Hacking on Medium
Hacking

https://cdn-images-1.medium.com/max/2440/1*3h5siK9N1wA6lhsd-39yjw.jpeg
“Hacking” has become something of an overloaded term in the last few years — most people who hear it think about cybersecurity, some…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SICKOS: 1.2 Walkthrough

https://cdn-images-1.medium.com/max/912/1*Sv97Sfhkeme4-Q8Ke_nNIQ.png
Description :This is second in following series from SickOs and is independent of the prior releases, scope of challenge is to gain highest

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Am I right?

https://cdn-images-1.medium.com/max/720/1*eG-1fgWTRpqMefRu-_w_3Q.jpeg
3 Steps You Should Do Before Ethical Hacking:-

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Facebook Group members can become Expert Groups without Admin approval (Privilege Escalation)

Description / ImpactContinue reading on Medium »
Read more...

Hacking on Medium
Cyber Security And Finance

The relationship between cyber security and the economy has only been growing stronger, with cyber attacks on the rise. Cyber attacks have…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Security in CSP: Learning note

This is another study notes or learning notes of the security headers after the first one “The study of the security headers — Learning…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Found Sql Injection on intensedebate.com (h1) in 5 minute $350

https://cdn-images-1.medium.com/max/1351/1*YHG6_rDphs422Q3rP_VJKg.png
I’m here to tell you how I found SQL injection on this website at HackerOne just in 5 minutes and I got 350$ without any tools to recon

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I Hacked into a College website Database?

https://cdn-images-1.medium.com/max/2600/1*n8rFs-WpFEfxhDzoEQGU9A.jpeg
Hi ! I'm Suraj Sawant and as the title suggests, this blog is about “HOW I HACKED INTO A COLLEGE WEBSITE DATABASE?”

Continue reading on Medium »

How I Found Sql Injection on intensedebate.com (h1) in 5 minute $350

I’m here to tell you how I found SQL injection on this website at HackerOne just in 5 minutes and I got 350$ without any tools to reconContinue reading on Medium »
Read more...

LibAFL - Advanced Fuzzing Library - Slot Your Fuzzer Together In Rust! Scales Across Cores And Machines. For Windows, Android, MacOS, Linux, No\_Std, ...

Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is written and maintained by Andrea Fioraldi andreafioraldi@gmail.com and Dominik Maier mail@dmnk.co. Why LibAFL? LibAFL gives you many of the benefits of an off-the-shelf fuzzer, while being completely customizable. Some highlight features currently include: fast: We do everything we can at compile time, keeping runtime overhead minimal. Users reach 120k execs/sec in frida-mode on a phone (using all cores). scalable: Low Level Message Passing, LLMP for short, allows LibAFL to scale almost linearly over cores, and via TCP to multiple machines soon! adaptable: You can replace each part of LibAFL. For example, BytesInput is just one potential form input: feel free to add an AST-based input for structured fuzzing, and more. multi platform: LibAFL was confirmed to work on Windows, MacOS, Linux, and Android on x86_64 and aarch64. LibAFL can be built in no_std mode to inject LibAFL into obscure targets like embedded devices and hypervisors. bring your own target: We support binary-only modes, like Frida-Mode, as well as multiple compilation passes for sourced-based instrumentation. Of course it's easy to add custom instrumentation backends.Overview LibAFL is a collection of reusable pieces of fuzzers, written in Rust. It is fast, multi-platform, no_std compatible, and scales over cores and machines. It offers a main crate that provide building blocks for custom fuzzers, libafl, a library containing common code that can be used for targets instrumentation, libafl_targets, and a library providing facilities to wrap compilers, libafl_cc. LibAFL offers integrations with popular instrumentation frameworks. At the moment, the supported backends are: SanitizerCoverage, in libafl_targets Frida, in libafl_frida, by s1341 github@shmarya.net (Windows support is broken atm, it relies on this upstream issue to be fixed.) More to come (QEMU-mode, ...) Getting started Install the Rust development language. We highly recommend not to use e.g. your Linux distribution package as this is likely outdated. So rather install Rust directly, instructions can be found here. Clone the LibAFL repository with git clone https://github.com/AFLplusplus/LibAFL If you want to get the latest and greatest features, git checkout dev Build the library using cargo build --release Build the API documentation with cargo doc Browse the LibAFL book (WIP!) with (requires mdbook) cd docs && mdbook serve We collect all example fuzzers in ./fuzzers. Be sure to read their documentation (and source), this is the natural way to get started! The best-tested fuzzer is ./fuzzers/libfuzzer_libpng, a multicore libfuzzer-like fuzzer using LibAFL for a libpng harness. Resources Installation guide Our RC3 talk explaining the core concepts Online API documentation The LibAFL book (very WIP) online or in the repo Contributing Check the TODO.md file for features that we plan to support. For bugs, feel free to open issues or contact us directly. Thank you for your support. <3 Download LibAFL
Read more...

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Filtered port

[removed]

submitted by /u/testing35
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
sos colombia

if you visit /r/colombia you'll notice there's currently protests going on because of a tax increase on the poor and the police are killing innocent civilians, we're looking for ways to protest that don't require going outside to face the police, thought i might pop in here and ask for ideas..

i realize some of this falls under the grey area of info sec and many won't be willing to publicly help or report the post, dms are welcome.

i was honestly just wondering if anyone knows of a ddos tool we can share for windows/android so we target specific websites at crucial moments or maybe if i could get pointed into the direction of good osint tools and practices.

honestly any input is appreciated.

submitted by /u/RipperJoe
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
IPCDump : Tool For Tracing Interprocess Communication (IPC) On Linux

IPCDump is a tool for tracing inter-process communication (IPC) on Linux. It covers most of the common IPC mechanisms — pipes, fifos, signals, UNIX sockets, loop-back-based networking, and pseudo-terminals. It’s a useful tool for debugging multi-process applications, and it’s also a simple way to understand how the different moving parts in your system communicate with […]

The post IPCDump : Tool For Tracing Interprocess Communication (IPC) On Linux appeared first on Kali Linux Tutorials.