-images-1.medium.com/max/1200/1*c_K7M1UAGRDQutX40xjuow.jpeg
Blockchain technology is the spearhead of the journey towards a more decentralized and equitable world independent of traditional…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Gate.io Doubles Down on User Safety and Product Innovation Despite Global Economic Turmoil
https://cdn-images-1.medium.com/max/1200/1*c_K7M1UAGRDQutX40xjuow.jpeg
Blockchain technology is the spearhead of the journey towards a more decentralized and equitable world independent of traditional…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Gate.io Doubles Down on User Safety and Product Innovation Despite Global Economic Turmoil
Blockchain technology is the spearhead of the journey towards a more decentralized and equitable world independent of traditional financial…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
OSWP course review (2022)
https://cdn-images-1.medium.com/max/1094/1*pEf8NGX-HDr9xNLg58LVRg.png
A couple of months ago I finished OSWP and wanted to share an honest but brief and straight to the point review.
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
OSWP course review (2022)
https://cdn-images-1.medium.com/max/1094/1*pEf8NGX-HDr9xNLg58LVRg.png
A couple of months ago I finished OSWP and wanted to share an honest but brief and straight to the point review.
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
Medium
OSWP course review (2022)
A couple of months ago I finished OSWP and wanted to share an honest but brief and straight to the point review.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Encode x ETHSafari Hackathon: Filecoin & IPFS: Technical Q&A [Video + Slides]
https://cdn-images-1.medium.com/max/1920/1*e-jhcFysaYOh4YK3UTyi4w.jpeg
On Monday, 12th September we were delighted to host the Filecoin & IPFS: Technical Q&A for our Encode Club x ETHSafari Hackathon. This was…
Continue reading on Encode Club »
___________________________
@hacking_Attack
@Hacking_Video
Encode x ETHSafari Hackathon: Filecoin & IPFS: Technical Q&A [Video + Slides]
https://cdn-images-1.medium.com/max/1920/1*e-jhcFysaYOh4YK3UTyi4w.jpeg
On Monday, 12th September we were delighted to host the Filecoin & IPFS: Technical Q&A for our Encode Club x ETHSafari Hackathon. This was…
Continue reading on Encode Club »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Encode x ETHSafari Hackathon: Filecoin & IPFS: Technical Q&A [Video + Slides]
On Monday, 12th September we were delighted to host the Filecoin & IPFS: Technical Q&A for our Encode Club x ETHSafari Hackathon. This was…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
What Makes People Easily Fooled by Social Engineering
https://cdn-images-1.medium.com/max/1366/1*yIurAYexXZSVNT9iQDsAHg.jpeg
We live in today’s digital era where technology and cyber security are advancing in the blink of an eye. However, little did we realize…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
What Makes People Easily Fooled by Social Engineering
https://cdn-images-1.medium.com/max/1366/1*yIurAYexXZSVNT9iQDsAHg.jpeg
We live in today’s digital era where technology and cyber security are advancing in the blink of an eye. However, little did we realize…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
What Makes People Easily Fooled by Social Engineering
We live in today’s digital era where technology and cyber security are advancing in the blink of an eye. However, little did we realize…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Exploiting OAuth authentication vulnerabilities Part III
https://cdn-images-1.medium.com/max/837/0*0y1fPMtrMxM7S8ac.jpg
OAuth Exploitation
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
Exploiting OAuth authentication vulnerabilities Part III
https://cdn-images-1.medium.com/max/837/0*0y1fPMtrMxM7S8ac.jpg
OAuth Exploitation
Continue reading on InfoSec Write-ups »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Exploiting OAuth authentication vulnerabilities Part III
OAuth Exploitation
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
We are currently living in the digital age, where even for our routine tasks we are dependent on…
https://cdn-images-1.medium.com/max/611/0*w4dUrKC9k7X48cmk
When everything is digital, the data is supposed to be everywhere. At this point, SSEs assume that hackers only target large companies…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
We are currently living in the digital age, where even for our routine tasks we are dependent on…
https://cdn-images-1.medium.com/max/611/0*w4dUrKC9k7X48cmk
When everything is digital, the data is supposed to be everywhere. At this point, SSEs assume that hackers only target large companies…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Major Threats To Corporate Data
When everything is digital, the data is supposed to be everywhere. At this point, SSEs assume that hackers only target large companies…
Hacking on Medium
How to create a port scanner with bash script in one minute
Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
How to create a port scanner with bash script in one minute
Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to create a port scanner with bash script in one minute
Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Three Tools To Hack an iOS Application
https://cdn-images-1.medium.com/max/2600/0*OJ4thV9QbqwgXjKI
Recently I have been working on a project that requires me to hack an IOS application. The application makes an API signature to the…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Three Tools To Hack an iOS Application
https://cdn-images-1.medium.com/max/2600/0*OJ4thV9QbqwgXjKI
Recently I have been working on a project that requires me to hack an IOS application. The application makes an API signature to the…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Three Tools To Hack an iOS Application
Recently I have been working on a project that requires me to hack an IOS application. The application makes an API signature to the…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How to protect from Malware, using Virus Total and Mendix
https://cdn-images-1.medium.com/max/2560/1*_QSaMQ_pugzeHrjT8hKkdw.png
Over the past few years, you might have come across warning messages online. The most common one would be “This site is hacked” or “Your…
Continue reading on Mendix Community »
___________________________
@hacking_Attack
@Hacking_Video
How to protect from Malware, using Virus Total and Mendix
https://cdn-images-1.medium.com/max/2560/1*_QSaMQ_pugzeHrjT8hKkdw.png
Over the past few years, you might have come across warning messages online. The most common one would be “This site is hacked” or “Your…
Continue reading on Mendix Community »
___________________________
@hacking_Attack
@Hacking_Video
Medium
How to protect from Malware, using Virus Total and Mendix
Over the past few years, you might have come across warning messages online. The most common one would be “This site is hacked” or “Your…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
GraphCrawler : GraphQL Automated Security Testing Toolkit
Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint.
