hacking: security in practice
Character Chaos: Looking Beyond CRLF Injections To Find Similar Attack Vectors

https://link.medium.com/jowb4A9T9wb

In this article I discuss ways to potentially bypass CRLF checks in patches or other characters that could be exploited to do attacks just like it involving whitespace/new line related parsing tricks.

submitted by /u/TheCrazyAcademic
[link] [comments]

hacking: security in practice
Cybercrime is world’s third-largest economy thanks to booming black market

https://external-preview.redd.it/bAmYMLwEh8TazVKj7UQhBIGm58wuXwJooz1evGM3R2g.jpg?width=320&crop=smart&auto=webp&s=501192c549ccc8739bb7740570f3b9edbebe5867 submitted by /u/Mental_Character7367
[link] [comments]

hacking: security in practice
Hacking a Roku TV to Control Lights

submitted by /u/compuwar
[link] [comments]

hacking: security in practice
How to make a dead online game playable offline?

Is it possible to hack and bypass the login in a mobile game that had its servers shut down? If so how?

submitted by /u/namyu25
[link] [comments]

hacking: security in practice
HID Prox card hacking

Hey all,

I’m doing security research on RFID for a class assignment. My project idea centers on skimming and replaying RFID credentials used by my employer’s access control system (I have the necessary permission to do this), and I don’t have a lot of money to spend on the professional kits so ideally I’m trying to find inexpensive hardware, even just raw UART stuff you’d use for arduinos, if they exist. The cards we use are HID 125kHz proximity cards and as I understand most of the hobbyist readers aren’t compatible with HID cards, so what are my options? Will I have to get a reader from HID?

submitted by /u/ProfessionalDegen23
[link] [comments]

Linux Privilege Escalation: DirtyPipe (CVE 2022-0847)
https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/

submitted by /u/glum-platimium (https://www.reddit.com/user/glum-platimium)
[link] (https://www.codelivly.com/linux-privilege-escalation-dirtypipe/) [comments] (https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/)

Hacking on Medium
Cyber Weekly Newsletter

https://cdn-images-1.medium.com/max/600/1*q8yrtytrRysGGb2xp_LUpA.jpeg
The weekly Security, Tech and Cybercrime newsletter from Riskigy’s vCISO Cybersecurity team.
Cybersecurity awareness tips and alerts from…

Continue reading on Medium »

Hacking on Medium
Character Chaos: Looking Beyond CRLF Injections and Finding Similar Attack Vectors to Manipulate…

https://cdn-images-1.medium.com/max/849/1*EKpe1by8lpf4p9Ux6otTHg.png
This research all began when I looked at a list of various ASCII characters in the standard and thought to my self “Could there be other…

Continue reading on Medium »

Hacking on Medium
Hackers stole a record $3.8 billion worth of Crypto in 2022

https://cdn-images-1.medium.com/max/1920/1*d9t0ky1waiVZx_srSg65DA.jpeg
Will the hacks ever stop?

Continue reading on Coinmonks »

hacking: security in practice
bypass sqli keyword filter

Hi, There is a website that is vulnerable to sqli but it only accepts ( ،,._-%*+=÷:@؛- ) keywords and alphabet and numbers in post and get requests. I know there's a sqli bug but i have to get deeper so please help me to bypass this problem. It will be a good thing if there is something that I can use in sqlmap.

Thank you

submitted by /u/Born_SUS
[link] [comments]