Hacking on Medium
Zeno (thm) writeup

https://cdn-images-1.medium.com/max/600/1*Ugb60RZLH7UiB5ngpN0OPQ.png
Welcome back to another box, this time we’re doing Zeno from tryhackme. The initial nmap scan shows two open ports:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Try Hack Me — Corridor

This easy room on the TryHackMe website is a web capture-the-flag.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A-MAZE-X CTF Walkthrough | Part IV (last)

https://cdn-images-1.medium.com/max/1400/0*Q8VwcXgUV1JpZF_a.png
The last post to a series of articles dedicated to solving the DeFi challenges hosted by Secureum at Stanford University.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
PicoCTF — Vault Door 3

https://cdn-images-1.medium.com/max/681/1*A_Vm2xaBzBq1_SYKwvVwow.png
Platform: PicoCTF
Challenge: vault-door-3
Category: Reverse Engineering
Point Value: 200

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Malware, its Types, and how it hampers Business + How to prevent such a cyber threat?

https://cdn-images-1.medium.com/max/1684/1*e8BIGUWMJFBJHKzSnuodPA.jpeg
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Cybercriminals and Black-hat Hackers are using a new technique called the account “Pre-hijacking”

https://cdn-images-1.medium.com/max/900/1*xoZOv7SMPuBhOWbjVPyFWg.jpeg
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Programming Languages and Certifications
https://www.reddit.com/r/Pentesting/comments/xz2dzs/programming_languages_and_certifications/

Hello friends - I was wondering if I could a better consensus on which programming languages to learn/polish in order to become a PenTester (emphasis in healthcare) Also: Which certifications should I get and in which order would you suggest? I’ve been passing ever practice for CompTIA Security+ and plan to take it some time before the end of the year hopefully. Please help :) submitted by /u/Benedictsaidpengwing (https://www.reddit.com/user/Benedictsaidpengwing)
[link] (https://www.reddit.com/r/Pentesting/comments/xz2dzs/programming_languages_and_certifications/) [comments] (https://www.reddit.com/r/Pentesting/comments/xz2dzs/programming_languages_and_certifications/)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
BeEF alternatives for Windows?

Looking for an alternative to BeEF to mess with my family, not do anything excessively bad, let alone illegal. Anyway, I’m looking for a software where I can do the things BeEF can do by clicking on a generated link, except it can be downloaded on Windows. Thanks a bunch!

Edit: I should’ve probably clarified lmao 😂, it would be along the lines of me messing with my older brother by making random stuff happen, with like colors on the website change, text be weird, random images pop up, not anything to do with information or anything.

submitted by /u/420doodooman420
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
iOS iMessage payload

Back in 2016, 2022, etc there were specific messages or files you could send via iMessage that would crash iPhones. Curious as to how those are built or found out.

Anyone have any experience?

submitted by /u/jesews_133
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
tiny_hard pwnable.kr writeup

https://cdn-images-1.medium.com/max/600/1*m9Kq48XERZqj5TKhbTaBOQ.png
This solution also applies to the “tiny” challenge

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
I finally generated a keylogger link again.

Learning how to do this from the start when i was a noob has been so difficult for me because there was no one to guide me through since i had good interest in activities like that. since earlier last year till date have been on a aggressive researching regarding to the learning of doing this and it has been terrible learning this all by my self which have made lots of mistakes and loss of $ in other to achieve this goal of mine but thank Goodness i never gave up all this while due to mistakes and bad experiences i had learning it alone.now i finally arrived at the success of what i was working towards,all to say i am now good in setting up keylogger links to steal details on any computer that clicks on it and have done about 2 of it which was successful in stealing infos of the system it was sent to ,am happy for this couldn’t believe it’s now a success,i would advise any of you that’s learning any activity related to this to be patient and hardworking,stay safe you all …

submitted by /u/UnweanedHawkins
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bounties for unsecured pages?

I recently found an internal website for my school that was available from outside, and had details of all staff members (names, role, department, campus, personal phone numbers, photos, birth month)

I reported it to the IT management who thanked me and fixed the issue.

But I was thinking, how many other organisations would have similar issues - quite a few I would think. (A mere 3 weeks after this, the 2nd largest Telco in my country had an unsecured API endpoint scraped of all 9MILLION of their customers details)

My question: how much would/should/could an organisation pay for a similar website/database/API security issue? (for a 300 staff organisation)

The Telco had a ransom of $1M AUD, so is 10cents per person an accurate rule of thumb?

Was thinking about creating a bot to scrape the internet and use AI to find things that shouldn't be accessible, possibly making some side cash. Not sure if this is worth my time tho

Thanks in advance :)

submitted by /u/randomUser13241324
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to build a cybersecurity ecosystem

Building an ecosystem is hard in any area of IT, there are hundreds of tools, frameworks, service providers, etc. In cybersecurity we have…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
9 tips to avoid getting scammed with NFTs

https://cdn-images-1.medium.com/max/698/1*tpfmSeUnbuWgAaJhsz3xgg.png
Cryptocurrency and NFT scams over the past year have cost over $1B to their victims. Just today, @lazslo_btc lost 7 Apes worth over $1M on…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video