“Neighbour” CTF Walkthrough from TryHackMe
https://medium.com/@rdillon73/neighbour-ctf-walkthrough-from-tryhackme-79245614bdd3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello!Continue reading on Medium » (https://medium.com/@rdillon73/neighbour-ctf-walkthrough-from-tryhackme-79245614bdd3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

“Neighbour” CTF Walkthrough from TryHackMe

Hello!Continue reading on Medium »
Read more...

Kali Linux Tutorials
Jscythe : Force Any Node.Js/Electron/V8 Based Process To Execute Arbitrary Javascript Code

Jscythe abuses the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code, even if their debugging capabilities are disabled.

Tested and working against Visual Studio Code, Discord, any Node.js application and more!

How?

1. Locate the target process.
2. Send SIGUSR1signal to the process, this will enable the debugger on a port (depending on the software, sometimes it’s random, sometimes it’s not).
3. Determine debugging port by diffing open ports before and after sending SIGUSR1.
4. Get the websocket debugging URL and session id from http://localhost:.
5. Send a Runtime.evaluaterequest with the provided code.
6. Profit.

Building
cargo build --release
Running

Target a specific process and execute a basic expression:
./target/debug/jscythe --pid 666 --code "5 - 3 + 2"
Execute code from a file:
./target/debug/jscythe --pid 666 --script example_script.js
The example_script.jscan require any node module and execute any code, like:
require('child_process').spawnSync('/System/Applications/Calculator.app/Contents/MacOS/Calculator', { encoding : 'utf8' }).stdout
Search process by expression:
./target/debug/jscythe --search extensionHost --script example_script.js
Other Options

Run jscythe --helpfor the complete list of options.
Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Roblox Hacks — Arsenal and Tycoon

Roblox is one of the most popular online multiplayer gaming platforms today. I’ve been playing it quite a bit lately, and have been…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network

https://cdn-images-1.medium.com/max/602/0*Z8cZpm6smpt8GSU7.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How i get $100 in just 10 minutes !

Hello everyone ! this is my first medium write up, im very sorry if i have a bad grammar, because english is not my mother tongue. So a…Continue reading on Medium »
Read more...

How i get $100 in just 10 minutes !
https://medium.com/@jodyritonga/how-i-get-100-in-just-10-minutes-b018b28645ce?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello everyone ! this is my first medium write up, im very sorry if i have a bad grammar, because english is not my mother tongue. So a…Continue reading on Medium » (https://medium.com/@jodyritonga/how-i-get-100-in-just-10-minutes-b018b28645ce?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Are there wizards out there that can actually read a machine language (in hex)?

Just wondering if anyone can do it.

submitted by /u/Disastrous_Goat_8979
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Accessing Older BugCrowd Reports

Has anyone been able to scrape more than the most recent 7 days from BugCrowd's crowdstream of disclosed reports? If so, please share some insight or an open source tool used. Trying to do this legally because it's for soon-to-be published research.

HackerOne was easy and I have mountains of reports from them, but I need to have diversity in my research.

Google search and GitHub searches have not been useful so far. Thanks in advance.

Edit: My first post with the same content was auto deleted for including "How" or something in the title.

submitted by /u/honcohi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Basics Will Block Most Ransomware Hits, Says UK Cyber Chief

https://cdn-images-1.medium.com/max/602/0*fvXVN4Cp1jzZ6Ek4.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Razor Black Active Directory Writeup

https://cdn-images-1.medium.com/max/1920/1*gb0lOeaxAujKFNf4NX_OuA.png
These guys call themselves hackers. Can you show them who’s the boss ??

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe | 0Day | Write-Up

https://cdn-images-1.medium.com/max/786/1*khznbmsZUUyR1QsVbpcNpA.png
Hey Folks,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

SCMKit - Source Code Management Attack Toolkit
http://www.kitploit.com/2022/11/scmkit-source-code-management-attack.html

___________________________
@hacking_Attack
@Hacking_Video