hacking: security in practice
The Uber hack is quite severe and wide ranging. Wishing their blue teams the best of luck and love during this understandably difficult period.

https://external-preview.redd.it/lw02mVmhV3Z_uCaxo6WTlqXUhdBfCGd22AqlF9DEvGU.jpg?width=108&crop=smart&auto=webp&s=be64f7d22a443d50f8dfe0c36df0890b5cb80b66 submitted by /u/GeniusDodo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Proxy POC

So me and a friend of mine are working on a AITM proxy POC with python. They are stating that we should use flask but I’m not really sure that would work. Does anyone know of any example proxies we may be able to study from?

submitted by /u/KingA1mighty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
REQUEST Mentorship RESPONSE $$ :)

Good day everyone,

Al lot of the time, you hear a successful people talk about how lucky they were having a mentor in some shape. I'm just going to pretty much throw out there I have decent understanding of service security so a decent time in fundamentals, however with all the information that are there I am unable to find a ride methodology without constantly getting stuck somewhere to become a full webApp and mobile hacker. This is the only work I can do as I'm suffering from a disability which also left me in a wheelchair. So i have time.

I guess what I'm saying is I'm looking more for an experienced coach, that gets paid. I know this is a long shot and im sure the responses will range from take the xyz path to you need to figure it out youself etc. The thing is like I said I have a lot of time since my accident so I have an account at HTB Codecademy THM havent started many of the Udemy courses by zSecurity cause i dont know which ones will waste time and which will get me closer to the goal im trying to reach.

for example. I learned JS on codecademy, just to realize i should have done HTML CSS websites interactive with JS instead as i can just console.log('disappointment') now after another thing completed that didn't get me a step closer but mentally 2 steps back because of frustration.

Well, its 6 am and Ill take a go at OWASP 10 on THM even tho i was thinking if i became a full stack dev. id know the ins and outs of what to look for so ya... there goes my dilemma.

If anyone is interested to make some money on the side let me know.

Thanks

submitted by /u/Gammasntax
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Coding in movies vs real life 😂

https://external-preview.redd.it/gnUxv1bCadAUCMAM3lGfQEbae3joMSZQ8w947_78ikc.jpg?width=320&crop=smart&auto=webp&s=b77e27b30f522da441ca1a1624ff7c288441414d submitted by /u/PoeticHerald
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cross-site request forgery (CSRF) Explained and Exploited I
https://infosecwriteups.com/cross-site-request-forgery-csrf-explained-and-exploited-i-db464a61a582?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi! This blog will teach you how CSRF attacks happen and how we can prevent them.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/cross-site-request-forgery-csrf-explained-and-exploited-i-db464a61a582?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Cross-site request forgery (CSRF) Explained and Exploited I

Hi! This blog will teach you how CSRF attacks happen and how we can prevent them.Continue reading on InfoSec Write-ups »
Read more...

No rate limit to SmS bombing..
https://itsrvsinghh.medium.com/no-rate-limit-to-sms-bombing-7e96a9d57efc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone,Continue reading on Medium » (https://itsrvsinghh.medium.com/no-rate-limit-to-sms-bombing-7e96a9d57efc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
https://jayateerthag.medium.com/abusing-broken-link-in-fitbit-google-acquisition-to-collect-bugbounty-reports-on-behalf-of-google-5885a556eb7c?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I usually track acquisitions of websites for which I am hunting bugs regularly…Continue reading on Medium » (https://jayateerthag.medium.com/abusing-broken-link-in-fitbit-google-acquisition-to-collect-bugbounty-reports-on-behalf-of-google-5885a556eb7c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Information Gathering:
https://medium.com/@rajeevranjancom/information-gathering-43af1a221b8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

gathering different kinds of information about the target.Continue reading on Medium » (https://medium.com/@rajeevranjancom/information-gathering-43af1a221b8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

No rate limit to SmS bombing..

Hello everyone,Continue reading on Medium »
Read more...

Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !

I usually track acquisitions of websites for which I am hunting bugs regularly…Continue reading on InfoSec Write-ups »
Read more...