Token handles abuse: One shell to HANDLE them all
https://www.reddit.com/r/redteamsec/comments/yet5t5/token_handles_abuse_one_shell_to_handle_them_all/

submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://www.tarlogic.com/blog/token-handles-abuse-one-shell-to-handle-them-all/) [comments] (https://www.reddit.com/r/redteamsec/comments/yet5t5/token_handles_abuse_one_shell_to_handle_them_all/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bagaimana Cara Mengamankan Kerentanan pada Website dengan Acunetix Vulnerability Scanner di Tahun…

https://cdn-images-1.medium.com/max/700/0*KZo-sPTSnXfJLgCN
Hai, kamu! Bagaimana nih kabarnya? Semoga baik dan sehat selalu ya! ^-^

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Best Vulnerability Disclosure Programs (Less Competitive Bounties)

https://cdn-images-1.medium.com/max/600/1*9i_SGvXd1ixCm1WHupJOSw.jpeg
TL;DR- There’s a ton of programs for bug bounties and vulnerability disclosure, but they’re usually filled with competition because…

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Loss $1.5 M! Technical Analysis for UvToken Attacked

https://cdn-images-1.medium.com/max/1146/1*SPMWXtn-cu53IQSk0pW5ew.png
On October 27th, Numen Cyber Labs discovered the UvToken project was attacked through on-chain data monitoring , and the hackers profited…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hardware Trojans Under a Microscope

https://cdn-images-1.medium.com/max/2502/1*EOIO7LXNVUpDQzPWE_7dmQ.png
Table of Contents

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack the boo || forensics Write-up

https://cdn-images-1.medium.com/max/1273/1*Ufazxx62WqLY-KpBS-nF7g.png
Wrong Spooky Season

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Security at BigBasket

https://cdn-images-1.medium.com/max/2600/1*eGHkpxzlnzwfR6yBG1JgWw.jpeg
Our Responsible Disclosure Policy

Continue reading on Bigbasket »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team: Initial Access — Weaponization | Try Hack Me

https://cdn-images-1.medium.com/max/1970/0*emVC8oy3B6UGwOWL.png
Hello world and welcome to HaXeZ, in this post I’m going to be going through the Weaponization room on TryHackMe. Until now, the rooms…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Red Team: Initial Access — Red Team Reconnaissance | Try Hack Me

https://cdn-images-1.medium.com/max/1970/0*uEB10Y7kXFlWHJ6H.png
Hello world and welcome to HaXeZ, in this post I’m going to be discussing the Red Team Reconnaissance room on TryHackMe. This room focuses…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Vagrant Synced Folder Vagrantfile Breakout

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
MHDDoS : DDoS Attack Script With 56 Methods

MHDDoS is a DDoS Attack Script With 56 Methods. But Don’t Attack websites without the owners consent.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDnpO33ZbIJMw3AKkUef0CBiDHKg7UYJFQVtNpStccAOfZzuTD_GyDm4x8ptRQOOarvoX7yXFCsC3Xqb5Jh7R4m0LGlEMq6xMgevmU11hVEl5QwyoZHE6_C_SYBdIchzk-_mgAZCvj3x7D9ZeG5vPOmf3c4IRjL5r6jxCThZjAv6-EOzEgI6nTxuII/s1280/MHDDoS1.png https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpDT9hoy0SFrVpo8jWKnDuBKXjdbCnFgWxpRBVHhW7CvMuyCXtAtBAdO2Drc0xZQXa3rAOnYHuBbG9dKLSRbdyJON7cQCOMHn7lVWi8QxBNsElprXdPqs1asKZ6JJ_KS6NRM_LKQyH6IpC33rmEy9odEL6_DW_ybTMMG_vuMINNT8KlF2MxC8t7DBz/s1301/MHDDoS2.png Features And Methods* https://s.w.org/images/core/emoji/14.0.0/72x72/1f4a3.png Layer7
* GET | GET Flood
* POST | POST Flood
* OVH | Bypass OVH
* RHEX | Random HEX
* STOMP | Bypass chk_captcha
* STRESS | Send HTTP Packet With High Byte
* DYN | A New Method With Random SubDomain
* DOWNLOADER | A New Method of Reading data slowly
* SLOW | Slowloris Old Method of DDoS
* HEAD | https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/HEAD
* NULL | Null UserAgent and …
* COOKIE | Random Cookie PHP ‘if (isset($_COOKIE))’
* PPS | Only ‘GET / HTTP/1.1\r\n\r\n’
* EVEN | GET Method with more header
* GSB | Google Project Shield Bypass
* DGB | DDoS Guard Bypass
* AVB | Arvan Cloud Bypass
* BOT | Like Google bot
* APACHE | Apache Expliot
* XMLRPC | WP XMLRPC expliot (add /xmlrpc.php)
* CFB | CloudFlare Bypass
* CFBUAM | CloudFlare Under Attack Mode Bypass
* BYPASS | Bypass Normal AntiDDoS
* BOMB | Bypass with codesenberg/bombardier
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f52a.png KILLER | run many threads to kill a target
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f9c5.png TOR | Bypass onion website

