Wanna Bet That CSRF Is Not As Hard as you think?

An introduction of CSRF attack and with an example on how an hacker can take advantage of sessions to prepare some dangerous attacks.Continue reading on InfoSec Write-ups »
Read more...

Wanna Bet That CSRF Is Not As Hard as you think?
https://infosecwriteups.com/wanna-bet-that-csrf-is-not-as-hard-as-you-think-905ec7e03609?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

An introduction of CSRF attack and with an example on how an hacker can take advantage of sessions to prepare some dangerous attacks.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/wanna-bet-that-csrf-is-not-as-hard-as-you-think-905ec7e03609?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How Travis Scott “Hacked” Streams To Fool Record Labels

https://external-preview.redd.it/LLDW0acX3iFHdbQ98sV_Y_sb3S3iBsJle6cWEhR1Z_8.jpg?width=640&crop=smart&auto=webp&s=17e9615821555a09476be4530ecf19945d85eabe submitted by /u/TesMirddin
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Old timers

I remember back in the day. direct tv machine hex. Card programmers, jtagging dish receivers. Blue boxes, 2600hz, radiator hose to connect handsets. BBS, Who’s with me ??

submitted by /u/emdee4444
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
VPNs and hacking

If hackers hack something they use Tor or any VPN (mostly, I know also that they use VPSes) - do you know anyone that has been held accountable for hacking because he was found via VPN?

Are VPNs totally anonymous or not? They gather logs and/or cooperate with police?

Edit: I am not asking for theory. I am asking about known examples of prosecution.

submitted by /u/discl0se
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to email spoof

yo everyone, im just wondering how to email spoof? not for anything malicious, i just want a cool email. and i would only do it on unregistered domains, like https://malware.email/, just stuff like that.

submitted by /u/Visible_REM
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Have any hackers actually been kidnapped by shady government organizations and forced to work for them?

My friends keep telling me this is gonna happen to me and it's making me wanna stop learning

submitted by /u/9x19mm_parabellvm
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
If VPNs don’t keep you private how do hackers get away with stuff?

Self explanatory title, I recently learned that most VPN services keep logs of whatever the hell you’ve been doing while under their product, so how do people stay undetected? Or as undetected as you can really get on the internet. I’m assuming they make their own VPN’s?

submitted by /u/wildinuser
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

No names were dicovered when using amass any one knows a solution
https://www.reddit.com/r/Pentesting/comments/yvncxa/no_names_were_dicovered_when_using_amass_any_one/

Hello every one I have a question and I don't know where I should ask it so I'm sorry if it's the wrong r/ so I've just install Amass v3.20.0 and I start trying the tool amass enum -d "on different targets" the only result that I got is : No names were discovered I've tried to use the big names microsoft.com (https://microsoft.com/) also I've tried crapi.apisec.ai (https://crapi.apisec.ai/) but the same result even by adding -active nothing happen is it a tool's problem ? do I need to use some api keys ?does the websites block amass ? thanks for the help submitted by /u/firend_of_laki (https://www.reddit.com/user/firend_of_laki)
[link] (https://www.reddit.com/r/Pentesting/comments/yvncxa/no_names_were_dicovered_when_using_amass_any_one/) [comments] (https://www.reddit.com/r/Pentesting/comments/yvncxa/no_names_were_dicovered_when_using_amass_any_one/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
List of CVEs For OSCP Preparation

https://cdn-images-1.medium.com/max/600/1*NCANSn3hNll1pT0XuKTrEg.png
If you planing to take your OSCP exam, this is a list of CVEs you want to be familiar with. Each one is tailored for a specific scenario…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video