Bug Bounty on Medium
Exposed Unsafe ActiveX Method [CWE-618] — The Hacktivists

https://cdn-images-1.medium.com/max/2600/1*4ZaQXs_vH6lIlM6jvuFR9Q.jpeg
Exposed Unsafe ActiveX Method weakness describes exposure of dangerous ActiveX methods that perform actions outside the browser’s security…

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Bug Bounty on Medium
IDOR Vulenebility with empty response still exposing sensitive details of customers!

Hello there👋!
For many days I was thinking of sharing my bug bounty experience with the community and finally writing my first write-up.

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Bug Bounty on Medium
NULL Pointer Dereference [CWE-476] — The Hacktivists

https://cdn-images-1.medium.com/max/2600/1*QC2szUXNDa3JsW7LEeQ0YA.jpeg
NULL Pointer Dereference weakness occurs where software dereferences a pointer with a value of NULL instead of a valid address.

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Exploiting XML External Entity (XXE) via image file upload

This lab lets users attach avatars to comments and uses the Apache Batik library to process avatar image files.Continue reading on The Startup »
Read more...

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Kali Linux Tutorials
SSRFuzz : A Tool To Find Server Side Request Forgery Vulnerabilities, With CRLF Chaining Capabilities

SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities. Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired by Orange’s work for chaining these types […]

The post SSRFuzz : A Tool To Find Server Side Request Forgery Vulnerabilities, With CRLF Chaining Capabilities appeared first on Kali Linux Tutorials.

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Hacking on Medium
Hack The Box — Reel2 10.10.10.210 Writeup

https://cdn-images-1.medium.com/max/743/0*r01nfdAwIf9_mlyM.png
Reel2 starts by gathering names from users in a Social Networking Service and create a new form of usernames then spray a seasonal…

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Hacking on Medium
Akun Whatsapp Terkena Hack

https://cdn-images-1.medium.com/max/720/1*ecHcbXgg0bc6mUUnuztFLw.jpeg
Sebelum membahas lebih jauh membahas tentang kena Hack Whatsapp kita kenali dulu awal mula terkena hacknya.

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Hacking on Medium
Hack The Box — Forest: Walkthrough (without Metasploit)

https://cdn-images-1.medium.com/max/600/1*DIgXhb4uBvyhN2JDXX3EWw.png
Hack The Box — Forest: Walkthrough (without Metasploit)

Continue reading on Medium »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Hacking on Medium
Exploiting XML External Entity (XXE) via image file upload

https://cdn-images-1.medium.com/max/1201/1*pimAjTxBnEIil6pqkRW53Q.png
This lab lets users attach avatars to comments and uses the Apache Batik library to process avatar image files.

Continue reading on The Startup »

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Reprojecting the Perseverance landing footage onto satellite imagery
https://www.reddit.com/r/hackernews/comments/m4q6de/reprojecting_the_perseverance_landing_footage/

submitted by /u/qznc_bot2 (https://www.reddit.com/user/qznc_bot2)
[link] (https://matthewearl.github.io/2021/03/06/mars2020-reproject/) [comments] (https://www.reddit.com/r/hackernews/comments/m4q6de/reprojecting_the_perseverance_landing_footage/)

Deep Web
yo

is there anyone out there that does physical cards not a noob just a question or are they all still scammers ?

submitted by /u/adthaone
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

Deep Web
Lucky 2 Lucky

https://b.thumbs.redditmedia.com/FSOFrYjfNu7CYZiZ0zkRGhRktEKduQiBKA-46_f115w.jpg submitted by /u/Breecebreeze
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

hacking: security in practice
Security concerns about FFMpeg and youtube-dl

ok so I've been using youtube-dl for a while now with no issues but If I wanted to get anything more than 720p I have to get FFMpeg and I read online that it can have vulnerabilities I wonder if anyone here can confirm whether that is wrong or right and if it is right is there any alternative you are aware of ?
thank you in advance

submitted by /u/lolzatheguy
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭

hacking: security in practice
How do I connect to a separate hashing rig from my laptop to crack a file/pw.

I can't seem to find anything on how I use a hashing rig (having a separate machine with gpus, then connecting to it from my laptop) to hash a wpa file or whatever I need) I might not be on the right track. You can do this right?? I can't find anything about it.

submitted by /u/nsfw164
[link] [comments]

🎭🧑🏻‍💻@hacking_Attack🧑🏻‍💻🎭