hacking: security in practice
How powerful is the skill of knowing how to search for stuff?

I know and heard of a lot of pentesters who search for a ton of stuff most of the time and have a pretty low skill in hacking.
Of course, you need some basic skills, the classic linux, networking, active directory, some coding etc and you will learn how things work as you gain experience.

But a lot of hackers simply learn some basic skills and then google for exploits, vulns, tools, and other stuff that others made.
To be honest it is pretty simple to hack stuff when you have so much information available.
Of course, I don't want to be a simple script kiddie, but as a beginner myself I was wondering if I should focus my efforts on searching for stuff with google dorks and other osint stuff like that at this level.

I am going to be a web app pentester in a few months and this is my first real-life experience with hacking and my superior colleagues who both have OSCP said that they mostly google stuff.

What do you think ?

submitted by /u/Agent_B99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Vulnhub — The Planets: Earth

https://cdn-images-1.medium.com/max/1366/1*_5i2tRjbQm1D7SnlCKIQkw.png
Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My First Bounty Story

Hello Everyone,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Androids from scratch. (Understanding Metasploit)

https://cdn-images-1.medium.com/max/1062/1*xvlLJNnblGZ83FNgpNXgTQ.png
Hacking phones is one of the most famous topics on the internet, so it is only obvious that I should write an article about it.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
A crypto implosion, Twitter shakeups and Patch Tuesday takeaways

https://cdn-images-1.medium.com/max/1600/1*qxayO9p4_kfdQpufReuqKg.png
Welcome to Changelog for 11/13/22, published by Synack!

Continue reading on README_ »

___________________________
@hacking_Attack
@Hacking_Video

My First Bounty Story

Hello Everyone,Continue reading on Medium »
Read more...

How to get in Bug Bounty?

Hello Everyone,Continue reading on Medium »
Read more...

My First Bounty Story
https://medium.com/@arpitkarnbestbro/my-first-bounty-story-fc59b68023d7?source=rss------bug_bounty-5

Hello Everyone,Continue reading on Medium » (https://medium.com/@arpitkarnbestbro/my-first-bounty-story-fc59b68023d7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How to get in Bug Bounty?
https://medium.com/@arpitkarnbestbro/how-to-get-in-bug-bounty-5763298befad?source=rss------bug_bounty-5

Hello Everyone,Continue reading on Medium » (https://medium.com/@arpitkarnbestbro/how-to-get-in-bug-bounty-5763298befad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Bypassing root certificates? (iOS)

Greetings,

I was wondering whether there was a way to bypass a root certificate installed on an iOS device. 3rd party apps/the app store was blocked from our devices and some co workers would be interested in installing "new" apps. Could anyone point me to any resources?

submitted by /u/Oxidized-Nickel
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Stealing from scammers using SQL Injection | Ethical Hacking Payback — Part 1

Have you ever heard about these loot box gambling sites where you can bet the items you won playing games (like CS:GO), and get better…Continue reading on Medium »
Read more...

Hacking on Medium
EC-Council CEH Practical 心得

https://cdn-images-1.medium.com/max/600/1*L52XFvGsWAmB2U7vXpXx5w.png
Certified Ethical Hacker (Practical)

Continue reading on 璿的筆記 »

___________________________
@hacking_Attack
@Hacking_Video

ASU has a CTF practice site that is open to the public -- pwn.college
https://www.reddit.com/r/redteamsec/comments/yuka9b/asu_has_a_ctf_practice_site_that_is_open_to_the/

submitted by /u/verfahrensweise (https://www.reddit.com/user/verfahrensweise)
[link] (https://pwn.college/) [comments] (https://www.reddit.com/r/redteamsec/comments/yuka9b/asu_has_a_ctf_practice_site_that_is_open_to_the/)

___________________________
@hacking_Attack
@Hacking_Video

Stealing from scammers using SQL Injection | Ethical Hacking Payback — Part 1
https://0x4kd.medium.com/stealing-from-scammers-using-sql-injection-ethical-hacking-payback-part-1-572cc7f6a12a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Have you ever heard about these loot box gambling sites where you can bet the items you won playing games (like CS:GO), and get better…Continue reading on Medium » (https://0x4kd.medium.com/stealing-from-scammers-using-sql-injection-ethical-hacking-payback-part-1-572cc7f6a12a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Failed to invalidate session after password change -[Insufficient session Expiration].
https://medium.com/@geethugiri1998/failed-to-invalidate-session-after-password-change-insufficient-session-expiration-a75a12373d33?source=rss------bug_bounty-5

Hello everyone,Continue reading on Medium » (https://medium.com/@geethugiri1998/failed-to-invalidate-session-after-password-change-insufficient-session-expiration-a75a12373d33?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video