Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/create-your-own-tools-for-hunting-bugs-a-power-often-neglected-186213e4d206?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
T-Mobile Breached Again, This Time Exposing 37M Customers' Data

This time around, weak API security allowed a threat actor to access account information, the mobile phone giant reported.

Dark Reading: Attacks/Breaches
Ransomware Profits Decline as Victims Dig In, Refuse to Pay

Two new reports show ransomware revenues for threat actors dropped sharply in 2022 as more victims ignored ransom demands.

Dark Reading: Attacks/Breaches
Compromised Zendesk Employee Credentials Lead to Breach

Zendesk has alerted customers to a successful SMS phishing campaign that has exposed "service data," but details remain scarce.

Dark Reading: Attacks/Breaches
GPT Emerges as Key AI Tech for Security Vendors

Orca Security is one of the companies integrating conversational AI technology into its products.

Does anyone have any good resources for learning android application pen testing?
https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/

<!-- SC_OFF -->As title it's something I want to get into more. Some labs would be good, beginners guides etc. Thanks. <!-- SC_ON --> submitted by /u/RB9k (https://www.reddit.com/user/RB9k)
[link] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/) [comments] (https://www.reddit.com/r/Pentesting/comments/10ha5gp/does_anyone_have_any_good_resources_for_learning/)

Sliver C2 Leveraged by Many Threat Actors
https://www.reddit.com/r/redteamsec/comments/10hacen/sliver_c2_leveraged_by_many_threat_actors/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.cybereason.com/blog/sliver-c2-leveraged-by-many-threat-actors) [comments] (https://www.reddit.com/r/redteamsec/comments/10hacen/sliver_c2_leveraged_by_many_threat_actors/)

hacking: security in practice
How to install any software on work laptop?

All right guys, I"m not a hacker by any means, so I'm looking to get some help here. I got a laptop from work and all the admin privileges are not available, I can't even change the background, let alone install something like software or a game.

I've tried some of the solutions online, like using CMD to find out the password and username but it didn't work for me, as well as a myriad of other choices I found on YT or Google.

I was thinking that maybe installing another OS would help since. Will I have admin privileges there? Can the company still monitor what I do on a laptop if I have another OS? I would love to get some insight on this.

submitted by /u/DusanIII
[link] [comments]

hacking: security in practice
If I connected to a wifi with a phone then disconnected and forgot the wifi in the settings, if someone got a hold of the phone can they find out where the wifi was connected?

I know it's kinda random but I'm just curious. If anyone knows anything about this I'd be happy to hear about it.

submitted by /u/Bakpao777
[link] [comments]

hacking: security in practice
Did my mother buy an illegal IPTV Box?

She bought a box for 150 bucks and pays some guy 10 bucks a month for free cable. What is this? How does it work? Where can I learn more? Thank you.

submitted by /u/nEwB_LeWb
[link] [comments]

Privilege Escalation Attacks

Attacks known as privilege escalation attempt to gain increased access to important systems, applications, and networks by taking…Continue reading on Medium »
Read more...

CSRF + Stored XSS to Leading to Full Account Takeover

This write-up is about my findings of CSRF + XSS and using them both to get a full account takeover. Wish u like it ❤Continue reading on Medium »
Read more...

Privilege Escalation Attacks
https://medium.com/@gokulelango1040/privilege-escalation-attacks-28a9ef226abb?source=rss------bug_bounty-5

Attacks known as privilege escalation attempt to gain increased access to important systems, applications, and networks by taking…Continue reading on Medium » (https://medium.com/@gokulelango1040/privilege-escalation-attacks-28a9ef226abb?source=rss------bug_bounty-5)

CSRF + Stored XSS to Leading to Full Account Takeover
https://medium.com/@bag0zathev2/csrf-stored-xss-to-leading-to-full-account-takeover-39e9a79533e3?source=rss------bug_bounty-5

This write-up is about my findings of CSRF + XSS and using them both to get a full account takeover. Wish u like it ❤Continue reading on Medium » (https://medium.com/@bag0zathev2/csrf-stored-xss-to-leading-to-full-account-takeover-39e9a79533e3?source=rss------bug_bounty-5)