Bussines logic error on p-store.net

Hello nama saya bagus lindu, kali ini saya menemukan kerentanan pada p-store.net, seperti yg kita tahu p-store.net adalah sebuah…Continue reading on Medium »
Read more...

How i Found Unauthorized Bypass RCE
https://medium.com/@yashshirke7806/how-i-found-unauthorized-bypass-rce-3591a86425a9?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Easy Vulnerability Leads To admin Console ,P1 typeContinue reading on Medium » (https://medium.com/@yashshirke7806/how-i-found-unauthorized-bypass-rce-3591a86425a9?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Anonymous hacker, who bragged about exploits on TikTok, says he was raided by Canadian police

https://external-preview.redd.it/od8BxKnQ-P706qbeObL1VFqfjUvkgWN1wfQLuHRureM.jpg?width=640&crop=smart&auto=webp&s=09467602c218d61c49a30b210ff8712f009a4723 submitted by /u/BollocksAsBalls
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
where to earn money?

I have heard about people earning some money with hacking like bug bounty and such? Now I was interested which things these are and how they work a d if its easy to do them because iam a programmer

submitted by /u/woolliegames
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible reverse engineer a challenge, in order to crack a password from a NTLMv2 Authorization header?

Hello all,

Imagine the following environment: Couple of urlencoded form requests are done over http and there is an NTLMv2 authentication (the whole 3 yards). Then wireshark sniffs the packets and decodes them - I get mostly everything expected. My question is, is there a way to somehow decode the password? From what I get the mechanism works as follows - server sends a challenge (nonce) which is hashed using the client's password. Could I use the NTLMv2 Client Challenge and NTProofStr for that purpose and somehow reverse engineer the encoding?

Authorization header looks as follows:

```

NTLM TlRMTVNTUAADAAAAGAAYAFgAAAAOAQ4BcAAAAAwADAB+AQAADAAMAIo......

```

​

Excuse me if I'm asking borderline stupid questions, it's actually my first time diving into the cybersecurity realm.

submitted by /u/hipnozzza
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Directory Traversal 18rb Data Leaked
https://baguslindu.medium.com/directory-traversal-18rb-data-leaked-913c5843887a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hallo, sebenernya ini merupakan sesi iseng nulis write up, jadi begini pada tanggal 5 februari 2022 yang lalu saya melakukan sebuah…Continue reading on Medium » (https://baguslindu.medium.com/directory-traversal-18rb-data-leaked-913c5843887a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Common C Vulnerabilities
https://medium.com/@capturethebugs/common-c-vulnerabilities-56ffad22581e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

IntroductionContinue reading on Medium » (https://medium.com/@capturethebugs/common-c-vulnerabilities-56ffad22581e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How i Found Unauthorized Bypass RCE

Easy Vulnerability Leads To admin Console ,P1 typeContinue reading on Medium »
Read more...

Directory Traversal 18rb Data Leaked

Hallo, sebenernya ini merupakan sesi iseng nulis write up, jadi begini pada tanggal 5 februari 2022 yang lalu saya melakukan sebuah…Continue reading on Medium »
Read more...

Common C Vulnerabilities

IntroductionContinue reading on Medium »
Read more...

Session Management Part — 2
https://medium.com/@sathvika03/session-management-part-2-18006a31bedc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Let us learn some more vulnerbailities related to SessionsContinue reading on Medium » (https://medium.com/@sathvika03/session-management-part-2-18006a31bedc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Session Management Part — 2

Let us learn some more vulnerbailities related to SessionsContinue reading on Medium »
Read more...