hacking: security in practice
Feroxbuster, Gobuster etc. on HTTPS

Is it possible to use these kind of tools on a HTTPS website? I tried it once with proxychains but even tho i excluded wildcards that returned to the main site, I still couldnt find any directories. Does it have some sort of protection?

submitted by /u/eltico69
[link] [comments]

Dark Reading: Attacks/Breaches
Snyk Gets Nod of Approval With ServiceNow Strategic Investment

One of the most closely watched security startups continues to build bank because its platform appeals to both developers and security pros.

hacking: security in practice
Hashcat / JTR

I am current trying to crack some yescrypt hashes, last time I checked hash cat didnt support yescrypt, is this still true? I know JTR (John the ripper) supports it with with --format=crypt. However, I am trying to utilize my GPU as decrypting with my current CPU is rather slow. If anyone has any recommendations it would be appreciated.

submitted by /u/Mr-Morality
[link] [comments]

hacking: security in practice
brute force detected?

Can brute force attacks be detected or could they always have been easy to detect? And how are they detected?

submitted by /u/TheWalletDestroyer
[link] [comments]

hacking: security in practice
Whacking a cyber criminals admin panel

https://external-preview.redd.it/tQV0OEpKcJPJpkySBRFtwRxIRpdI-IQFh0RgmCoONDQ.jpg?width=640&crop=smart&auto=webp&s=8bac5b2faac628c24defb2bf3870af21c01972ed submitted by /u/thehunter699
[link] [comments]

P1 Bug Hunting — FTP Server Broken Access Control
https://thegrayarea.tech/p1-bug-hunting-ftp-server-broken-access-control-738a8a9c8280?source=rss------bug_bounty-5

TL;DR- A bug hunting walkthrough on a critical-level FTP vulnerability that was alarmingly simple to find and validate.Continue reading on The Gray Area » (https://thegrayarea.tech/p1-bug-hunting-ftp-server-broken-access-control-738a8a9c8280?source=rss------bug_bounty-5)

Hacking on Medium
DAY 5: WIRELESS PENTESTING (WiFi Encryption PART3) 26/1/2023

https://cdn-images-1.medium.com/max/700/0*uMILgz6aPCHOy2DQ.png
[+] WPA3 (Wi-Fi Protected Access version 3)

Continue reading on Medium »

Hacking on Medium
Stocker — Hack The Box

https://cdn-images-1.medium.com/max/690/1*5TjSQs6NFzmcs7ZCtXDRxA.png
In this writeup, we are going to solve a box on hackthebox called Stocker.

Continue reading on System Weakness »

Hacking on Medium
P1 Bug Hunting — FTP Server Broken Access Control

https://cdn-images-1.medium.com/max/1680/0*yA0GZ1N0gaTWyJsh.jpg
TL;DR- A bug hunting walkthrough on a critical-level FTP vulnerability that was alarmingly simple to find and validate.

Continue reading on The Gray Area »