Version 1.2 is out
NEW: Can search for endpoints for you using Escape Technology’s powerful Graphinder tool. Just point it towards a domain and add the ‘-e’ option and Graphinder will do subdomain enumeration + search popular directories for GraphQL endpoints. After all this GraphCrawler will take over and work through each find. If the schema can not be introspected, you can supply it as a json file with the ‘-s’ option.
It will run through and check if mutation is enabled, check for any sensitive queries available, such as users and files, and it will also test any easy queries it find to see if authentication is required.
If introspection is not enabled on the endpoint it will check if it is an Apollo Server and then can run Clairvoyance to brute force and grab the suggestions to try to build the schema ourselves. (See the Clairvoyance project for greater details on this). It will then score the findings 1-10 with 10 being the most critical.
If you want to dig deeper into the schema you can also use graphql-path-enum to look for paths to certain types, like user IDs, emails, etc.
I hope this saves you as much time as it has for me
Usage
python graphCrawler.py -u https://test.com/graphql/api -o -a “”
██████╗ ██████╗ █████╗ ██████╗ ██╗ ██╗ ██████╗██████╗ █████╗ ██╗ ██╗██╗ ███████╗██████╗
██╔════╝ ██╔══██╗██╔══██╗██╔══██╗██║ ██║██╔════╝██╔══██╗██╔══██╗██║ ██║██║ ██╔════╝██╔══██╗
██║ ███╗██████╔╝███████║██████╔╝███████║██║ ██████╔╝███████║██║ █╗ ██║██║ █████╗ ██████╔╝
██║ ██║██╔══██╗██╔══██║██╔═══╝ ██╔══██║██║ ██╔══██╗██╔══██║██║███╗██║██║ ██╔══╝ ██╔══██╗
╚██████╔╝██║ ██║██║ ██║██║ ██║ ██║╚██████╗██║ ██║██║ ██║╚███╔███╔╝███████╗███████╗██║ ██║
╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚═╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚══╝╚══╝ ╚══════╝╚══════╝╚═╝ ╚═╝
The output option is not required and by default it will output to schema.json
Example output
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwbzuS4shMg33vZpiLw4xrLtsLK8GXrMwxvKTfAH41XJ5-YXPPCbr85MknuyM58UFqYS1fJfcsYhJwCtuJVXm1XCv9lTsxH8-M3grQyq_aX7Qvi65Wwh8oFPo7j15-5BpQ0KApZh3Nu9uUoKHEax1rI06lM6XKHyuM3ISwFDNIz6iQir2CMWQ1RmMm/s618/output.png
Requirements
* Python3
* Docker
* Install all Python dependencies with pip
Wordlist from google-10000-english
Download
___________________________
@hacking_Attack
@Hacking_Video
GraphCrawler : GraphQL Automated Security Testing Toolkit
Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint.
Version 1.2 is out
NEW: Can search for endpoints for you using Escape Technology’s powerful Graphinder tool. Just point it towards a domain and add the ‘-e’ option and Graphinder will do subdomain enumeration + search popular directories for GraphQL endpoints. After all this GraphCrawler will take over and work through each find. If the schema can not be introspected, you can supply it as a json file with the ‘-s’ option.
It will run through and check if mutation is enabled, check for any sensitive queries available, such as users and files, and it will also test any easy queries it find to see if authentication is required.
If introspection is not enabled on the endpoint it will check if it is an Apollo Server and then can run Clairvoyance to brute force and grab the suggestions to try to build the schema ourselves. (See the Clairvoyance project for greater details on this). It will then score the findings 1-10 with 10 being the most critical.