* https://s.w.org/images/core/emoji/14.0.0/72x72/1f9e8.png Layer4:
* TCP | TCP Flood Bypass
* UDP | UDP Flood Bypass
* SYN | SYN Flood
* CPS | Open and close connections with proxy
* ICMP | Icmp echo request flood (Layer3)
* CONNECTION | Open connection alive with proxy
* VSE | Send Valve Source Engine Protocol
* TS3 | Send Teamspeak 3 Status Ping Protocol
* FIVEM | Send Fivem Status Ping Protocol
* MEM | Memcached Amplification
* NTP | NTP Amplification
* MCBOT | Minecraft Bot Attack
* MINECRAFT | Minecraft Status Ping Protocol
* MCPE | Minecraft PE Status Ping Protocol
* DNS | DNS Amplification
* CHAR | Chargen Amplification
* CLDAP | Cldap Amplification
* ARD | Apple Remote Desktop Amplification
* RDP | Remote Desktop Protocol Amplification

* https://s.w.org/images/core/emoji/14.0.0/72x72/2699.png Tools – Run With python3 start.py tools* https://s.w.org/images/core/emoji/14.0.0/72x72/1f31f.png CFIP | Find Real IP Address Of Websites Powered By Cloudflare
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f52a.png DNS | Show DNS Records Of Sites
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f4cd.png TSSRV | TeamSpeak SRV Resolver
* https://s.w.org/images/core/emoji/14.0.0/72x72/26a0.png PING | PING Servers
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f4cc.png CHECK | Check If Websites Status
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f60e.png DSTAT | That Shows Bytes Received, bytes Sent and their amount

* https://s.w.org/images/core/emoji/14.0.0/72x72/1f3a9.png Other
* https://s.w.org/images/core/emoji/14.0.0/72x72/274c.png STOP | STOP All Attacks
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f320.png TOOLS | Console Tools
* https://s.w.org/images/core/emoji/14.0.0/72x72/1f451.png HELP | Show Usage Script Our social’s* Matrix Team Telegram group
* Matrix community Telegram channel
* GitHub : github DownloadsYou can download it from GitHub Releases Getting StartedRequirements* dnspython
* cfscrape
* impacket
* requests
* Python3
* PyRoxy
* icmplib
* certifi
* psutil
* yarl Videos* Apa[...]

___________________________
@hacking_Attack
@Hacking_Video

rat: https://www.aparat.com/v/bHcP9
* YouTube : Coming soon…

Tutorial

* Aprat : https://aparat.com/v/XPn5Z
* YouTube : Coming soon… DocumentationYou can read it from GitHub Wiki Clone and Install Scriptgit clone https://github.com/MatrixTM/MHDDoS.git
cd MHDDoS
pip install -r requirements.txt One-Line Installing on Fresh VPSapt -y update && apt -y install curl wget libcurl4 libssl-dev python3 python3-pip make cmake automake autoconf m4 build-essential ruby perl golang git && git clone https://github.com/MatrixTM/MHDDoS.git && cd MH* && pip3 install -r requirements.txt Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

My first ‘bug bounty’… Kind of.

Lets set the scene.Continue reading on Medium »
Read more...