Story of a reserved CVE-2022–23361

Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell…Continue reading on Medium »
Read more...

Story of a reserved CVE-2022–23361
https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello hackers, hope you guys are doing well and hunting lots of bugs. This is gonna be my first write-up, as the title says I will tell…Continue reading on Medium » (https://vineet08.medium.com/cve-2022-23361-2c81d836c6fe?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Story of a 15-year-old who hacked NASA out of curiosity.

https://cdn-images-1.medium.com/max/1200/1*Dtkj2M47fSIN5Zr8rtCr_A.jpeg
It seems fictional and part of some mind-boggling storybook, but this story is as real as it gets. The story of a 15-year-old boy hacking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
THM — Vulnnet: Endgame

https://cdn-images-1.medium.com/max/600/1*xWlosEwMIsGV0Y7Kriz1Mg.png
Platform: TryHackMe
Room: Vulnnet: Endgame
Difficulty: Medium
Tags: Security, Penetration Testing, Linux, Web
Description: Hack your way…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How We Found Elf!

https://cdn-images-1.medium.com/max/878/1*6sGiBw9PT4NH41U-OLu98w.jpeg
Some time ago, one of my friends saw a video on YouTube in which the video maker starts hacking an Instagram account using a program…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Destroy anyone computer in just 5 seconds (Part_1)

https://cdn-images-1.medium.com/max/719/1*fdtXBwnMPVk1-jEDfIyT4Q.png
Hello people, I am here again with cool stuff. You can destroy anyone computer within 5 seconds if you have physical access to it. So lets…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How legit are these hacktivists?

So it finally looks like hacktivism is returning but has gotten more diverse. However, does this count as legitimate hacktivism:

https://www.govtech.com/blogs/lohrmann-on-cybersecurity/hacktivism-and-ddos-attacks-rise-dramatically-in-2022

Are most of those attacks nation states or are those really regular individuals who just wanted to make a difference?

submitted by /u/notburneddown
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Intercepting Rheem Econet Thermostat Traffic

Has anyone ever hacked one of these thermostats to control them without the cloud? Either by tricking the thermostat into thinking it's communicating with the cloud or being able to send it commands as if it was the cloud?

It has a cloud API but no local API. It would be great to actually communicate with it without the cloud.

submitted by /u/Dan11106
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
is there any alternatives to blackeye and zphisher?

so I want to learn more about phishing, and I tried zphisher, the thing is it says "not secure" when you choose the option for cloudflare, and if you choose ngrok it shows a warning before you visit the link ( is there a way to bypass that? ) same with blackeye

I was wondering is there any automated phishing tool that is free ( I don't want to pay for domains, so I didn't go with gophish lol ) so is there anything that I can do to learn about phishing and make it look legit and also free? ( or even not free but preferably free )

submitted by /u/Fuck_Life_421
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Could fake Lightning EarPods contain malware?

They’re so sketchy, use BT to connect even though they’re wired🧐

submitted by /u/SpendsTime
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Click Fraud botnet wanted to train an AI model

Im working on a click fraud detection using Redis AI in AWS While I do have a clickstream data to train and simulate on, Id love to test it in a real life scenario. While I can spin a Kubernetes cluster and randomly click with random headers and browser fingerprints, im looking for something closer to the real thing. If you have any repos you can recommend that automate clicks as different devices or any suggestions Id highly appreciate it. In my case all clicks will be pointed at an API gateway IP and either get checked against a blacklist or go further into a detection model and lastly into historical storage.

submitted by /u/spca2001
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I was able to bypass OTP using Response Manipulation
https://medium.com/@gautamnangia/how-i-was-able-to-bypass-otp-using-response-manipulation-8a92896188cf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

$whoamiContinue reading on Medium » (https://medium.com/@gautamnangia/how-i-was-able-to-bypass-otp-using-response-manipulation-8a92896188cf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Pen testing questions
https://www.reddit.com/r/Pentesting/comments/xgzy2m/pen_testing_questions/

How does a full pawn work? submitted by /u/Important_Sand1853 (https://www.reddit.com/user/Important_Sand1853)
[link] (https://www.reddit.com/r/Pentesting/comments/xgzy2m/pen_testing_questions/) [comments] (https://www.reddit.com/r/Pentesting/comments/xgzy2m/pen_testing_questions/)

___________________________
@hacking_Attack
@Hacking_Video