Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Dark Reading: Attacks/Breaches
DraftKings Account Takeovers Frame Sports-Betting Cybersecurity Dilemma

Cybercrooks have drained DraftKings accounts of $300K in the past few days thanks to credential stuffing, just as the 2022 FIFA World Cup starts up.
Dark Reading: Attacks/Breaches
Cyber Due Diligence in M&As Uncovers Threats, Improves Valuations

To get the full picture, companies need to look into the cybersecurity history and practices of the business they're acquiring.
Dark Reading: Attacks/Breaches
How Work From Home Shaped the Road to SASE for Enterprises

As SASE adoption grows, with its allure of simplified protection via one network and security experience for hybrid workers, remember: Have an overall plan, integrate and migrate to scale usage, and start small.
Blind SQL Injection, commas are being filtered
https://www.reddit.com/r/Pentesting/comments/z26rrw/blind_sql_injection_commas_are_being_filtered/

Hey folks, I found a blind sql injection in a webapp, the backend database is IBM DB2 confirmed. I could enumerate tables and columns but I could not use substring function to retrieve the data from the columns. Turns out the webapp is filtering out commas in the injected sql statement, specifically inside substring function. The injected statement looks like this: ' AND (SELECT substring(PASSWORD,1,1) FROM ADMINISTRATOR WHERE USERNAME='user')='A'-- Do you guys have any ideas on how to achieve the same without having to use commas anywhere? submitted by /u/Empty_Kaleidoscope (https://www.reddit.com/user/Empty_Kaleidoscope)
[link] (https://www.reddit.com/r/Pentesting/comments/z26rrw/blind_sql_injection_commas_are_being_filtered/) [comments] (https://www.reddit.com/r/Pentesting/comments/z26rrw/blind_sql_injection_commas_are_being_filtered/)

___________________________
@hacking_Attack
@Hacking_Video
Dark Reading: Attacks/Breaches
Adversarial AI Attacks Highlight Fundamental Security Issues

An AI's "world" only includes the data on which it was trained, so it otherwise lacks context — opening the door for creative attacks from cyber adversaries.
Dark Reading: Attacks/Breaches
Ducktail Cyberattackers Add WhatsApp to Facebook Business Attack Chain

The Vietnam-based financial cybercrime operation's primary goal is to push out fraudulent ads via compromised business accounts.
How can an https link been used for port scanning ?
https://www.reddit.com/r/Pentesting/comments/z2dlx5/how_can_an_https_link_been_used_for_port_scanning/

hello community I'm not sure if I did understand this but I found that we can use https://example.com: (https://x:80/)port and change the port to 80 ... to do a port scaning (this in the context of SSRF) so from the networking courses I think is that we can know that the port is opened ,because when we use https this means that we will establish a TCP 3W handshake-> then tls wish will fail in this example if the port was 80 for http when we saw that there was a connection established we now the port is open, am I right ? also please if you know a community ,where we can ask beginner question without being judged ,or posting irrelevant posts to the community can You please let me know thanks for your help submitted by /u/firend_of_laki (https://www.reddit.com/user/firend_of_laki)
[link] (https://www.reddit.com/r/Pentesting/comments/z2dlx5/how_can_an_https_link_been_used_for_port_scanning/) [comments] (https://www.reddit.com/r/Pentesting/comments/z2dlx5/how_can_an_https_link_been_used_for_port_scanning/)

___________________________
@hacking_Attack
@Hacking_Video