Hacking on Medium
Only 24 Hours Left For IWCON2022

https://cdn-images-1.medium.com/max/1080/1*Ck49UYFz2kS880ImceVlEw.png
End 2022 with a bang: learn from our experts and network with the best in infosec.

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Como fui de um range de IP até um RCE via SQL Injection — Bug Bounty

https://cdn-images-1.medium.com/max/1000/1*S1Gyr-9dLckLjNkRyO21Mw.jpeg
Estarei compartilhando o processo que percorri em um dos meus últimos bug bounties para chegar a tão aclamada falha de RCE. Onde fui de um…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Developing a Simple Metasploit Module

https://cdn-images-1.medium.com/max/1280/1*YVstsKiC69Zsm3n5_Zo-YQ.jpeg
How to develop Metasploit modules for cybersecurity in Ruby, starting with port scanners.

Continue reading on The Gray Area »
➖ Sent by @TheFeedReaderBot ➖

Introspection GraphQL on Sayurbox.com
https://medium.com/@kuhukservice/introspection-graphql-on-sayurbox-com-433435750627?source=rss------bug_bounty-5

Hi everyone,Continue reading on Medium » (https://medium.com/@kuhukservice/introspection-graphql-on-sayurbox-com-433435750627?source=rss------bug_bounty-5)

XSS Reflected on Bukalapak.com
https://medium.com/@kuhukservice/xss-reflected-on-bukalapak-com-8a03bd32451?source=rss------bug_bounty-5

Hi Bug Hunters,Continue reading on Medium » (https://medium.com/@kuhukservice/xss-reflected-on-bukalapak-com-8a03bd32451?source=rss------bug_bounty-5)

Sensitive Information Disclosure on bukalapak.com
https://medium.com/@kuhukservice/sensitive-information-disclosure-on-bukalapak-com-872c5e096d99?source=rss------bug_bounty-5

Hi Everyone,Continue reading on Medium » (https://medium.com/@kuhukservice/sensitive-information-disclosure-on-bukalapak-com-872c5e096d99?source=rss------bug_bounty-5)

Sensitive Information Disclosure on bukalapak.com

Hi Everyone,Continue reading on Medium »
Read more...

How to succeed in bug bounty?
https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium » (https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5)

How to succeed in bug bounty?

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium »
Read more...

hacking: security in practice
Cracking salted SHA1HASH passwords with Hashcat

I'm new to hashcat but I'm trying to use it to crack a salted SHA1DASH password. I have the salt obtained already.

I've been using this (http://willgenovese.com/cracking-zynga/) as a guide since it's essentially what I'm trying to do but I'm getting error messages, namely "token length exception".

I'm also getting "Failed to initialize NVIDIA RTC library"

*
Device #1: CUDA SDK Toolkit not installed or incorrectly installed. CUDA SDK Toolkit required for proper device support and utilization. Falling back to OpenCL runtime.

*
Device #1: WARNING! Kernel exec timeout is not disabled. This may cause "CL_OUT_OF_RESOURCES" or related errors. To disable the timeout, see: https://hashcat.net/q/timeoutpatch
For reference, the input is

hashcat -m 120 -a0 -w4 '[hash]:--[salt]--' C:\Users\user\Desktop\rockyou.txt -r C:\Users\user\Downloads\hashcat-6.2.5\rules\zynga.rule

I wouldn't be surprised if I've botched the syntax somehow.

submitted by /u/Hurriyett
[link] [comments]