Hacking on Medium
How can a developer stand out from the crowd?

As a developer, do you need to make use of some marketing to further your career? We are not some sort of salespeople, but we are great…

Continue reading on Medium »

Character Chaos: Looking Beyond CRLF Injections and Finding Similar Attack Vectors to Manipulate…
https://medium.com/@TheCrazyAcademic/character-chaos-looking-beyond-crlf-injections-and-finding-similar-attack-vectors-to-manipulate-715dcaa47a58?source=rss------bug_bounty-5

This research all began when I looked at a list of various ASCII characters in the standard and thought to my self “Could there be other…Continue reading on Medium » (https://medium.com/@TheCrazyAcademic/character-chaos-looking-beyond-crlf-injections-and-finding-similar-attack-vectors-to-manipulate-715dcaa47a58?source=rss------bug_bounty-5)

Character Chaos: Looking Beyond CRLF Injections and Finding Similar Attack Vectors to Manipulate…

This research all began when I looked at a list of various ASCII characters in the standard and thought to my self “Could there be other…Continue reading on Medium »
Read more...

hacking: security in practice
Character Chaos: Looking Beyond CRLF Injections To Find Similar Attack Vectors

https://link.medium.com/jowb4A9T9wb

In this article I discuss ways to potentially bypass CRLF checks in patches or other characters that could be exploited to do attacks just like it involving whitespace/new line related parsing tricks.

submitted by /u/TheCrazyAcademic
[link] [comments]

hacking: security in practice
Cybercrime is world’s third-largest economy thanks to booming black market

https://external-preview.redd.it/bAmYMLwEh8TazVKj7UQhBIGm58wuXwJooz1evGM3R2g.jpg?width=320&crop=smart&auto=webp&s=501192c549ccc8739bb7740570f3b9edbebe5867 submitted by /u/Mental_Character7367
[link] [comments]

hacking: security in practice
Hacking a Roku TV to Control Lights

submitted by /u/compuwar
[link] [comments]

hacking: security in practice
How to make a dead online game playable offline?

Is it possible to hack and bypass the login in a mobile game that had its servers shut down? If so how?

submitted by /u/namyu25
[link] [comments]

hacking: security in practice
HID Prox card hacking

Hey all,

I’m doing security research on RFID for a class assignment. My project idea centers on skimming and replaying RFID credentials used by my employer’s access control system (I have the necessary permission to do this), and I don’t have a lot of money to spend on the professional kits so ideally I’m trying to find inexpensive hardware, even just raw UART stuff you’d use for arduinos, if they exist. The cards we use are HID 125kHz proximity cards and as I understand most of the hobbyist readers aren’t compatible with HID cards, so what are my options? Will I have to get a reader from HID?

submitted by /u/ProfessionalDegen23
[link] [comments]

Linux Privilege Escalation: DirtyPipe (CVE 2022-0847)
https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/

submitted by /u/glum-platimium (https://www.reddit.com/user/glum-platimium)
[link] (https://www.codelivly.com/linux-privilege-escalation-dirtypipe/) [comments] (https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/)

Hacking on Medium
Cyber Weekly Newsletter

https://cdn-images-1.medium.com/max/600/1*q8yrtytrRysGGb2xp_LUpA.jpeg
The weekly Security, Tech and Cybercrime newsletter from Riskigy’s vCISO Cybersecurity team.
Cybersecurity awareness tips and alerts from…

Continue reading on Medium »