Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Best Books for Hacking | Cybersecurity
https://cdn-images-1.medium.com/max/2600/0*ITXlxKFa2Lj2dxFH
Below I have recommended books on the basis of different computer science fields.
Continue reading on Medium »
Best Books for Hacking | Cybersecurity
https://cdn-images-1.medium.com/max/2600/0*ITXlxKFa2Lj2dxFH
Below I have recommended books on the basis of different computer science fields.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices
https://cdn-images-1.medium.com/max/1621/0*2kA722RN0V_Du-c7
Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices in…
Continue reading on Medium »
Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices
https://cdn-images-1.medium.com/max/1621/0*2kA722RN0V_Du-c7
Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices in…
Continue reading on Medium »
Need Advice to build up resume
https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/
<!-- SC_OFF -->I want to get into pentesting field and don't know how should I proceed to get there. I play CTFs from Hackthebox, learn from some other materials. But what are the things which I should be doing which can be added up in my resume as Uni Student , when going to apply for a job I can be considered a promising candidate for the job. Certifications are kind of too expensive like OSCP, eJPT Can't get any intership? Or can I ? Cybersecurity Internship (Don't know they are relevant)? <!-- SC_ON --> submitted by /u/Us3r_blue (https://www.reddit.com/user/Us3r_blue)
[link] (https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/) [comments] (https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/)
https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/
<!-- SC_OFF -->I want to get into pentesting field and don't know how should I proceed to get there. I play CTFs from Hackthebox, learn from some other materials. But what are the things which I should be doing which can be added up in my resume as Uni Student , when going to apply for a job I can be considered a promising candidate for the job. Certifications are kind of too expensive like OSCP, eJPT Can't get any intership? Or can I ? Cybersecurity Internship (Don't know they are relevant)? <!-- SC_ON --> submitted by /u/Us3r_blue (https://www.reddit.com/user/Us3r_blue)
[link] (https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/) [comments] (https://www.reddit.com/r/Pentesting/comments/10n5g1z/need_advice_to_build_up_resume/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Anonymous internet browsing can have several positive benefits, including:
https://cdn-images-1.medium.com/max/1200/1*rKGGm2tnpM8TC90qs6Tb7g.png
Privacy: Anonymous browsing allows users to access the internet without revealing their identity or location, which can protect them from…
Continue reading on Medium »
Anonymous internet browsing can have several positive benefits, including:
https://cdn-images-1.medium.com/max/1200/1*rKGGm2tnpM8TC90qs6Tb7g.png
Privacy: Anonymous browsing allows users to access the internet without revealing their identity or location, which can protect them from…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The Top 6 Most Dangerous Malware Types
https://cdn-images-1.medium.com/max/2600/0*xgcAkyxqDELxRpGd.png
TL;DR- The most dangerous malware types out there are lurking in the shadows…
Continue reading on The Gray Area »
The Top 6 Most Dangerous Malware Types
https://cdn-images-1.medium.com/max/2600/0*xgcAkyxqDELxRpGd.png
TL;DR- The most dangerous malware types out there are lurking in the shadows…
Continue reading on The Gray Area »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Agent Sudo | TryHackMe
https://cdn-images-1.medium.com/max/1366/1*m3fWCzVivJPpjATRP0CWzg.png
We Started with Nmap Scan to know the open ports.
Continue reading on Medium »
Agent Sudo | TryHackMe
https://cdn-images-1.medium.com/max/1366/1*m3fWCzVivJPpjATRP0CWzg.png
We Started with Nmap Scan to know the open ports.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
No-Fly List Hacked by a Furry
https://cdn-images-1.medium.com/max/1280/0*wiBxBqn87wvTvLtH.jpg
I don’t suggest reading the source material unless you’re brain has melted already
Continue reading on Medium »
No-Fly List Hacked by a Furry
https://cdn-images-1.medium.com/max/1280/0*wiBxBqn87wvTvLtH.jpg
I don’t suggest reading the source material unless you’re brain has melted already
Continue reading on Medium »
XSS, Flash Cross-Domain Policy, and CSRF Vulnerabilities Discovered on a Single Website
Hello everyone, my name is Koroush, (aka whiteOwl). In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium »
Read more...
Hello everyone, my name is Koroush, (aka whiteOwl). In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium »
Read more...
XSS, Flash Cross-Domain Policy, and CSRF Vulnerabilities Discovered on a Single Website
https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5
https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5
Hello everyone, my name is Koroush, (aka whiteOwl).
In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium » (https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5)
In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium » (https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5)
Fintech bank app won’t respond to a really bad exploit
https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/
<!-- SC_OFF -->I found a bug in an iOS app of a financial institution! This bug is actually hilariously bad. Basically if you have a phone number you have that person credentials. No 2FA. It's literally driving me mad how this even happens. I'm talking this will give you SSN of the user EVERYTHING! This company I added Software engineers on Linkedln. Nothing ignored. I don't really know my next steps. I've done bug bounty a long time ago. This was stumbled on accident, and it's been over 2 weeks it's still works. This is pretty big "fintech bank" apps. What do I do should I just leave it, or disclose it publicly and watch the company burn to the ground like it should. <!-- SC_ON --> submitted by /u/Ehh8me (https://www.reddit.com/user/Ehh8me)
[link] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/) [comments] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/)
https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/
<!-- SC_OFF -->I found a bug in an iOS app of a financial institution! This bug is actually hilariously bad. Basically if you have a phone number you have that person credentials. No 2FA. It's literally driving me mad how this even happens. I'm talking this will give you SSN of the user EVERYTHING! This company I added Software engineers on Linkedln. Nothing ignored. I don't really know my next steps. I've done bug bounty a long time ago. This was stumbled on accident, and it's been over 2 weeks it's still works. This is pretty big "fintech bank" apps. What do I do should I just leave it, or disclose it publicly and watch the company burn to the ground like it should. <!-- SC_ON --> submitted by /u/Ehh8me (https://www.reddit.com/user/Ehh8me)
[link] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/) [comments] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/)
Security jobs for junior positions
https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/
<!-- SC_OFF -->Hi everybody, I'm trying to find some open roles in security positions. I'm not starting from the scratch, I will get a master degree in cybersecurity in 3 months, I've experience with coding, open source on Github, bug bounty, CTFs, 2 CVEs, eJPT... The problem is that 99% of the roles companies are looking for are for highly skilled / experienced people (senior, staff, VC, manager etc..). Where I can find junior positions? Are there companies looking for those roles? Thanks. (advices from experts are welcome :-) ) <!-- SC_ON --> submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/) [comments] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/)
https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/
<!-- SC_OFF -->Hi everybody, I'm trying to find some open roles in security positions. I'm not starting from the scratch, I will get a master degree in cybersecurity in 3 months, I've experience with coding, open source on Github, bug bounty, CTFs, 2 CVEs, eJPT... The problem is that 99% of the roles companies are looking for are for highly skilled / experienced people (senior, staff, VC, manager etc..). Where I can find junior positions? Are there companies looking for those roles? Thanks. (advices from experts are welcome :-) ) <!-- SC_ON --> submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/) [comments] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/)
Ödül Avcılığı — 403 Forbidden Bypass
https://medium.com/@el-cezeri/%C3%B6d%C3%BCl-avc%C4%B1l%C4%B1%C4%9F%C4%B1-403-forbidden-bypass-f8904345678?source=rss------bug_bounty-5
https://medium.com/@el-cezeri/%C3%B6d%C3%BCl-avc%C4%B1l%C4%B1%C4%9F%C4%B1-403-forbidden-bypass-f8904345678?source=rss------bug_bounty-5