hacking: security in practice
How to make a dead online game playable offline?

Is it possible to hack and bypass the login in a mobile game that had its servers shut down? If so how?

submitted by /u/namyu25
[link] [comments]

hacking: security in practice
HID Prox card hacking

Hey all,

I’m doing security research on RFID for a class assignment. My project idea centers on skimming and replaying RFID credentials used by my employer’s access control system (I have the necessary permission to do this), and I don’t have a lot of money to spend on the professional kits so ideally I’m trying to find inexpensive hardware, even just raw UART stuff you’d use for arduinos, if they exist. The cards we use are HID 125kHz proximity cards and as I understand most of the hobbyist readers aren’t compatible with HID cards, so what are my options? Will I have to get a reader from HID?

submitted by /u/ProfessionalDegen23
[link] [comments]

Linux Privilege Escalation: DirtyPipe (CVE 2022-0847)
https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/

submitted by /u/glum-platimium (https://www.reddit.com/user/glum-platimium)
[link] (https://www.codelivly.com/linux-privilege-escalation-dirtypipe/) [comments] (https://www.reddit.com/r/Pentesting/comments/10u0cc3/linux_privilege_escalation_dirtypipe_cve_20220847/)

Hacking on Medium
Cyber Weekly Newsletter

https://cdn-images-1.medium.com/max/600/1*q8yrtytrRysGGb2xp_LUpA.jpeg
The weekly Security, Tech and Cybercrime newsletter from Riskigy’s vCISO Cybersecurity team.
Cybersecurity awareness tips and alerts from…

Continue reading on Medium »

Hacking on Medium
Character Chaos: Looking Beyond CRLF Injections and Finding Similar Attack Vectors to Manipulate…

https://cdn-images-1.medium.com/max/849/1*EKpe1by8lpf4p9Ux6otTHg.png
This research all began when I looked at a list of various ASCII characters in the standard and thought to my self “Could there be other…

Continue reading on Medium »

Hacking on Medium
Hackers stole a record $3.8 billion worth of Crypto in 2022

https://cdn-images-1.medium.com/max/1920/1*d9t0ky1waiVZx_srSg65DA.jpeg
Will the hacks ever stop?

Continue reading on Coinmonks »

hacking: security in practice
bypass sqli keyword filter

Hi, There is a website that is vulnerable to sqli but it only accepts ( ،,._-%*+=÷:@؛- ) keywords and alphabet and numbers in post and get requests. I know there's a sqli bug but i have to get deeper so please help me to bypass this problem. It will be a good thing if there is something that I can use in sqlmap.

Thank you

submitted by /u/Born_SUS
[link] [comments]

hacking: security in practice
Flipper Zero

I've found the device to be really awesome and was wondering what other things are like it. can any old androids be modified to do similar things I'm no expert but would like something tactical that I can tap some buttons and it does most of it automatically

submitted by /u/universaleader
[link] [comments]

hacking: security in practice
In general, is it possible to deauth devices by means of a man in the middle attack coupled with a DoS attack?

Network is definitely being hacked, but don’t want to get into specifics because I’m not sure if keystrokes are being recorded. I’m a newb, so I hope this isn’t a stupid question, I am just trying to troubleshoot to figure out exactly what is going on by a process of elimination.

What’s occurring on the network matches both the symptoms of deauthing devices with a man in the middle attack and it also matches a DoS attack. Could these two things happen concurrently? I’m not sure if it’s both, maybe even at different times or if it can only be one or the other?

submitted by /u/ruffruffmeowmeowmeow
[link] [comments]

Hacking on Medium
Ethical Hacking Interview Questions

https://cdn-images-1.medium.com/max/800/1*DlaNt48Q_-_-LeoxhW75hg.jpeg
Ethical Hacking Interview Questions

Continue reading on Medium »