hacking: security in practice
Setting you up for failure: Exploring 2FA bypasses in web app settings pages functionality

https://link.medium.com/HegWKfSi3w

In this story I discuss how you can find bugs just like this on other web applications not just Facebook. If you enjoyed the story hit that follow button for more.

submitted by /u/TheCrazyAcademic
[link] [comments]

hacking: security in practice
what can ya do with a hacked printer? (jetdirect? port 9100 vuln)

my friend that owns a coffee shop asked me to poke around on his network to look for vulnerabilities in exchange for some free coffees and i saw that they had 9100 open, wasn't familiar with it so played around and found out about PRET which gave me access to his HP printer, with transversal you can gain access to the file system etc and from what i read you can open a root shell on another port, would the scope be limited to the printer, or can the printer be used as a vector to gain access to other systems connecting to said printer?

​

tldr im not familar with printers and found a vuln, what do, i like my free cup-a-joes while writing my dnd campaigns.

submitted by /u/werewolfpajamas
[link] [comments]

hacking: security in practice
Pirating

Hey y'all I'm running a little low on cash right now so I'm trying to turn to the best source of cash I can right now so if anyone wants anything pirated Right now send me a message I'll get it pirated for you give me like the specifications of what you want pirated and I'll get it for you depending on what it is the the price will change I'm going to keep it as cheap as I can shoot me a message if you're interested

submitted by /u/Fsociety621
[link] [comments]

hacking: security in practice
Exploiting WordPress site with no vulnerable plugins

Hi, I'm doing a CTF on a WordPress site but WPscan shows no vulnerable plugins/themes. I have one username and wp-login page, but I'm told that brute-forcing is not required for this box. There aren't any weird directories found via enumeration, and robots.txt only contains a line on wp-admin/admin-ajax.php.

In my experience with exploiting WordPress, usually finding something vulnerable in WPscan shows me which way to go, but now I'm stumped. Does anyone have any ideas, or is this a red herring?

submitted by /u/Slayre77
[link] [comments]

Hacking on Medium
BurpSuite Add all subdomains to scope

https://cdn-images-1.medium.com/max/1098/1*iYTHBv9-l4bvdc4fi40KZA.png
If the target is TARGET.COM then do the following to update all subdomains to scope:

Continue reading on Medium »

Hacking on Medium
Don’t Overreact Walkthrough | HackTheBox

https://cdn-images-1.medium.com/max/703/1*InVltw00fpTkKOtiw-GRxw.png
Challenge name : Don’t Overreact

Continue reading on Medium »

Hacking on Medium
How to Build a Port Scanner In Python

https://cdn-images-1.medium.com/max/2048/0*XNvKM1tpEwB74rSt.jpg
TL;DR- A guide on creating a simple port scanner in Python which can be modified to your needs depending on the complexity of the network.

Continue reading on The Gray Area »

Hacking on Medium
RootMe | Try Hack Me

https://cdn-images-1.medium.com/max/1043/1*b0CbRh2WRSd9lFsKBVphzA.png
Before we dive into the box lets talk about the website that hosts it. The website tryhackme.com is devoted to educating the hacker…

Continue reading on Medium »

Hacking on Medium
SIM Cloning 101: The Basics and Beyond

https://cdn-images-1.medium.com/max/728/1*zuizTt_EBfVEFU962X9uJg.jpeg
SIM cloning is the process of creating a duplicate copy of a subscriber identity module (SIM) card. This is usually done by copying the…

Continue reading on Medium »

Hacking on Medium
Learn web3/smart-contract Hacking in 2023 step by step guide

https://cdn-images-1.medium.com/max/2600/0*TtUfbaA_vWZV_-v2
If you are a beginner in web3 security space and want to learn from start. Then I have compiled a step by step guide for 2023 version :-

Continue reading on Medium »

Hacking on Medium
Tips for Becoming a Proficient Bug Bounty Hunter

https://cdn-images-1.medium.com/max/600/1*fkhuU-5-m5GDOpQBLgVlWg.jpeg
How to Become a Bug Bounty Hunter

Continue reading on Medium »