hacking: security in practice
I am done with Study Island, anyone got some good hacks?

My high school is still using Study Island and it pisses me off. Around 30% of my homework is spent on these annoying "study sets". Please help!

submitted by /u/_Cianoo
[link] [comments]

hacking: security in practice
Is there way to bypass this?

hey guys there’s a web game i play sigmally.com and i was wondering if there’s a way to get around unlocking the blocked skins.

months ago players would do inspect element and get through it but it’s been patched and was wondering if i can get around it now or even better post my own custom skins

I know the owner of the game, he pretty much gave up on it and doesn’t care. (I have a hacked account with a few blocked skins and many people do).

any link on a howe to would help! thanks

submitted by /u/YelloBandaPro346
[link] [comments]

hacking: security in practice
‘Too many eyes’ Optus hacker has apparently had cold feet? Or discretionary payment..

submitted by /u/DontBLeaveme
[link] [comments]

Multi-Factor Authentication Vulnerabilities

Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.Continue reading on InfoSec Write-ups »
Read more...

Multi-Factor Authentication Vulnerabilities
https://infosecwriteups.com/multi-factor-authentication-vulnerabilities-7a4b647a7b09?source=rss------bug_bounty-5

Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/multi-factor-authentication-vulnerabilities-7a4b647a7b09?source=rss------bug_bounty-5)

Hacking on Medium
Multi-Factor Authentication Vulnerabilities

https://cdn-images-1.medium.com/max/612/0*XQ6GuSc99C-2TcUk
Hi, my name is Hashar Mujahid and in this blog, we will discuss MFA and the most common MFA vulnerabilities that might occur.

Continue reading on InfoSec Write-ups »

Hacking on Medium
Around 500,000 Redis services are exposed without authentication on the internet

https://cdn-images-1.medium.com/max/1186/1*3CqnmNUAjXHNdx3PFmD41A.png
Redis is an open-source, in-memory data structure store used as a database, cache, and other types of services. Today I decided to do a…

Continue reading on Medium »

Hacking on Medium
How to exploit DOM XSS on DVWA — StackZero

https://cdn-images-1.medium.com/max/930/0*zKV9DnQqKZW7NkWQ.jpg
In this write-up we are going to we will learn how to pass all levels of DOM XSS on DVWA so we can better understand that vulnerability.

Continue reading on InfoSec Write-ups »

Hacking on Medium
Musician and Influencer in Bangladesh.

https://cdn-images-1.medium.com/max/2512/1*XisbQto5GF1OoEQRhNJ5wg.jpeg
He believes that “If You Work Hard, You Will Be Success “ & He also said that “Every inch of movement is better then miles of Intentions”…

Continue reading on Medium »

Kali Linux Tutorials
RDPHijack : Uses WinStationConnect API to Perform local/Remote RDP session hijacking

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket (e.g., golden ticket) of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target server.

To enumerate sessions locally/remotely, you could use Quser-BOF.

Usage

Usage: bof-rdphijack [your console session id] [target session id to hijack] [password|server] [argument]
Command Description
password Specifies the password of the user who owns the session to which you want to connect.
server Specifies the remote server that you want to perform RDP hijacking.
Sample usage
Redirect session 2 to session 1 (require SYSTEM privilege):
bof-rdphijack 1 2
Redirect session 2 to session 1 with password of the user who owns the session 2 (require high integrity beacon):
bof-rdphijack 1 2 password P@ssw0rd123
Redirect session 2 to session 1 for a remote server (require token/ticket of the user who owns the session 2):
bof-rdphijack 1 2 server SQL01.lab.internal
Download

Provide pentesting services
https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/

<!-- SC_OFF -->Hello everyone, does anyone know of a website similar to upwork where I can offer pentesting services independently? <!-- SC_ON --> submitted by /u/Equivalent_Year154 (https://www.reddit.com/user/Equivalent_Year154)
[link] (https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/) [comments] (https://www.reddit.com/r/redteamsec/comments/xp8euj/provide_pentesting_services/)

hacking: security in practice
Is a Bachelors degree in Cyber Security worth it?

Want to pursue a cyber security degree in Texas.

submitted by /u/South_Calligrapher62
[link] [comments]

hacking: security in practice
sirus xm radio spoof mac address

howdy not sure if ok to post hear if not iam sorry for waste peoples time on hear . ok so i am looking in to a way spoof mac a address then try to activate again bypass black list is there any one that could help me out with issue or know of place that could help me out . thank you for your time .

submitted by /u/Unusual-Might-471
[link] [comments]

hacking: security in practice
I miss blackshades

And i aint talkin bout the cracked version either. Anything similar nowadays that will run on Win10-11 that is as stable and somewhat UD? Would kill to go back to the good days. When dubstep was cool.

submitted by /u/lilpill69
[link] [comments]

hacking: security in practice
If all my database/tables disappeared from Postgres and some mysterious table appeared, got hacked right;)?

If all my database/tables disappeared from Postgres and some mysterious table appeared, got hacked right;)?

I have a new table for the user “postgres “ called “godransom”…. I tried to delete that and the user but I couldn’t until now,,, Just wondering if I really got hack or if my db just crashed…

submitted by /u/Being_incognito_
[link] [comments]