Hacking on Medium
Bug Hunting 101: Exploiting Cross-Site Request Forgeries (CSRF)

https://cdn-images-1.medium.com/max/1219/1*wwicHB_l8uL1X9LRoLxyCA.png
TL;DR- A quick and concise overview of CSRFs. What they are, what they can do, and how you can best benefit from them in bug bounty…

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box [HTB] Writeup: Awkward

https://cdn-images-1.medium.com/max/689/1*lYFkZU2urtFbKa3t4tCIgQ.png
Introduction: Pwning HTB machine Awkward

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
[Tryhackme] PrintNightmare, thrice!

https://cdn-images-1.medium.com/max/944/1*C1sqkRmdlg9rf6E3z4S4gw.png
It’s important to try these on your own as you’ll learn more, but then reference a write up as necessary if you get stuck.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Bug Hunting 101: Exploiting Cross-Site Request Forgeries (CSRF)

TL;DR- A quick and concise overview of CSRFs. What they are, what they can do, and how you can best benefit from them in bug bounty…Continue reading on The Gray Area »
Read more...

hacking: security in practice
Accounts and more accounts

Hello community, I've been wondering how some internet users put up accounts for different streaming services for sale, rather, how do they manage to get them without having any problem?. It seems strange to me to see how more and more users carry out this practice.

submitted by /u/MOR_Dragon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is there any sea of thieves mod menu?

I don’t mind the price but I’m looking for something legit like dis2rbed for gta

submitted by /u/Haykan99
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug Hunting 101: Exploiting Cross-Site Request Forgeries (CSRF)
https://thegrayarea.tech/bug-hunting-101-exploiting-cross-site-request-forgeries-csrf-47503395bac6?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- A quick and concise overview of CSRFs. What they are, what they can do, and how you can best benefit from them in bug bounty…Continue reading on The Gray Area » (https://thegrayarea.tech/bug-hunting-101-exploiting-cross-site-request-forgeries-csrf-47503395bac6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Access Any Owner Account without Authentication (Auth bypass + 2FA bypass)

https://cdn-images-1.medium.com/max/1200/1*tOzw56_5Qh9SRh0uoAXUyg.png
Hello Folks,

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HackTheBox Writeup: Precious

https://cdn-images-1.medium.com/max/1400/1*Ak0xQ7O7Yf3nqaBP7zglSg.png
ENUMERACIÓN DE PUERTO

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe — Dig Dug WriteUp

https://cdn-images-1.medium.com/max/730/1*-GmkVoUTzrVSB3BzRBHORQ.png
Dig Dug is an Easy level CTF on TryHackMe. It has the following challenge description:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
4 Ways to use NPM Securely

https://cdn-images-1.medium.com/max/1024/0*sKBvU8BLYcSGhrcC
What is NPM?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Any way to read the back end database from the front end web API?

My local radio station does an annual, listener-voted countdown, and their countdown website is built by an API. I have called the API directly and can get the countdown data as JSON, which is great for getting my own stats on the countdown, but I was wondering if there was some way to get to the back end database, so I could learn what's going to be #1 before it plays....

I don't want to change anything... just get a little advanced notice of the countdown results.

​

I'm assuming this isn't possible, but I don't really understand the tech (I was proud of myself finding the API endpoint to get the current countdown data, but taking it further is beyond me)

submitted by /u/Rincey_nz
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video