Hacking on Medium
Como fui de um range de IP até um RCE via SQL Injection — Bug Bounty

https://cdn-images-1.medium.com/max/1000/1*S1Gyr-9dLckLjNkRyO21Mw.jpeg
Estarei compartilhando o processo que percorri em um dos meus últimos bug bounties para chegar a tão aclamada falha de RCE. Onde fui de um…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Developing a Simple Metasploit Module

https://cdn-images-1.medium.com/max/1280/1*YVstsKiC69Zsm3n5_Zo-YQ.jpeg
How to develop Metasploit modules for cybersecurity in Ruby, starting with port scanners.

Continue reading on The Gray Area »
➖ Sent by @TheFeedReaderBot ➖

Introspection GraphQL on Sayurbox.com
https://medium.com/@kuhukservice/introspection-graphql-on-sayurbox-com-433435750627?source=rss------bug_bounty-5

Hi everyone,Continue reading on Medium » (https://medium.com/@kuhukservice/introspection-graphql-on-sayurbox-com-433435750627?source=rss------bug_bounty-5)

XSS Reflected on Bukalapak.com
https://medium.com/@kuhukservice/xss-reflected-on-bukalapak-com-8a03bd32451?source=rss------bug_bounty-5

Hi Bug Hunters,Continue reading on Medium » (https://medium.com/@kuhukservice/xss-reflected-on-bukalapak-com-8a03bd32451?source=rss------bug_bounty-5)

Sensitive Information Disclosure on bukalapak.com
https://medium.com/@kuhukservice/sensitive-information-disclosure-on-bukalapak-com-872c5e096d99?source=rss------bug_bounty-5

Hi Everyone,Continue reading on Medium » (https://medium.com/@kuhukservice/sensitive-information-disclosure-on-bukalapak-com-872c5e096d99?source=rss------bug_bounty-5)

Sensitive Information Disclosure on bukalapak.com

Hi Everyone,Continue reading on Medium »
Read more...

How to succeed in bug bounty?
https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium » (https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5)

How to succeed in bug bounty?

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium »
Read more...

hacking: security in practice
Cracking salted SHA1HASH passwords with Hashcat

I'm new to hashcat but I'm trying to use it to crack a salted SHA1DASH password. I have the salt obtained already.

I've been using this (http://willgenovese.com/cracking-zynga/) as a guide since it's essentially what I'm trying to do but I'm getting error messages, namely "token length exception".

I'm also getting "Failed to initialize NVIDIA RTC library"

*
Device #1: CUDA SDK Toolkit not installed or incorrectly installed. CUDA SDK Toolkit required for proper device support and utilization. Falling back to OpenCL runtime.

*
Device #1: WARNING! Kernel exec timeout is not disabled. This may cause "CL_OUT_OF_RESOURCES" or related errors. To disable the timeout, see: https://hashcat.net/q/timeoutpatch
For reference, the input is

hashcat -m 120 -a0 -w4 '[hash]:--[salt]--' C:\Users\user\Desktop\rockyou.txt -r C:\Users\user\Downloads\hashcat-6.2.5\rules\zynga.rule

I wouldn't be surprised if I've botched the syntax somehow.

submitted by /u/Hurriyett
[link] [comments]

https://b.thumbs.redditmedia.com/BbL5h5rxZXm_cR_hYQ4UROXAKlSmJrFQW-6jYDzFLzI.jpg A while ago a specific set of websites were banned and the person who banned them moved out, after a few years I now want to use said websites and can't find a way how to as the website in question blocks all VPN's as they are associated with cheaters, I've tried using proxy websites and changing DNS servers, nothing works, here's nslookup results.

https://preview.redd.it/xlsgl633j66a1.png?width=387&format=png&auto=webp&s=148a656e00323257492ad4135634e3690bbfe067

I've found on other devices editing the /etc/hosts.txt file with the correct IP to domain usually works but I'm currently on a Chromebook running aarch64 Debian GNU/Linux 11 (bullseye).

submitted by /u/yupersSB
[link] [comments]