Remediation Archeology — Finding and Decoding an Ancient XSS

One of my favorite pastimes in Bug Bounty is reviewing my ancient (read: 2 or 3 years old) vulnerability reports. I feel like I’ve come a…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
DEV-0569 Ransomware Group Remarkably Innovative, Microsoft Cautions

Although the group relies on good old phishing to deliver Royal ransomware, researchers say DEV-0569 regularly uses new and creative discovery techniques to lure victims.

Dark Reading: Attacks/Breaches
Australia's Hack-Back Plan Against Cyberattackers Raises Familiar Concerns

How far can its government — or any government or private company — go to proactively disrupt cyber threats without causing collateral damage?

Dark Reading: Attacks/Breaches
Amid Legal Fallout, Cyber Insurers Redefine State-Sponsored Attacks as Act of War

As carriers rewrite their act-of-war exclusions following the NotPetya settlement between Mondelez and Zurich, organizations should read their cyber insurance policies carefully to see what is still covered.

Dark Reading: Attacks/Breaches
County of Tehama, Calif., Identifies and Addresses Data Security Incident

The county reports unauthorized access to files in its Department of Social Services' systems between Nov. 18, 2021, and April 9. It has added enhanced alert and monitoring software and is offering complimentary credit monitoring and identity theft protection services to those whose personal information may have been compromised in the breach.

___________________________
@hacking_Attack
@Hacking_Video

Remediation Archeology — Finding and Decoding an Ancient XSS
https://bendtheory.medium.com/remediation-archeology-finding-and-decoding-an-ancient-xss-ea541c1106d1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

One of my favorite pastimes in Bug Bounty is reviewing my ancient (read: 2 or 3 years old) vulnerability reports. I feel like I’ve come a…Continue reading on Medium » (https://bendtheory.medium.com/remediation-archeology-finding-and-decoding-an-ancient-xss-ea541c1106d1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My bug bounty journey
https://medium.com/@tarunmgeetha/my-bug-bounty-journey-2ec60eb91b4f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi readers, my name is Tarun. This is actually my first write up, the reason behind this write up is that, I always wanted to pursue a…Continue reading on Medium » (https://medium.com/@tarunmgeetha/my-bug-bounty-journey-2ec60eb91b4f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
So I bend Rebar... this stupid machine runs windows XP and routinely tries to take my fingers off by just doing what it wants... (shut off turn back on all good right?)

So this happens and it sucks because you don't know when this stupid thing wants to do whatever when your hands are in a shitty spot... So I have a post it with a number for "tech" guy Tim... I call tim and say hey man this thing takes off at weird times and I need to get this fixed... I hear this dude say fuck... Then pages turning... All of a sudden the cursor shirts moving doing the same s*** I was trying to do so we had remote connection... But he couldn't fix this... Once we hung up I got it working again... Ok..... So their some things in this program that could be way easier but no update available according to "Tim"... So my question is what does Tim do that I can't on site...and also... Is there a Linux based program equivalent that can run these simple bar bending machines that I could run and cut useless timm out... And using that leverage... I should say I have been dual booting Linux (Mint is what I like for now and I mostly boot I to that so I am familiar but use xda A LOT to get shit done lol. Oh and I bend Rebar and listen to darknet stories so I guess im being inspired... (I had a commodore 64 that my uncle was throwing out and all I did with it was play the games he had on disc I had no clue damn it)... 😂

submitted by /u/always_deaming22
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Brute force password with 11 letters all lowercase

I know that the ios app in question generates a password for the users, and it is always 11 letters all lowercase. I have two accounts on the app, so I already know two passwords: anlegginger and bestinkling. Unfortunately I am still just learning about this so I have been watching youtube videos to understand but this is too specific so I can’t find an answer without asking. I am struggling to understand how to find a wordlist that is specific to my needs, so that it will only try passwords with 11 letters and lowercase. Is anyone willing to help me with this?

submitted by /u/throwawayannoyying
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

My Top 7 Favorite Websites to (Legally) Improve My Web-Hacking Skills
https://medium.com/the-gray-area/my-top-7-favorite-websites-to-legally-improve-my-web-hacking-skills-ef862c3dc08a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- The best places to improve your bug-hunting skills without getting your door kicked down by the cops.Continue reading on The Gray Area » (https://medium.com/the-gray-area/my-top-7-favorite-websites-to-legally-improve-my-web-hacking-skills-ef862c3dc08a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

My Top 7 Favorite Websites to (Legally) Improve My Web-Hacking Skills

TL;DR- The best places to improve your bug-hunting skills without getting your door kicked down by the cops.Continue reading on The Gray Area »
Read more...

hacking: security in practice
Favorite security products?

Open ended, what are your favorite security products?

submitted by /u/Steve69Maddeeeeen69
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Hello there I have a request to all ya hackers!

So the other night these kids thought be funny to scam me and log into my Xbox account little did they know they were local and infact when they logged in and took all my madden players ect it gave me their IP address I have the location but not exact address how many miles radius could they live in with the ip ? I would like to show up at their house and say a few words with their parents considering they took nearly 150$ plus off my Xbox 😂😂 I know I’m so cruel who wants to help with revenge!? If anyone knows how to locate exact address with ip please lmk hmu ! ?

submitted by /u/Resident-Lawyer-8325
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
My Top 7 Favorite Websites to (Legally) Improve My Web-Hacking Skills

https://cdn-images-1.medium.com/max/940/1*ZvfgzzbkiiPJ_M19Aknzgg.png
TL;DR- The best places to improve your bug-hunting skills without getting your door kicked down by the cops.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video