Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
GeHot Opintions

It's back to GeHot (George Hotz) after several years, the software engineer who is now teaming up with Musk and has become the typical exalted (I think); but I didn't want to speak about that.



He at 17 managed to find the first jailbreak for iOs and I was wondering:

how does a 17-year-old boy have the skills necessary to be able to make a jailbreak? Where does he get his knowledge? Is this all true or is it a fictional story?



Do you have any opinions about this?

submitted by /u/allmudi
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
For auth, Why do attackers need the secret key for jwt verification when it’s in the .env file?
https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/

I’ve been through several tutorials claiming that you should use a refresh token to generate the new access token, and to not use the access token to generate a new access token because then an attacker who got the access token can re authenticate themselves. Apparently an attacker who gets the refresh token would still need to get the secret… But if the server is running, and they use the endpoint that creates a new access token, then the code is going to look something like: jwt.verify(process.env.SECRETKEY…) See…. Aren’t we giving the attacker the secret key in the above code because the code uses the secret to verify, and then we’d just create a new access token and give it to the attacker? submitted by /u/Impossible_Map_2355 (https://www.reddit.com/user/Impossible_Map_2355)
[link] (https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/z6ffn4/for_auth_why_do_attackers_need_the_secret_key_for/)

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Your Account was Breached

Lookin for best practices - what are you doin to confirm device security after someone successfully breaches one of your online accounts?

submitted by /u/flasktorch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
What is Bug Bounty & How to Get Started?

A Definitive Guide to Bug BountyContinue reading on Bug Zero »
Read more...
Bug Bounty Programs: What Are They?

Everything You Should KnowContinue reading on Bug Zero »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hack The Box [HTB] Writeup: Precious

https://cdn-images-1.medium.com/max/687/1*wlI7Nrb4YMwmkr64KmXyyQ.png
Hack the Box released a new machine this weekend called Precious and I was excited to get my hands on it. Precious is an easy rated Linux…

Continue reading on Medium »