Recently I started using a new application for secret management. Let the name be [redacted].Continue reading on Medium » (https://medium.com/@aa.pietruczuk/improper-error-handling-leads-to-exposing-internal-tokens-3355d6b43a32?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Improper error handling leads to exposing internal tokens

Recently I started using a new application for secret management. Let the name be redacted.Continue reading on Medium »
Read more...

Hacking on Medium
Beating Plagiarism Checkers for Science

https://cdn-images-1.medium.com/max/1001/1*h6d-FwqYWfhFt28zYY0BiA.png
TLDR; a custom font can be used to avoid a plagiarism checker while still being human readable.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Broken access control + misconfiguration = Beautiful privilege escalation

https://cdn-images-1.medium.com/max/600/1*tB1byC2zmUudStqWDDgavg.jpeg
Hello His/Her

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Basic:2.4 — Web Attacks (Local File Inclusion)

https://cdn-images-1.medium.com/max/898/1*QBTVHZjTeNndDhxizHcbgA.png
Disclaimer

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What We Know About Pegasus Spyware

https://cdn-images-1.medium.com/max/1024/1*6lEl7Le4l5hIl06-TaHlYg.png
What is Pegasus spyware?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Los 5 pilares para una formación eficaz de concienciación sobre ciberseguridad

https://cdn-images-1.medium.com/max/1666/0*9zAcPuyfifAyXyc4
No es noticia que los ataques de phishing se vuelvan más complejos y ocurran con más frecuencia. Solo este año, APWG reportó un total…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Meta leaked 533 million users data

https://external-preview.redd.it/iV0_UVP-Bxtyv_Ga7oV2xCT1-p-RvDEPh-gTbDNT2NA.jpg?width=640&crop=smart&auto=webp&s=ca869fe613f6649ce8f472e04963a2ef0d6447a9 submitted by /u/Fire_peen
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Potencional Google Photos Leak

So I wanted to download my YT avatar picture, since I lost the original picture. While doing that I noticed that it was hosted at very strange domain (yt3.ggpht.com). I threw ggpht.com into online tool Robtex.com and found 31 random publicly acessible pictures. They are hosted as objects and are acessible easily. Does anyone know why are those hosted there? Could this be a Google Photos user data leak?

submitted by /u/MarBar_SK
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Cyber-Threat Group Targets Critical RCE Vulnerability in 'Bleed You' Campaign

More than 1,000 systems are exposed to a campaign hunting weak Windows servers and more.

[BUG BOUNTY] SUBDOMAIN TAKEOVER IN TARGET CNAME NETLIFY

Um controle de subdomínio ocorre quando um invasor obtém controle sobre um subdomínio de um domínio de destino. Normalmente, isso acontece…Continue reading on Medium »
Read more...

[BUG BOUNTY] SUBDOMAIN TAKEOVER IN TARGET CNAME NETLIFY
https://medium.com/@kauenavarro/bug-bounty-subdomain-takeover-in-target-cname-netlify-1b2d22383f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Um controle de subdomínio ocorre quando um invasor obtém controle sobre um subdomínio de um domínio de destino. Normalmente, isso acontece…Continue reading on Medium » (https://medium.com/@kauenavarro/bug-bounty-subdomain-takeover-in-target-cname-netlify-1b2d22383f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video