hacking: security in practice
Has anyone noticed Chrome and Safari browsers being able to detect phishing pages with considerable more accuracy over the last 6-months?

Unfortunately, SET, Nextphisher, Socialphish, etc. are now all detected by webbrowsers. Has anyone had any luck getting around this?

submitted by /u/Key_Abbreviations971
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
GOT HACKINGGGGGGGG in this work

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Do You Really Need $1,000+ In Hacking Hardware?

https://cdn-images-1.medium.com/max/997/1*zcWbvZI2HEh2bdTnZwz1Ew.jpeg
TL;DR-Are all of those crazy hacking tools advertised as ‘simple all-in-ones’ actually worth buying?

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Solidity Hackleme: Tamsayı Taşması ve Azalması

https://cdn-images-1.medium.com/max/600/0*XnRgAqSMwav8_419
Background

Continue reading on Sedesca Labs »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Executing Random Executables Can Get You In Trouble

https://cdn-images-1.medium.com/max/1440/1*LExXndJMFfPUePYI7sAU-w.png
What will happen to your OS when you execute random executables files?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
CVE-2022–42889: Text4Shell, Vulnerabilidad critica en Apache Commons Text

https://cdn-images-1.medium.com/max/1629/0*RCY2TtAixCwkATpV
Al igual que ocurrió en diciembre del año pasado con Log4Shell, aquella vulnerabilidad que afectaba a multitud de productos Java que…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Expertos advierten sobre una puerta trasera sigilosa de PowerShell disfrazada de actualización de…

https://cdn-images-1.medium.com/max/1698/0*k0kvDDiBcgkKtA9n
Han surgido detalles sobre una puerta trasera de PowerShell previamente no documentada y totalmente indetectable (FUD) que gana su sigilo…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite
https://medium.com/@h4x0r_dz/23000-for-authentication-bypass-file-upload-arbitrary-file-overwrite-2578b730a5f8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How I found Authentication Bypass >> File upload vulnerability >> Arbitrary File Overwrite and how I managed I found the path of the file…Continue reading on Medium » (https://medium.com/@h4x0r_dz/23000-for-authentication-bypass-file-upload-arbitrary-file-overwrite-2578b730a5f8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What is 8680439..toString(30)?
https://www.reddit.com/r/Pentesting/comments/y896d3/what_is_8680439tostring30/

I am an experienced JS developer now learning web app pen testing and I have never seen this piece of code.
Every google search I make is a list of XSS cheat sheets. I can't find any website that explains what "8680439" is. Or why the double dots? I know "toString(30)" takes in a radix number. submitted by /u/green_anthem (https://www.reddit.com/user/green_anthem)
[link] (https://www.reddit.com/r/Pentesting/comments/y896d3/what_is_8680439tostring30/) [comments] (https://www.reddit.com/r/Pentesting/comments/y896d3/what_is_8680439tostring30/)

___________________________
@hacking_Attack
@Hacking_Video

Live subdomain enumeration using censys
https://medium.com/@kandar.souvik6/live-subdomain-enumeration-using-censys-43a8b6e9e775?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

I have found a way to find live subdomains(it is not guaranteed to work on all the websites) using simple keywords in censys.Continue reading on Medium » (https://medium.com/@kandar.souvik6/live-subdomain-enumeration-using-censys-43a8b6e9e775?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Live subdomain enumeration using censys

I have found a way to find live subdomains(it is not guaranteed to work on all the websites) using simple keywords in censys.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Security Awareness Urged to Grow Beyond Compliance

Increasingly vendors are looking for ways to take security awareness beyond checkbox compliance courses to more context-dependent interactions — a "shift left" to the average worker.