How to succeed in bug bounty?
https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium » (https://praveenjalasutram.medium.com/how-to-succeed-in-bug-bounty-9b9ff5d0542f?source=rss------bug_bounty-5)

How to succeed in bug bounty?

Bug bounty programs are a popular way for organizations to identify and fix vulnerabilities in their systems. By offering rewards to…Continue reading on Medium »
Read more...

hacking: security in practice
Cracking salted SHA1HASH passwords with Hashcat

I'm new to hashcat but I'm trying to use it to crack a salted SHA1DASH password. I have the salt obtained already.

I've been using this (http://willgenovese.com/cracking-zynga/) as a guide since it's essentially what I'm trying to do but I'm getting error messages, namely "token length exception".

I'm also getting "Failed to initialize NVIDIA RTC library"

*
Device #1: CUDA SDK Toolkit not installed or incorrectly installed. CUDA SDK Toolkit required for proper device support and utilization. Falling back to OpenCL runtime.

*
Device #1: WARNING! Kernel exec timeout is not disabled. This may cause "CL_OUT_OF_RESOURCES" or related errors. To disable the timeout, see: https://hashcat.net/q/timeoutpatch
For reference, the input is

hashcat -m 120 -a0 -w4 '[hash]:--[salt]--' C:\Users\user\Desktop\rockyou.txt -r C:\Users\user\Downloads\hashcat-6.2.5\rules\zynga.rule

I wouldn't be surprised if I've botched the syntax somehow.

submitted by /u/Hurriyett
[link] [comments]

https://b.thumbs.redditmedia.com/BbL5h5rxZXm_cR_hYQ4UROXAKlSmJrFQW-6jYDzFLzI.jpg A while ago a specific set of websites were banned and the person who banned them moved out, after a few years I now want to use said websites and can't find a way how to as the website in question blocks all VPN's as they are associated with cheaters, I've tried using proxy websites and changing DNS servers, nothing works, here's nslookup results.

https://preview.redd.it/xlsgl633j66a1.png?width=387&format=png&auto=webp&s=148a656e00323257492ad4135634e3690bbfe067

I've found on other devices editing the /etc/hosts.txt file with the correct IP to domain usually works but I'm currently on a Chromebook running aarch64 Debian GNU/Linux 11 (bullseye).

submitted by /u/yupersSB
[link] [comments]

hacking: security in practice
I just hacked into a web app I built to fix some bugs during a code freeze

Fk me. My life’s a mess

submitted by /u/Born-Manufacturer-40
[link] [comments]

Roadmap to learn Pentesting
https://www.reddit.com/r/Pentesting/comments/zn97j1/roadmap_to_learn_pentesting/

<!-- SC_OFF -->Hey guys. I’m new to Pentesting, with what thing should i start as a beginner ? <!-- SC_ON --> submitted by /u/Faizanafz (https://www.reddit.com/user/Faizanafz)
[link] (https://www.reddit.com/r/Pentesting/comments/zn97j1/roadmap_to_learn_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/zn97j1/roadmap_to_learn_pentesting/)

Param Hunting to Injections

Hey hackers! How’s your week going?Continue reading on InfoSec Write-ups »
Read more...

XSS Stored on JD.id
https://kuhuk.medium.com/xss-stored-on-jd-id-ee73d73285de?source=rss------bug_bounty-5

Hi Everyone,Continue reading on Medium » (https://kuhuk.medium.com/xss-stored-on-jd-id-ee73d73285de?source=rss------bug_bounty-5)

Param Hunting to Injections
https://infosecwriteups.com/param-hunting-to-injections-4365da5447cf?source=rss------bug_bounty-5

Hey hackers! How’s your week going?Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/param-hunting-to-injections-4365da5447cf?source=rss------bug_bounty-5)

Hacking on Medium
Mention some of the ethical hackers’ security hacks.

https://cdn-images-1.medium.com/max/1080/1*zryh7DT6bxBageLpBPeMkg.jpeg
Mention some of the ethical hackers’ security hacks.

Continue reading on Medium »

Hacking on Medium
Information Gathering, is it Important?

Information Gathering, this word is familiar to warriors in cyber security. True? Because there is a saying that “Information is Power”.

Continue reading on Medium »