Hacking Articles Tips Tricks Videos Tutorials
471 subscribers
65.9K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
Erlik 2 : Vulnerable Flask App

Erlik 2 is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing.

Features

It contains the following vulnerabilities.

-HTML Injection
-XSS
-SSTI
-SQL Injection
-Information Disclosure
-Command Injection
-Brute Force
-Deserialization
-Broken Authentication
-DOS
-File Upload

Installation

git clone https://github.com/anil-yelken/Vulnerable-Flask-App
cd Vulnerable-Flask-App
sudo pip3 install -r requirements.txt

Usage

python3 vulnerable-flask-app.py
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5kWypIZBXQFVBi9E8_tgMx2WsQXP0TTXtkOAwamMPJGFUweuSwBMfdubfUdTMI9PbuVENP6-ZJAkGwX1lfHBEaJY1SC5VFGMOdekbzXlrGNxbPfWUWIZN1ry8T1P_-HAAuwA0KSCQ9yx2RUUxzgH8IUDvEYbGyb2bXQceMx8wo5aJLaiDzjByX5hE/s728/Erlik%202.png

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Microsoft Addresses Zero-Days, but Exchange Server Exploit Chain Remains Unpatched

The computing giant didn't fix ProxyNotLogon in October's Patch Tuesday, but it disclosed a rare 10-out-of-10 bug and patched two other zero-days, including one being exploited.
Dark Reading: Attacks/Breaches
Critical Open Source vm2 Sandbox Escape Bug Affects Millions

Attackers could exploit the "Sandbreak" security bug, which has earned a 10 out of 10 on the CVSS scale, to execute a sandbox escape, achieve RCE, and run shell commands on a hosting machine.
Dark Reading: Attacks/Breaches
OT Cybersecurity Leader Paul Brager Passes Away

The IT security executive led ICS/OT, IT/OT integration, and other security programs, as well as diversity and inclusion efforts in the industry.
Dark Reading: Attacks/Breaches
Intel Processor UEFI Source Code Leaked

Exposed code included private key for Intel Boot Guard, meaning it can no longer be trusted, according to a researcher.
hacking: security in practice
Is ethical hacking jobs already saturated?

If not how soon will it be? And if that happens would only the most talented get hired? I feel like in this type of career you really have to be talented for longevity?

submitted by /u/Peasant_hacking
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video