What is a bug bounty?Continue reading on Medium » (https://falkensmaze.medium.com/main-app-methodology-bug-bounties-8681dbc0d58c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Doubts about XSS

Doubts about XSS

​

Hi guys, im trying to aproach to xss but i see there's lots of JS to study before.

I study with tryhackme, and theres a playground about stored XSS. I need some help understanding why does the following payload give me only my own cookie, and not the 'admin' cookie.
I use netcat to listen to the response but i only get my cookie, not the one im suposed to get.

Then i looked for some walkthrougs and they use the following payloads:

​

\-

​

\- *javascript:'/log/' + document.cookie *

​

So in the playground Tryhackme has a site called [domain.com/log](https://domain.com/log) where you can access to take the cookie.

Can you explain the differences between the payloads and why i am wrong?

​

I also would like to know if this situation and payloads is something feasible or 'real'.

​

Thank you!

submitted by /u/Feeling_Beautiful_85
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Inyección SQL divertida 3— MSSQL ejemplo practico

https://cdn-images-1.medium.com/max/626/1*c0V6ZeKSGnQyYWd_OLm7dw.png
Hola querido lector, de verdad me da mucho gusto que me regales un poco de tu valioso tiempo para leer el siguiente escrito. En esta…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Writeup: TryHackMe —  Neighbour

https://cdn-images-1.medium.com/max/600/1*FPtqV16YYdmx9-HlF9slrw.png
TryHackme Neighbour full writeup and walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Top 6 IT Certifications for Cybersecurity Enthusiasts

https://cdn-images-1.medium.com/max/1566/1*3yXZ-xL7QuY9GItZy5PFjg.jpeg
TL;DR- The best free and paid certifications that I’ve found in the past.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Main app methodology : Bug bounties

https://cdn-images-1.medium.com/max/860/0*tJ-epM2zhGK2DFHc
What is a bug bounty?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Investors Are Pouring Cash Into These 10 Cybersecurity Startups

Following the dollars reveals pen-test and intrusion-detection startups are the most attractive to investors right now, collectively getting more than $3 billion in funding.

Dark Reading: Attacks/Breaches
Name That Toon: Fall Cleanup

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
Major Security Breach From Business Users' Low-Code Apps Could Come in 2023, Analysts Warn

Here's what that means about our current state as an industry, and why we should be happy about it.

hacking: security in practice
Just wondering does anyone have any resources on this simple thingy windows

Ive broken tru a couple of "oh my mother forgot her password" type things, all of them windows and for all of them ive used the windows 10 usb installer, i can even get some videos if you guys need refrances. Now I am wondering is there a way to make this easier, just plug and change the password to 12345678. And if it is possable would you mind pointing me to the right direction.

submitted by /u/BigDickMily
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Explorando XSS no lugar do meu nome.

https://cdn-images-1.medium.com/max/1599/1*RdS4mhZazT3rwv15yTW-FA.jpeg
Espero que vocês estejam bem, para poupar seu tempo, vamos direto a vulnerabilidade.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Identity Security Needs Humans and AI Working Hand in Hand

In the cybersecurity world, augmenting the human touch with artificial intelligence has produced extremely positive results.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Releases YARA Rules to Disrupt Cobalt Strike Abuse

The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that.

Dark Reading: Attacks/Breaches
Microsoft Warns of Rise in Stolen Cloud Tokens Used to Bypass MFA

Analysts see an uptick in token theft from authenticated users, allowing threat actors to bypass MFA protections.