hacking: security in practice
Doubts about XSS

Doubts about XSS

​

Hi guys, im trying to aproach to xss but i see there's lots of JS to study before.

I study with tryhackme, and theres a playground about stored XSS. I need some help understanding why does the following payload give me only my own cookie, and not the 'admin' cookie.
I use netcat to listen to the response but i only get my cookie, not the one im suposed to get.

Then i looked for some walkthrougs and they use the following payloads:

​

\-

​

\- *javascript:'/log/' + document.cookie *

​

So in the playground Tryhackme has a site called [domain.com/log](https://domain.com/log) where you can access to take the cookie.

Can you explain the differences between the payloads and why i am wrong?

​

I also would like to know if this situation and payloads is something feasible or 'real'.

​

Thank you!

submitted by /u/Feeling_Beautiful_85
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Inyección SQL divertida 3— MSSQL ejemplo practico

https://cdn-images-1.medium.com/max/626/1*c0V6ZeKSGnQyYWd_OLm7dw.png
Hola querido lector, de verdad me da mucho gusto que me regales un poco de tu valioso tiempo para leer el siguiente escrito. En esta…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Writeup: TryHackMe —  Neighbour

https://cdn-images-1.medium.com/max/600/1*FPtqV16YYdmx9-HlF9slrw.png
TryHackme Neighbour full writeup and walkthrough

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Top 6 IT Certifications for Cybersecurity Enthusiasts

https://cdn-images-1.medium.com/max/1566/1*3yXZ-xL7QuY9GItZy5PFjg.jpeg
TL;DR- The best free and paid certifications that I’ve found in the past.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Main app methodology : Bug bounties

https://cdn-images-1.medium.com/max/860/0*tJ-epM2zhGK2DFHc
What is a bug bounty?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Investors Are Pouring Cash Into These 10 Cybersecurity Startups

Following the dollars reveals pen-test and intrusion-detection startups are the most attractive to investors right now, collectively getting more than $3 billion in funding.

Dark Reading: Attacks/Breaches
Name That Toon: Fall Cleanup

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
Major Security Breach From Business Users' Low-Code Apps Could Come in 2023, Analysts Warn

Here's what that means about our current state as an industry, and why we should be happy about it.

hacking: security in practice
Just wondering does anyone have any resources on this simple thingy windows

Ive broken tru a couple of "oh my mother forgot her password" type things, all of them windows and for all of them ive used the windows 10 usb installer, i can even get some videos if you guys need refrances. Now I am wondering is there a way to make this easier, just plug and change the password to 12345678. And if it is possable would you mind pointing me to the right direction.

submitted by /u/BigDickMily
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Explorando XSS no lugar do meu nome.

https://cdn-images-1.medium.com/max/1599/1*RdS4mhZazT3rwv15yTW-FA.jpeg
Espero que vocês estejam bem, para poupar seu tempo, vamos direto a vulnerabilidade.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Identity Security Needs Humans and AI Working Hand in Hand

In the cybersecurity world, augmenting the human touch with artificial intelligence has produced extremely positive results.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Releases YARA Rules to Disrupt Cobalt Strike Abuse

The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that.

Dark Reading: Attacks/Breaches
Microsoft Warns of Rise in Stolen Cloud Tokens Used to Bypass MFA

Analysts see an uptick in token theft from authenticated users, allowing threat actors to bypass MFA protections.

Dark Reading: Attacks/Breaches
MIT Research Documents Effectiveness of Consensus Cyber Risk Oversight Principles

Organizations that use the consensus principles can significantly improve their cyber resilience without raising costs, MIT research shows.

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Viruses vs Factory reset

Will a factory reset get rid of any viruses or trojans etc. from your computer.

I've seen online that if you restore your data the virus could be restored with the back up

so if you were to download whatever "sensitive" data you have on a usb and comb through it then factory reset could that clean your computer completely?

submitted by /u/Tsumi_no_sensei49
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video