Hacking on Medium
Online Safety

When using the internet, we all face certain risks that we are aware of and unaware of. With the advancements of technology and types of…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How To Set Up Kali In Docker For Hacking

https://cdn-images-1.medium.com/max/1920/1*LTyRSaGzRkyrUrak5ZYbrw.png
Here’s how to set up Kali Linux on docker containers, and start hacking. Docker helps us to run isolated application with less resources.

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe|| Olympus Full Walkthrough

https://cdn-images-1.medium.com/max/1098/1*Y61HTymNtPVrsByTSX8klQ.png
Olympus is a medium-difficulty room on Tryhackme.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How on Earth Did the Devil Get My Cell Phone Number?

https://cdn-images-1.medium.com/max/2600/0*ypdMr7sqgH3HPIT6
When I’m discouraged, I look out for anything that can happen. But, mostly, I try to stay calm, and sometimes I’ve had enough and won’t…

Continue reading on Pure Thinking and Feeling »

___________________________
@hacking_Attack
@Hacking_Video

The Untold SendBird Misconfigurations
https://ltidi.medium.com/the-untold-sendbird-misconfigurations-1496d252bc69?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

At a random bug hunting collaboration with my team (thaivu, lamscun, thefool45, fergustr4n), we had bumped into a random private target as…Continue reading on Medium » (https://ltidi.medium.com/the-untold-sendbird-misconfigurations-1496d252bc69?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Untold SendBird Misconfigurations

At a random bug hunting collaboration with my team (thaivu, lamscun, thefool45, fergustr4n), we had bumped into a random private target as…Continue reading on Medium »
Read more...

Hacking on Medium
Four Essential YouTube Channels To Learn Programming in 2022

https://cdn-images-1.medium.com/max/1024/1*M1sgHLoaUOooWFqxJ6EdIA.jpeg
photo from istock website

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Ten Commandments of Computer Security for Mere Mortals

https://cdn-images-1.medium.com/max/2600/1*VrGp_b1dJOByAnngcNXNJw.jpeg
Ten common-sense guidelines that anyone can follow to avoid identity theft… or worse.

Continue reading on Reflections »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Special Character Identification?

Wasn't really sure where do ask about this, but r/hacking seemed like a good place to start. If anyone knows better place to post this, please feel to suggest a sub below. I'm trying to identify some special characters/how these letters work. So I found a guy with a really jacked up name in a multiplayer game, and am trying to figure out what he did. His display name was ＣａｃｔｕｓＪａｃｋ which shows up in game as a different than normal font, and also appears to have spaces in between the letters despite the fact that there are no spaces at all. The game allows no special characters in your username, yet if you copy+paste it into your username area it keeps the funky appearance so however this works is a fun way to beat the system. How does this work? When I highlight the name and copy+paste it into google, it pulls normal search results for "Cactus Jack" like no big deal, despite the search bar and my search history appearing as "ＣａｃｔｕｓＪａｃｋ" What is going on? How and why does this appear as a unique font with spaces?

submitted by /u/XB1_S8
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Crypto scam

I saw this clever scam and I was wondering if the person could get caught doing this. He essentially gets people to let him log into their crypto exchange accounts where I assume he uses stolen cards to deposit money and then he buys crypto and sends it to his ghost wallet. The person in question is pretty big on social media and has been posting himself buying apartments and anything he likes. Will he eventually get caught or is this fool proof?

submitted by /u/PLAYERUBG
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Cracking password

Can I use external GPU using thunderbolt on a laptop to crack passwords ?

submitted by /u/CumsockFinder
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to change your IP without having a VPN?

I have a paid VPN and it's quite slow, so I don't really want to use it, but is it possible to change your IP without a VPN? Most ways on youtube don't work and after accessing router settings and changing the MAC address, nothing happens.

submitted by /u/throwaway12333354353
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
GeHot Opintions

It's back to GeHot (George Hotz) after several years, the software engineer who is now teaming up with Musk and has become the typical exalted (I think); but I didn't want to speak about that.

​

He at 17 managed to find the first jailbreak for iOs and I was wondering:

how does a 17-year-old boy have the skills necessary to be able to make a jailbreak? Where does he get his knowledge? Is this all true or is it a fictional story?

​

Do you have any opinions about this?

submitted by /u/allmudi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

For auth, Why do attackers need the secret key for jwt verification when it’s in the .env file?
https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/

I’ve been through several tutorials claiming that you should use a refresh token to generate the new access token, and to not use the access token to generate a new access token because then an attacker who got the access token can re authenticate themselves. Apparently an attacker who gets the refresh token would still need to get the secret… But if the server is running, and they use the endpoint that creates a new access token, then the code is going to look something like: jwt.verify(process.env.SECRETKEY…) See…. Aren’t we giving the attacker the secret key in the above code because the code uses the secret to verify, and then we’d just create a new access token and give it to the attacker? submitted by /u/Impossible_Map_2355 (https://www.reddit.com/user/Impossible_Map_2355)
[link] (https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/)

___________________________
@hacking_Attack
@Hacking_Video