hacking: security in practice
Jquery intrinsic vulnerability?

Good morning hackers, i really need to understand a “vulnerability” i found in a portswigger DOM based XSS which i’m finding hard to understand. I got to the basics with a bit of debugging and found that calling with jquery: $(“x ”) Will execute the alert so i thought..mmh maybe the jquery selector somehow “renders” the html. I tryed with a lot of other tag: svg,script ecc. and even other tag that don’t require to close (since jquery selector seems to slice it) like with: $(“”) But nothing works… it only works with images. Any idea why?

submitted by /u/Bongioo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Password-protect your files on PC

https://cdn-images-1.medium.com/max/1165/1*pe56cuW825JxfeF5nP6Gtg.jpeg
For most people, adding a password to their files offers sufficient protection.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Some resources for women breaking into cybersecurity

https://cdn-images-1.medium.com/max/669/1*mflSA9phHv_OeoE6_BUOBA.jpeg
Here are some resources for women breaking into cybersecurity.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Budworm Hackers Resurface with New Espionage Attacks Aimed at?!?

https://cdn-images-1.medium.com/max/728/0*VpiQsm_hpew-F4gV.jpg
An advanced persistent threat (APT) actor known as Budworm targeted a U.S.-based entity for the first time in more than six years…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
BLUE PRINT -TryHackMe

https://cdn-images-1.medium.com/max/800/1*eKxDaTGXdElKiVBuhIvC_A.jpeg
Hack into this Windows machine and escalate your privileges to Administrator.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CHSF Hospital Hack: What Happened, Our Analysis and Thoughts

https://cdn-images-1.medium.com/max/1400/1*Av1Ma-KQ0sOxksrYHGXiDg.jpeg
Intro

Continue reading on CloudMosa »

___________________________
@hacking_Attack
@Hacking_Video

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under?
https://medium.com/@ronnie.rodrigues/poc-exploit-released-for-critical-fortinet-auth-bypass-bug-under-dff893bb3025?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

A proof-of-concept (PoC) exploit code has been made available for the recently disclosed critical security flaw affecting Fortinet FortiOS…Continue reading on Medium » (https://medium.com/@ronnie.rodrigues/poc-exploit-released-for-critical-fortinet-auth-bypass-bug-under-dff893bb3025?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Learning Methodology for Web Security
https://medium.com/@cowdex/my-learning-methodology-for-web-security-ffd318f5d935?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, to give something back to the infosec community I decided to start a new series on web application pen-testing. And this would be…Continue reading on Medium » (https://medium.com/@cowdex/my-learning-methodology-for-web-security-ffd318f5d935?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Learning Methodology for Web Security

Hello, to give something back to the infosec community I decided to start a new series on web application pen-testing. And this would be…Continue reading on Medium »
Read more...

Matano - The Open-Source Security Lake Platform For AWS
http://www.kitploit.com/2022/10/matano-open-source-security-lake.html

___________________________
@hacking_Attack
@Hacking_Video

Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache (https://www.kitploit.com/search/label/Apache) Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.

___________________________
@hacking_Attack
@Hacking_Video