If you want to dig deeper into the schema you can also use graphql-path-enum to look for paths to certain types, like user IDs, emails, etc.
I hope this saves you as much time as it has for me
Usage
python graphCrawler.py -u https://test.com/graphql/api -o -a “”
██████╗ ██████╗ █████╗ ██████╗ ██╗ ██╗ ██████╗██████╗ █████╗ ██╗ ██╗██╗ ███████╗██████╗
██╔════╝ ██╔══██╗██╔══██╗██╔══██╗██║ ██║██╔════╝██╔══██╗██╔══██╗██║ ██║██║ ██╔════╝██╔══██╗
██║ ███╗██████╔╝███████║██████╔╝███████║██║ ██████╔╝███████║██║ █╗ ██║██║ █████╗ ██████╔╝
██║ ██║██╔══██╗██╔══██║██╔═══╝ ██╔══██║██║ ██╔══██╗██╔══██║██║███╗██║██║ ██╔══╝ ██╔══██╗
╚██████╔╝██║ ██║██║ ██║██║ ██║ ██║╚██████╗██║ ██║██║ ██║╚███╔███╔╝███████╗███████╗██║ ██║
╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚═╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚══╝╚══╝ ╚══════╝╚══════╝╚═╝ ╚═╝
The output option is not required and by default it will output to schema.json
Example output
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwbzuS4shMg33vZpiLw4xrLtsLK8GXrMwxvKTfAH41XJ5-YXPPCbr85MknuyM58UFqYS1fJfcsYhJwCtuJVXm1XCv9lTsxH8-M3grQyq_aX7Qvi65Wwh8oFPo7j15-5BpQ0KApZh3Nu9uUoKHEax1rI06lM6XKHyuM3ISwFDNIz6iQir2CMWQ1RmMm/s618/output.png
Requirements
* Python3
* Docker
* Install all Python dependencies with pip
Wordlist from google-10000-english
Download
___________________________
@hacking_Attack
@Hacking_Video
Kali Linux Tutorials
GraphCrawler : GraphQL Automated Security Testing Toolkit
Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint. It will run through and check if mutation is enabled.
hacking: security in practice
Administrator Passwort vergessen MacBook
Hey, ich habe mein Administrator Passwort vergessen, habe keine Rechnung mehr, weil ich das MacBook gebraucht auf eBay gekauft habe. Deshalb verweigert Apple mir ihre Hilfe. Es ist ein MacBook Pro von 2017. Die Daten habe ich alle gesichert. Ein Festplatten Austausch ist bei dem Modell nicht möglich. Die Methode mit Cmd + S habe ich schon ausprobiert, ich kann aber nichts in die Befehlsleiste eingeben, wenn alle Befehlsleisten runtergelaufen sind verschwinden sie wieder alle und ich lade auf dem Sperrbildschirm. Ich habe gehört, dass es einen Weg gibt, Arch Linus runterzuladen und damit die Festplatte zu "reparieren". Genauso habe ich es schon probiert, indem ich Windows gebootet habe, das hat aber nicht funktioniert. Auch wenn man MacOs neu aufsetzt habe ich weiterhin keine Administratorrechte. Danke für die Hilfe. Ich würde mich über "Anleitungen" freuen.
Mit freundlichen Grüßen
submitted by /u/Technical_Mistake_58
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Administrator Passwort vergessen MacBook
Hey, ich habe mein Administrator Passwort vergessen, habe keine Rechnung mehr, weil ich das MacBook gebraucht auf eBay gekauft habe. Deshalb verweigert Apple mir ihre Hilfe. Es ist ein MacBook Pro von 2017. Die Daten habe ich alle gesichert. Ein Festplatten Austausch ist bei dem Modell nicht möglich. Die Methode mit Cmd + S habe ich schon ausprobiert, ich kann aber nichts in die Befehlsleiste eingeben, wenn alle Befehlsleisten runtergelaufen sind verschwinden sie wieder alle und ich lade auf dem Sperrbildschirm. Ich habe gehört, dass es einen Weg gibt, Arch Linus runterzuladen und damit die Festplatte zu "reparieren". Genauso habe ich es schon probiert, indem ich Windows gebootet habe, das hat aber nicht funktioniert. Auch wenn man MacOs neu aufsetzt habe ich weiterhin keine Administratorrechte. Danke für die Hilfe. Ich würde mich über "Anleitungen" freuen.
Mit freundlichen Grüßen
submitted by /u/Technical_Mistake_58
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Administrator Passwort vergessen MacBook
Hey, ich habe mein Administrator Passwort vergessen, habe keine Rechnung mehr, weil ich das MacBook gebraucht auf eBay gekauft habe. Deshalb...