Hacking Articles Tips Tricks Videos Tutorials

如果你不知道什麼是 XSS（Cross-site Scripting），簡單來說就是駭客可以在你的網站上面執行 JavaScript 的程式碼。既然可以執行，那就有可能可以把使用者的 token 偷走，假造使用者的身份登入，就算偷不走…

防止 XSS 可能比想像中困難

17 viewsedited 09:57

14 views09:57

如果你不知道什麼是 XSS（Cross-site Scripting），簡單來說就是駭客可以在你的網站上面執行 JavaScript 的程式碼。既然可以執行，那就有可能可以把使用者的 token 偷走，假造使用者的身份登入，就算偷不走…Continue reading on cymetrics » (https://medium.com/cymetrics/prevent-xss-might-be-harder-than-you-thought-ce8c422540b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

防止 XSS 可能比想像中困難

10 viewsedited 09:57

How did I choose cybersecurity as a career and how am I working on it?
https://bhairutribrid.medium.com/how-did-i-choose-cybersecurity-as-a-career-and-how-am-i-working-on-it-bad82118e8dc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How did I choose cybersecurity as a career and how am I working on it?

A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.

9 viewsedited 09:58

9 views09:58

A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.Continue reading on Medium » (https://bhairutribrid.medium.com/how-did-i-choose-cybersecurity-as-a-career-and-how-am-i-working-on-it-bad82118e8dc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How did I choose cybersecurity as a career and how am I working on it?

A page from the storybook of my life where I chose to be an ethical hacker instead of a software developer.

11 viewsedited 09:58

9 views10:18

Someone i know claims a damning text they sent me was done so by a...

hacking: security in practice
Someone i know claims a damning text they sent me was done so by a hacker. Is this case possible?

I need some advise from people who are more familiar with hacking phones and text messages.

Someone sent me a text message earlier this week which is potentially relationship ending. I assume it was sent by mistake, but they are claiming someone else maliciously sent this text to me by hacking their phone somehow. Before completely dismissing this as a possibility, I wanted to verify if this was actually possible or not.

Initially, I sent them a text message, and then received the text in question a couple of minutes later. The text was in response to what I sent them, so the hacker would have needed to be able to monitor our conversation in real time. I'm not too familiar with SMS spoofing apps and tools, but this doesn't sound like something that is possible with typical consumer applications. I might be wrong but from what I can tell SMS spoofers aren't able to see saved conversations and incoming texts. They are just able to send text messages on behalf of another person. Additionally, this text was sent in the same conversation as all of their other legitimate texts. I'm not sure if SMS differentiates spoofed texts from legitimate numbers.

Please let me know if this sounds like something that could realistically occur. I'm kind of in the dark as to what actually happened here, so I'm not even sure if this was a case of SMS spoofing. It could have been done by some other method I'm not aware of. Or it could have just been a mistake or someone else physically sending it from their phone. Any thoughts on this would be appreciated.

submitted by /u/GeeksOasis
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I need some advise from people who are more familiar with hacking phones and text messages. Someone sent me a text message earlier this week...

9 viewsedited 10:18

Enabling Oracle SSL/TLS Authentication

hacking: security in practice
Enabling Oracle SSL/TLS Authentication

https://external-preview.redd.it/dPYksMEB_xjuvnrp_tbpBC81XL--LqGOyRvKHb8BSTU.jpg?width=320&crop=smart&auto=webp&s=fc685f593531685af0519840d1391eae640293f0 submitted by /u/damienbrookss
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Posted in r/hacking by u/damienbrookss • 1 point and 0 comments

11 viewsedited 10:18

11 views10:54

12 views10:54

Hacking on Medium
Metasploit

https://cdn-images-1.medium.com/max/600/0*Bi1efg7W5uTbriX0.png
Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.

Continue reading on hack WINDOWS »

___________________________
@hacking_Attack
@Hacking_Video

Learn to use Metasploit, a tool to probe and exploit vulnerabilities on networks and servers.

Metasploit

11 viewsedited 10:54

Hacking on Medium
TryHackMe | Vulnet-Internal

A room on TryHackMe created by TheCyb3rW0lf featuring various services to exploit.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

TryHackMe | Vulnet-Internal

A room on TryHackMe created by TheCyb3rW0lf featuring various services to exploit.

