Journey to my first bug
Yeah this is my first blog ever… It took me 4 Months + 2 Months gap = 6 Months, 2–3 hrs Each day to reach my first valid bug.Continue reading on Medium »
Read more...
Yeah this is my first blog ever… It took me 4 Months + 2 Months gap = 6 Months, 2–3 hrs Each day to reach my first valid bug.Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Analysis of the Wintermute Hack: An Inside Job
https://cdn-images-1.medium.com/max/1280/0*s8qzKn43BRqfYlNx.jpg
There’s a lot to cover here, so this report is going to get right to the steak and potatoes here. If you’re not familiar with what…
Continue reading on Medium »
Analysis of the Wintermute Hack: An Inside Job
https://cdn-images-1.medium.com/max/1280/0*s8qzKn43BRqfYlNx.jpg
There’s a lot to cover here, so this report is going to get right to the steak and potatoes here. If you’re not familiar with what…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Uber Claims No Sensitive Data Exposed in Latest Breach… But There’s More to This
https://cdn-images-1.medium.com/max/800/0*Vx-Cf8WDAXa-XZ1Q.jpg
Thursday, 15 Sep 2022 — Uber’s Data leaked. That puts users’ confidential data at risk. The reason behind this was the internal computer…
Continue reading on Medium »
Uber Claims No Sensitive Data Exposed in Latest Breach… But There’s More to This
https://cdn-images-1.medium.com/max/800/0*Vx-Cf8WDAXa-XZ1Q.jpg
Thursday, 15 Sep 2022 — Uber’s Data leaked. That puts users’ confidential data at risk. The reason behind this was the internal computer…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HackTheBox — Meow — Writeup
https://cdn-images-1.medium.com/max/1200/0*auMKKc1Lya4hDO-_
Let’s try some writing skills. As my first post I decided to post a writeup for the machine called Meow on HackTheBox. This is the first…
Continue reading on Medium »
HackTheBox — Meow — Writeup
https://cdn-images-1.medium.com/max/1200/0*auMKKc1Lya4hDO-_
Let’s try some writing skills. As my first post I decided to post a writeup for the machine called Meow on HackTheBox. This is the first…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HackTheBox — Fawn — Writeup
https://cdn-images-1.medium.com/max/1200/0*Ysle_eEC73_e7E-z
Another day for another writeup. This time I am continuing my path on HackTheBox called Starting Point. I am on Tier 0 which is the first…
Continue reading on Medium »
HackTheBox — Fawn — Writeup
https://cdn-images-1.medium.com/max/1200/0*Ysle_eEC73_e7E-z
Another day for another writeup. This time I am continuing my path on HackTheBox called Starting Point. I am on Tier 0 which is the first…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HackTheBox — Dancing — Writeup
https://cdn-images-1.medium.com/max/1200/0*KnSysGYxDlkngv8T
This time we are going to exploit the Dancing machine which is Windows machine this time. This machine runs SMB service on port 445 and…
Continue reading on Medium »
HackTheBox — Dancing — Writeup
https://cdn-images-1.medium.com/max/1200/0*KnSysGYxDlkngv8T
This time we are going to exploit the Dancing machine which is Windows machine this time. This machine runs SMB service on port 445 and…
Continue reading on Medium »
Hacking on Medium
HackTheBox — Redeemer — Writeup
https://cdn-images-1.medium.com/max/698/0*tIoFX7C6MBXu4FiE
Another great machine from HackTheBox called Redeemer, which is a Linux machine running a Redis service. I have not been in touch with…
Continue reading on Medium »
HackTheBox — Redeemer — Writeup
https://cdn-images-1.medium.com/max/698/0*tIoFX7C6MBXu4FiE
Another great machine from HackTheBox called Redeemer, which is a Linux machine running a Redis service. I have not been in touch with…
Continue reading on Medium »
Medium
HackTheBox — Redeemer — Writeup
Another great machine from HackTheBox called Redeemer, which is a Linux machine running a Redis service. I have not been in touch with…
Hacking on Medium
HackTheBox — Appointment — Writeup
https://cdn-images-1.medium.com/max/705/0*VpWw02czapHEDq09
Another day, another machine. This time it was a machine called Appointment and we did exploit SQL vulnerability on the login form. I…
Continue reading on Medium »
HackTheBox — Appointment — Writeup
https://cdn-images-1.medium.com/max/705/0*VpWw02czapHEDq09
Another day, another machine. This time it was a machine called Appointment and we did exploit SQL vulnerability on the login form. I…
Continue reading on Medium »
Medium
HackTheBox — Appointment — Writeup
Another day, another machine. This time it was a machine called Appointment and we did exploit SQL vulnerability on the login form. I…
Hacking on Medium
HackTheBox — Sequel — Writeup
https://cdn-images-1.medium.com/max/702/0*OngG5QOWF5U5CA0x
This time I did the Sequel machine from HackTheBox. This one was a MariaDB running machine with poorly configured password.
