Explaining vulnerabilities : File inclusion {Bug bounties}

File inclusion vulnerabilities are part of the OWASP top ten. In this article, I’ll explain what they are,how to find them, how to exploit…Continue reading on Medium »
Read more...

Hacking on Medium
Chill Hack CTF | TryHackMe Write-Up

https://cdn-images-1.medium.com/max/600/0*k1tXf2BdnN-sk-bK.png
TryHackMe Room:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bettercap

https://cdn-images-1.medium.com/max/746/1*soqWlrVUIsd1ePrzMNtPsw.png
Bettercap es una herramienta muy potente que es compatible con las principales distribuciones basadas en Linux, algunas de sus principales…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Top 30 Best Gifts for Hackers and Programmers in 2022

https://cdn-images-1.medium.com/max/1280/1*6ExxpzmM3Sqa31o2mbC52g.png
TL;DR- The best gifts for programmers and cybersecurity enthusiasts in 2022 for the upcoming holiday season, narrowed down to the top 30.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is this idea risky?

Hi, I'm currently thinking of making a modern password manager as a web app. It saves the passwords in a encrypted file and has to be picked (and entered the password afterwards) to read the passwords. Completely locally. Is it a good or bad idea? What are the risks (except the AES encryption being able to be cracked)?

submitted by /u/srt54558
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

do we need to set a Content Security Policy on a http : json response
https://www.reddit.com/r/Pentesting/comments/z4yd94/do_we_need_to_set_a_content_security_policy_on_a/

___________________________
@hacking_Attack
@Hacking_Video

hello everyone I want to know if the fact that the CSP header not set for json response can be a source of problem let me explain more : I have a web app, that will send as a response html page with js (let's say csp is set ) the js will make a call to an api so in this api response do we need csp if yes what is the need for it ? there is any xss in javascript ? ​ I've just done a owasp zap scan and I found the header not set so I'm wondering is it a problem ​ https://preview.redd.it/54lirlbv682a1.png?width=503&format=png&auto=webp&s=c47ac31ebb02bbe500ca2c85b69e90340d8309cf sorry if it's a stupid question submitted by /u/firend_of_laki (https://www.reddit.com/user/firend_of_laki)
[link] (https://www.reddit.com/r/Pentesting/comments/z4yd94/do_we_need_to_set_a_content_security_policy_on_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/z4yd94/do_we_need_to_set_a_content_security_policy_on_a/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Mirai Botnet Returns, But Don’t Panic

https://cdn-images-1.medium.com/max/600/0*QJoCBykh9x6c9uaX.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Blockchain Safe? Detailed Analysis!

https://cdn-images-1.medium.com/max/602/1*TefKoIl_Nob4A6xuUlvUEw.jpeg
When it comes to technology, no topic gets as much buzz as blockchain. You might have heard your friends talking about it or seen a news…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SQL dump keywords

What are some good keywords to search for on an sql dump that are note the basics like password and username?

submitted by /u/SgtMorningWood009
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I hacked into a government e-learning website

DATE: 07/11/2022Continue reading on Medium »
Read more...

How I hacked into a government e-learning website
https://iamgk808.medium.com/how-i-hacked-into-a-government-e-learning-website-ce8da8fb4ccc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

DATE: 07/11/2022Continue reading on Medium » (https://iamgk808.medium.com/how-i-hacked-into-a-government-e-learning-website-ce8da8fb4ccc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Dutch Government-Broken Authentication To Full Website Takeover (P1)
https://systemweakness.com/hacking-dutch-government-broken-authentication-to-full-website-takeover-p1-9af477604d54?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video