Hacking on Medium
Nüfuzetmə testlərində fayl transfer metodları

https://cdn-images-1.medium.com/max/626/0*WmkfnKhcC8iRWDoN.png
Nüfuzetmə testləri, CTF-lər və ya sertifikasiya imtahanları zamanı uzaqdan kod icrası(rce) əldə etdikdən sonra imtiyazların artırılması…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Local Hacks : 2013 Singapore Cyberattacks

https://cdn-images-1.medium.com/max/2000/1*fj2079WPXKKyrpcxTL2N_A.png
Cyber Threat Intelligence (CTI) involves gathering as much data on potential threat actors. The data is then processed, structured, and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A Hot Take on the Halting of Binance Smart Chain

https://cdn-images-1.medium.com/max/2600/0*xVgFTbaJXHJnpg89
An attack to a core bridge resulted in the entire system being paused for hours.

Continue reading on The B.C.U. Times »

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Erlik 2 : Vulnerable Flask App

Erlik 2 is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing.

Features

It contains the following vulnerabilities.

-HTML Injection
-XSS
-SSTI
-SQL Injection
-Information Disclosure
-Command Injection
-Brute Force
-Deserialization
-Broken Authentication
-DOS
-File Upload

Installation

git clone https://github.com/anil-yelken/Vulnerable-Flask-App
cd Vulnerable-Flask-App
sudo pip3 install -r requirements.txt

Usage

python3 vulnerable-flask-app.py
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5kWypIZBXQFVBi9E8_tgMx2WsQXP0TTXtkOAwamMPJGFUweuSwBMfdubfUdTMI9PbuVENP6-ZJAkGwX1lfHBEaJY1SC5VFGMOdekbzXlrGNxbPfWUWIZN1ry8T1P_-HAAuwA0KSCQ9yx2RUUxzgH8IUDvEYbGyb2bXQceMx8wo5aJLaiDzjByX5hE/s728/Erlik%202.png

Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Addresses Zero-Days, but Exchange Server Exploit Chain Remains Unpatched

The computing giant didn't fix ProxyNotLogon in October's Patch Tuesday, but it disclosed a rare 10-out-of-10 bug and patched two other zero-days, including one being exploited.

Dark Reading: Attacks/Breaches
Critical Open Source vm2 Sandbox Escape Bug Affects Millions

Attackers could exploit the "Sandbreak" security bug, which has earned a 10 out of 10 on the CVSS scale, to execute a sandbox escape, achieve RCE, and run shell commands on a hosting machine.

Dark Reading: Attacks/Breaches
OT Cybersecurity Leader Paul Brager Passes Away

The IT security executive led ICS/OT, IT/OT integration, and other security programs, as well as diversity and inclusion efforts in the industry.

Dark Reading: Attacks/Breaches
Intel Processor UEFI Source Code Leaked

Exposed code included private key for Intel Boot Guard, meaning it can no longer be trusted, according to a researcher.

hacking: security in practice
Is ethical hacking jobs already saturated?

If not how soon will it be? And if that happens would only the most talented get hired? I feel like in this type of career you really have to be talented for longevity?

submitted by /u/Peasant_hacking
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Share A Connected Wifi To Another Device (Without Password)

HomeWifi Tethering How To Share A Connected Wifi To Another Device (Without Password)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
İnsan Vücudu Hacklenebilir Mi?

https://cdn-images-1.medium.com/max/600/0*HMUx_oaSVCI-YPDi.jpg
Hacklenme veya hackleme kelimelerinin bize sanal makineler ile ilgili kavramlar çağrıştırdığı hepimizin malumu. Çünkü hacklenebilen şeyler…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Esconden una backdoor en el logo de Windows

https://cdn-images-1.medium.com/max/1021/0*ECQ0X0QS876vdT9W
Se cree que Witchetty es cercano al grupo de atacantes apoyado por China llamado APT10 (conocido como ‘Cicada’). También se considera que…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
||How not to write code||

https://cdn-images-1.medium.com/max/2600/0*-6l1NgR-DpBngS9V
When I do write some piece of code for a script,a program,any app;there are things that I can decide how to do it,there is multiple way…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
It's Time to Make Security an Innovation Enabler

How data-driven security can best safeguard your unique cloud operations.

Dark Reading: Attacks/Breaches
Dependency Management Aims to Make Security Easier

Existing software security firms and new startups tackle the tasks of exposing dependencies and helping developers manage their use of open-source components.

hacking: security in practice
Best login page or example for kids to hack away on and be able to "guess" the login

I have an rPi 3 model B that I would like to setup for kids to bash away on in attempts to log into it and "guess" the password.

I'm going to make the password literally just password or 123456. This is going to be for kids 5 to 15 years old at a local Maker Faire event and just something to entertain them for a few minutes or seconds and to show IRL how guessing passwords can work.

What would be the best solution for this?

* Install Raspberry Pi OS on it and make this the login
* Install a local mock login page and just do it all locally in the browser
* ???? a script that maybe already exists for this

Probably going to do the second option but just wondering if anyone had any better ideas or suggestions.

Thanks!

submitted by /u/DrinkMoreCodeMore
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video