12 viewsedited 10:54

13 views10:54

Hacking on Medium
What is Cyber Security?

https://cdn-images-1.medium.com/max/2600/0*P244BjD3SwJTN0AN
Info safety and security defends the stability and also personal privacy of information, both in storing as well as en route.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Info safety and security defends the stability and also personal privacy of information, both in storing as well as en route.

What is Cyber Security?

14 viewsedited 10:54

KitPloit - PenTest & Hacking Tools

Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain The Result Reliability With Increased Threads
http://www.kitploit.com/2021/05/httpx-fast-and-multi-purpose-http.html

___________________________
@hacking_Attack
@Hacking_Video

Httpx - A Fast And Multi-Purpose HTTP Toolkit Allows To Run Multiple Probers Using Retryablehttp Library, It Is Designed To Maintain…

14 viewsedited 12:39

15 views12:39

GitHub - projectdiscovery/httpx: httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp…

From Github
▶ git clone https://github.com/projectdiscovery/httpx.git; cd httpx/cmd/httpx; go build; mv httpx /usr/local/bin/; httpx -version
Usage
httpx -h This will display help for the tool. Here are all the switches it supports. Flag Description Example H Custom Header input httpx -H 'x-bug-bounty: hacker' follow-redirects Follow URL redirects (default false) httpx -follow-redirects follow-host-redirects Follow URL redirects only on same host(default false) httpx -follow-host-redirects http-proxy URL of the proxy server httpx -http-proxy hxxp://proxy-host:80 l File containing HOST/URLs/CIDR to process httpx -l hosts.txt no-color Disable colors in the output. httpx -no-color o File to save output result (optional) httpx -o output.txt json Prints all the probes in JSON format (default false) httpx -json vhost Probes to detect vhost from list of subdomains httpx -vhost threads Number of threads (default 50) httpx -threads 100 http2 HTTP2 probing httpx -http2 pipeline HTTP1.1 Pipeline (https://www.kitploit.com/search/label/Pipeline) probing httpx -pipeline ports Ports ranges to probe (nmap syntax: eg 1,2-10,11) httpx -ports 80,443,100-200 title Prints title of page if available httpx -title path Request path/file httpx -path /api paths Request list of paths from file httpx -paths paths.txt content-length Prints content length in the output httpx -content-length ml Match content length in the output httpx -content-length -ml 125 fl Filter content length in the output httpx -content-length -fl 0,43 status-code Prints status code in the output httpx -status-code mc Match status code in the output httpx -status-code -mc 200,302 fc Filter status code in the output httpx -status-code -fc 404,500 tech-detect Perform wappalyzer based technology detection httpx -tech-detect tls-probe Send HTTP probes on the extracted TLS domains httpx -tls-probe tls-grab Perform TLS data grabbing httpx -tls-grab content-type Prints content-type httpx -content-type location Prints location header httpx -location csp-probe Send HTTP probes on the extracted CSP domains httpx -csp-probe web-server Prints running web sever if available httpx -web-server sr Store responses to file (default false) httpx -sr srd Directory to store response (optional) httpx -srd httpx-output unsafe Send raw requests skipping golang normalization httpx -unsafe request File containing raw request to process httpx -request retries Number of retries httpx -retries random-agent Use randomly selected HTTP User-Agent header value httpx -random-agent silent Prints only results in the output httpx -silent stats Prints statistic every 5 seconds httpx -stats timeout Timeout in seconds (default 5) httpx -timeout 10 verbose Verbose Mode httpx -verbose version Prints current version of the httpx httpx -version x Request Method (default 'GET') httpx -x HEAD method Output requested method httpx -method response-time Output the response time httpx -response-time response-in-json Include response in stdout (only works with -json) httpx -response-in-json websocket Prints if a websocket (https://www.kitploit.com/search/label/WebSocket) is exposed httpx -websocket ip Prints the host IP httpx -ip cname Prints the cname record if available httpx -cname cdn Check if domain's ip belongs to known CDN httpx -cdn filter-string Filter results based on filtered string httpx -filter-string XXX match-string Filter results based on matched string httpx -match-string XXX filter-regex Filter results based on filtered regex httpx -filter-regex XXX match-regex Filter results based on matched regex httpx -match-regex XXX

___________________________
@hacking_Attack
@Hacking_Video

GitHub

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. - projectdiscovery/httpx

13 viewsedited 12:39