Hacking on Medium
Uber Claims No Sensitive Data Exposed in Latest Breach… But There’s More to This

https://cdn-images-1.medium.com/max/800/0*Vx-Cf8WDAXa-XZ1Q.jpg
Thursday, 15 Sep 2022 — Uber’s Data leaked. That puts users’ confidential data at risk. The reason behind this was the internal computer…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Meow — Writeup

https://cdn-images-1.medium.com/max/1200/0*auMKKc1Lya4hDO-_
Let’s try some writing skills. As my first post I decided to post a writeup for the machine called Meow on HackTheBox. This is the first…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Fawn — Writeup

https://cdn-images-1.medium.com/max/1200/0*Ysle_eEC73_e7E-z
Another day for another writeup. This time I am continuing my path on HackTheBox called Starting Point. I am on Tier 0 which is the first…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Dancing — Writeup

https://cdn-images-1.medium.com/max/1200/0*KnSysGYxDlkngv8T
This time we are going to exploit the Dancing machine which is Windows machine this time. This machine runs SMB service on port 445 and…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Redeemer — Writeup

https://cdn-images-1.medium.com/max/698/0*tIoFX7C6MBXu4FiE
Another great machine from HackTheBox called Redeemer, which is a Linux machine running a Redis service. I have not been in touch with…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Appointment — Writeup

https://cdn-images-1.medium.com/max/705/0*VpWw02czapHEDq09
Another day, another machine. This time it was a machine called Appointment and we did exploit SQL vulnerability on the login form. I…

Continue reading on Medium »

Hacking on Medium
HackTheBox — Sequel — Writeup

https://cdn-images-1.medium.com/max/702/0*OngG5QOWF5U5CA0x
This time I did the Sequel machine from HackTheBox. This one was a MariaDB running machine with poorly configured password.

Continue reading on Medium »

https://preview.redd.it/xeka1vwgj7q91.png?width=640&crop=smart&auto=webp&s=18fd4ec9ded2085e4640b9919c7d890014fcb704 submitted by /u/serene_noise
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Any way to block unlimited devices on new netcut?

The new netcut has a limit on how much devices to be controlled which is 3 i guess, but i really want to be able to block all devices no matter the number.

submitted by /u/Walid_Fakhfakh
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Is learning about sql injection and xss still nessesary?

I figured that sense its 2022 and everyone knows how to protect against such vulnerabilities that theres no way that modern sites could still be vulnerable to something so basic/simple. But I have a friend that was a web penetration tester and he said "Holy shit, you're wrong! You should always check for these bugs."

We have vulnerability scanners that would catch these bugs if they existed and frameworks that are made with built in protection against xss and sql injection. So, if people are still finding these bugs, then why? Surely its not as simle to find them as it used to be. Wouldnt it at least take more effort to find and exploit these bugs in modern times?

Im not opposed to learning about sql injection and xss. I just dont see why we still worry about it.

submitted by /u/Lil_Doll404
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Pool on the roof - September 26, 2022

Have a no0b question? New to hacking? Looking for a script? Need help with your github project? Something wrong with your payload? Stuck on a CTF or bug bounty?

This is a weekly recurring post to make friends with other hackers, ask questions, and get any type of help you may need.

Make sure to read our wiki as it's full of resources for you.

Keep all beginner questions in this weekly stickied post.

submitted by /u/AutoModerator
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
Which cyber security certificates should you get?

Hey guys, I am really into offensive pentesting but dont have any sort of certificates yet(other then the tryhackme path accomplishment certificates, which I am not too sure if they hold up, because no exam is required). Which certificates are the best to get? Which ones are the most value for the money? Thank you for your answers

submitted by /u/MathematicianDeep214
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖

HTML Injection inside Email body- The First BUG I hunted down in a Bug Bounty Platform!
https://infosecwriteups.com/html-injection-inside-email-body-the-first-bug-i-hunted-in-a-bug-bounty-platform-3c96b1e0ae9f?source=rss------bug_bounty-5

Hola Amigo!!Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/html-injection-inside-email-body-the-first-bug-i-hunted-in-a-bug-bounty-platform-3c96b1e0ae9f?source=rss------bug_bounty-5)

SharpNamedPipePTH - Pass The Hash To A Named Pipe For Token Impersonation
http://www.kitploit.com/2022/09/sharpnamedpipepth-pass-hash-to-named.html

This project is a C# tool to use Pass-the-Hash for authentication (https://www.kitploit.com/search/label/Authentication) on a local Named Pipe for user Impersonation. You need a local administrator or SEImpersonate rights to use this. There is a blog post for explanation:https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/It is heavily based on the code from the project Sharp-SMBExec (https://github.com/checkymander/Sharp-SMBExec/).I faced certain Offensive Security project situations in the past, where I already had the NTLM-Hash of a low privileged user account and needed a shell for that user on the current compromised system - but that was not possible with the current public tools. Imagine two more facts for a situation like that - the NTLM Hash could not be cracked and there is no process of the victim user to execute shellcode in it or to migrate into that process. This may sound like an absurd edge-case for some of you. I still experienced that multiple times. Not only in one engagement I spend a lot of time searching for the right tool/technique in that specific situation.My personal goals for a tool/technique were:Fully featured shell or C2-connection as the victim user-accountIt must to able to also Impersonate low privileged accounts - depending on engagement goals it might be needed to access (https://www.kitploit.com/search/label/Access) a system with a specific user such as the CEO, HR-accounts, SAP-administrators or othersThe tool can be used as C2-moduleThe impersonated user unfortunately has no network authentication allowed, as the new process is using an Impersonation (https://www.kitploit.com/search/label/Impersonation) Token which is restricted. So you can only use this technique for local actions with another user.There are two ways to use SharpNamedPipePTH. Either you can execute a binary (https://www.kitploit.com/search/label/Binary) (with or without arguments):SharpNamedPipePTH.exe username:testing hash:7C53CFA5EA7D0F9B3B968AA0FB51A3F5 binary:C:\windows\system32\cmd.exe