Hi everybody, I will share with you in this article in detail how I was able to find CVE-2022–42710 through static analysisContinue reading on Medium » (https://omar0x01.medium.com/cve-2022-42710-a-journey-through-xxe-to-stored-xss-851d74dfe917?source=rss------bug_bounty-5)

Hacking on Medium
GitHub anuncia escaneo secreto gratuito para todos los repositorios públicos

https://cdn-images-1.medium.com/max/1293/0*Roupl0VqtaPJTU0b
GitHub dijo el jueves que está poniendo a disposición su servicio de escaneo secreto para todos los repositorios públicos en la plataforma…

Continue reading on Medium »

Hacking on Medium
The Importance of Self Custody

https://cdn-images-1.medium.com/max/1200/0*-MtZy06hicTnTlmT
A Self custody wallet is a wallet that you hold the keys for, giving you ownership of and control over the funds it holds. Learn more.

Continue reading on Medium »

Hacking on Medium
IWCON2022 Networking Rooms Are Now Open + New Speaker Announcement

https://cdn-images-1.medium.com/max/1149/1*X2C_TKOy7MIrKdbpXjQgBA.png
Join in on some super cool infosec discussions from experts all over the world!

Continue reading on InfoSec Write-ups »

Hacking on Medium
TryHackMe Advent of Cyber [Day 16]-> Secure Coding: SQLi’s the king, the carolers sing

https://cdn-images-1.medium.com/max/982/0*2hwbXCoXlz1lXqsT.png
WHAT IS THE SQL IN SQLI?

Continue reading on Medium »

Hacking on Medium
Simple CORS misconfig leads to disclose the sensitive token worth of $$$

https://cdn-images-1.medium.com/max/640/1*uemwkdK6thWOKufTChnK5A.gif
Hey fellow hacker’s and Bug hunters , Recently i found some weird CORS misconfiguration in one of my targets.

Continue reading on Medium »

Dark Reading: Attacks/Breaches
New Botnet Targeting Minecraft Servers Poses Potential Enterprise Threat

Microsoft warns enterprises should pay attention to a new botnet used to launch DDoS attacks on private Minecraft Java servers.

Dark Reading: Attacks/Breaches
FBI: Criminals Using BEC Attacks to Scavenge Food Shipments

Cybercriminal rats are at play: Several food suppliers and distributors have experienced hundreds of thousands of dollars in losses after fulfilling fraudulently placed orders for food and ingredient shipments.

Dark Reading: Attacks/Breaches
Organizations Unprepared for Upcoming Data Privacy Regulations

A comprehensive data privacy program requires involvement from all parts of the business that deal with personal data.

Dark Reading: Attacks/Breaches
With SASE Definition Still Cloudy, Forum Proposes Standard

Even without an overarching dictionary of common definitions, the concept of a secure access service edge (SASE) has spread, but a standard could help cloud services work better together.

hacking: security in practice
creating a program that can disable some urls in any kind of browser

Hi?

I'm a python /java JEE dev, but I never did any hacking stuff.I use to write C web scrapper when I was younger.Sometimes I drink at home and after the 4th pints I starts messaging peoples, which I don't want.

When I was younger I got my share of viruses, they would disable the antivirus, redirect any google search to something else.

Do you guys have any pointer to what I could use to write something that can block facebook, whatsapp, signal, telegram, discord, and such in ANY kind of browser for a duration of 12h.

I know, I know, whith physical access to the machine I'm supossed to be able to bypass anything.But lets not forget that I'll be shitfaced, typing on the keyboard will be hard and thinking even more lol.

needs to be hard tho, drunken me is very focused on talking to people.

drunken me will nerver format the hard disk for example, might missclic and format an other drive and too much to backup from C:\ (this is for windows 10)

Thanks.

submitted by /u/dying_animal
[link] [comments]

Top 7 Tips to Succeed in Bug Bounty Programs

Writing a technical write-up for a bug bounty program can be a daunting task, especially if you are new to the field of cybersecurity…Continue reading on Medium »
Read more...