Hacking on Medium
Guacamaya: Grupo responsable de divulgar 10 teras de datos de diferentes países de Latinoamérica.

https://cdn-images-1.medium.com/max/1738/0*HnQ16s9Te5xiUKlF
Conocido como Guacamaya, este grupo de delincuentes informáticos supuestamente es el responsable de filtrar cerca de 10 Terabytes de…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Ataques de Phishing modernos; Huellas dactilares en ingeniería social

https://cdn-images-1.medium.com/max/1698/0*MJXWPofZ8QT5WjjK
Las personas comparten cada vez más su información personal en línea, gracias a la rápida expansión del uso de Internet. Como resultado…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Saving videos in a group

Hey, Im in a group where there are images and videos I want to save but the group restricted savings. I can take screenshot from pc but wondered if there is any easier way? I’m pretty sure telegram save those files on pc to represent them. Anybody know where the files are?

submitted by /u/FunPalpitation176
[link] [comments]

hacking: security in practice
I am done with Study Island, anyone got some good hacks?

My high school is still using Study Island and it pisses me off. Around 30% of my homework is spent on these annoying "study sets". Please help!

submitted by /u/_Cianoo
[link] [comments]

hacking: security in practice
Is there way to bypass this?

hey guys there’s a web game i play sigmally.com and i was wondering if there’s a way to get around unlocking the blocked skins.

months ago players would do inspect element and get through it but it’s been patched and was wondering if i can get around it now or even better post my own custom skins

I know the owner of the game, he pretty much gave up on it and doesn’t care. (I have a hacked account with a few blocked skins and many people do).

any link on a howe to would help! thanks

submitted by /u/YelloBandaPro346
[link] [comments]

hacking: security in practice
‘Too many eyes’ Optus hacker has apparently had cold feet? Or discretionary payment..

submitted by /u/DontBLeaveme
[link] [comments]

Multi-Factor Authentication Vulnerabilities

Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.Continue reading on InfoSec Write-ups »
Read more...

Multi-Factor Authentication Vulnerabilities
https://infosecwriteups.com/multi-factor-authentication-vulnerabilities-7a4b647a7b09?source=rss------bug_bounty-5

Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/multi-factor-authentication-vulnerabilities-7a4b647a7b09?source=rss------bug_bounty-5)

Hacking on Medium
Multi-Factor Authentication Vulnerabilities

https://cdn-images-1.medium.com/max/612/0*XQ6GuSc99C-2TcUk
Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.

Continue reading on InfoSec Write-ups »

Hacking on Medium
Around 500,000 Redis services are exposed without authentication on the internet

https://cdn-images-1.medium.com/max/1186/1*3CqnmNUAjXHNdx3PFmD41A.png
Redis is an open-source, in-memory data structure store used as a database, cache, and other types of services. Today I decided to do a…

Continue reading on Medium »

Hacking on Medium
How to exploit DOM XSS on DVWA — StackZero

https://cdn-images-1.medium.com/max/930/0*zKV9DnQqKZW7NkWQ.jpg
In this write-up we are going to we will learn how to pass all levels of DOM XSS on DVWA so we can better understand that vulnerability.

Continue reading on InfoSec Write-ups »

Hacking on Medium
Musician and Influencer in Bangladesh.

https://cdn-images-1.medium.com/max/2512/1*XisbQto5GF1OoEQRhNJ5wg.jpeg
He believes that “If You Work Hard, You Will Be Success “ & He also said that “Every inch of movement is better then miles of Intentions”…

Continue reading on Medium »

Kali Linux Tutorials
RDPHijack : Uses WinStationConnect API to Perform local/Remote RDP session hijacking

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket (e.g., golden ticket) of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target server.

To enumerate sessions locally/remotely, you could use Quser-BOF.

Usage

Usage: bof-rdphijack [your console session id] [target session id to hijack] [password|server] [argument]
Command Description
password Specifies the password of the user who owns the session to which you want to connect.
server Specifies the remote server that you want to perform RDP hijacking.
Sample usage
Redirect session 2 to session 1 (require SYSTEM privilege):
bof-rdphijack 1 2
Redirect session 2 to session 1 with password of the user who owns the session 2 (require high integrity beacon):
bof-rdphijack 1 2 password P@ssw0rd123
Redirect session 2 to session 1 for a remote server (require token/ticket of the user who owns the session 2):
bof-rdphijack 1 2 server SQL01.lab.internal
Download

Provide pentesting services
https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/

<!-- SC_OFF -->Hello everyone, does anyone know of a website similar to upwork where I can offer pentesting services independently? <!-- SC_ON --> submitted by /u/Equivalent_Year154 (https://www.reddit.com/user/Equivalent_Year154)
[link] (https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/) [comments] (https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/)