Continue reading on Medium »
HackTheBox — Sequel — Writeup
https://cdn-images-1.medium.com/max/702/0*OngG5QOWF5U5CA0x
This time I did the Sequel machine from HackTheBox. This one was a MariaDB running machine with poorly configured password.
Continue reading on Medium »
Medium
HackTheBox — Sequel — Writeup
This time I did the Sequel machine from HackTheBox. This one was a MariaDB running machine with poorly configured password.
hacking: security in practice
Any way to block unlimited devices on new netcut?
The new netcut has a limit on how much devices to be controlled which is 3 i guess, but i really want to be able to block all devices no matter the number.
submitted by /u/Walid_Fakhfakh
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Any way to block unlimited devices on new netcut?
The new netcut has a limit on how much devices to be controlled which is 3 i guess, but i really want to be able to block all devices no matter the number.
submitted by /u/Walid_Fakhfakh
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
reddit
Any way to block unlimited devices on new netcut?
The new netcut has a limit on how much devices to be controlled which is 3 i guess, but i really want to be able to block all devices no matter...
hacking: security in practice
Is learning about sql injection and xss still nessesary?
I figured that sense its 2022 and everyone knows how to protect against such vulnerabilities that theres no way that modern sites could still be vulnerable to something so basic/simple. But I have a friend that was a web penetration tester and he said "Holy shit, you're wrong! You should always check for these bugs."
We have vulnerability scanners that would catch these bugs if they existed and frameworks that are made with built in protection against xss and sql injection. So, if people are still finding these bugs, then why? Surely its not as simle to find them as it used to be. Wouldnt it at least take more effort to find and exploit these bugs in modern times?
Im not opposed to learning about sql injection and xss. I just dont see why we still worry about it.
submitted by /u/Lil_Doll404
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Is learning about sql injection and xss still nessesary?
I figured that sense its 2022 and everyone knows how to protect against such vulnerabilities that theres no way that modern sites could still be vulnerable to something so basic/simple. But I have a friend that was a web penetration tester and he said "Holy shit, you're wrong! You should always check for these bugs."
We have vulnerability scanners that would catch these bugs if they existed and frameworks that are made with built in protection against xss and sql injection. So, if people are still finding these bugs, then why? Surely its not as simle to find them as it used to be. Wouldnt it at least take more effort to find and exploit these bugs in modern times?
Im not opposed to learning about sql injection and xss. I just dont see why we still worry about it.
submitted by /u/Lil_Doll404
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
reddit
Is learning about sql injection and xss still nessesary?
I figured that sense its 2022 and everyone knows how to protect against such vulnerabilities that theres no way that modern sites could still be...
hacking: security in practice
Pool on the roof - September 26, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Pool on the roof - September 26, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?
This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.
Make sure to read our wiki as it's full of resources for you.
Keep all beginner questions in this weekly stickied post.
submitted by /u/AutoModerator
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
reddit
Pool on the roof - September 26, 2022
Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF...
hacking: security in practice
Which cyber security certificates should you get?
Hey guys, I am really into offensive pentesting but dont have any sort of certificates yet(other then the tryhackme path accomplishment certificates, which I am not too sure if they hold up, because no exam is required). Which certificates are the best to get? Which ones are the most value for the money? Thank you for your answers
submitted by /u/MathematicianDeep214
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Which cyber security certificates should you get?
Hey guys, I am really into offensive pentesting but dont have any sort of certificates yet(other then the tryhackme path accomplishment certificates, which I am not too sure if they hold up, because no exam is required). Which certificates are the best to get? Which ones are the most value for the money? Thank you for your answers
submitted by /u/MathematicianDeep214
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community