hacking: security in practice
bypass sqli keyword filter

Hi, There is a website that is vulnerable to sqli but it only accepts ( ،,._-%*+=÷:@؛- ) keywords and alphabet and numbers in post and get requests. I know there's a sqli bug but i have to get deeper so please help me to bypass this problem. It will be a good thing if there is something that I can use in sqlmap.

Thank you

submitted by /u/Born_SUS
[link] [comments]

hacking: security in practice
Flipper Zero

I've found the device to be really awesome and was wondering what other things are like it. can any old androids be modified to do similar things I'm no expert but would like something tactical that I can tap some buttons and it does most of it automatically

submitted by /u/universaleader
[link] [comments]

hacking: security in practice
In general, is it possible to deauth devices by means of a man in the middle attack coupled with a DoS attack?

Network is definitely being hacked, but don’t want to get into specifics because I’m not sure if keystrokes are being recorded. I’m a newb, so I hope this isn’t a stupid question, I am just trying to troubleshoot to figure out exactly what is going on by a process of elimination.

What’s occurring on the network matches both the symptoms of deauthing devices with a man in the middle attack and it also matches a DoS attack. Could these two things happen concurrently? I’m not sure if it’s both, maybe even at different times or if it can only be one or the other?

submitted by /u/ruffruffmeowmeowmeow
[link] [comments]

Hacking on Medium
Ethical Hacking Interview Questions

https://cdn-images-1.medium.com/max/800/1*DlaNt48Q_-_-LeoxhW75hg.jpeg
Ethical Hacking Interview Questions

Continue reading on Medium »

Hacking on Medium
IoT Hacks: Real-Life Examples of How Hackers are Targeting Connected Devices

https://cdn-images-1.medium.com/max/2600/0*U8Bts_kEtLIIU7gV
The Internet of Things (IoT) has revolutionized the way we live and work, connecting billions of devices to the internet.

Continue reading on Medium »

Hacking on Medium
Don’t get hacked!

https://cdn-images-1.medium.com/max/2600/0*yNmxW1mXtISsi8cz
A poem

Continue reading on Medium »

🚨 Docker Full Privilege Escalation (CVE-2022-25365): "Breaking Docker Named Pipes SYSTEMatically" 🚨
https://www.reddit.com/r/Pentesting/comments/10u7xnw/docker_full_privilege_escalation_cve202225365/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1) [comments] (https://www.reddit.com/r/Pentesting/comments/10u7xnw/docker_full_privilege_escalation_cve202225365/)

🔥 PipeViewer: A new tool for viewing Windows Named Pipes and searching for insecure permissions. 🔥
https://www.reddit.com/r/redteamsec/comments/10u7nco/pipeviewer_a_new_tool_for_viewing_windows_named/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://github.com/cyberark/PipeViewer) [comments] (https://www.reddit.com/r/redteamsec/comments/10u7nco/pipeviewer_a_new_tool_for_viewing_windows_named/)

🚨 Docker Full Privilege Escalation (CVE-2022-25365): "Breaking Docker Named Pipes SYSTEMatically" 🚨
https://www.reddit.com/r/redteamsec/comments/10u7u3c/docker_full_privilege_escalation_cve202225365/

submitted by /u/kubiscan (https://www.reddit.com/user/kubiscan)
[link] (https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1) [comments] (https://www.reddit.com/r/redteamsec/comments/10u7u3c/docker_full_privilege_escalation_cve202225365/)

How I Was Able to Takeover User Accounts via CSRF on an E-Commerce Website

We’ll discuss the topic of cross-site request forgery (CSRF) vulnerabilities and how it can lead to a one-click account takeContinue reading on Medium »
Read more...

https://external-preview.redd.it/txhDiGRgzo5X66hasvzcFZsx6OwM4MPliqJh7Ve5I-M.jpg?width=320&crop=smart&auto=webp&s=40d9c5f31638acaecaf8e22df09ca32347227707 Hello everybody!

I'm a software developer with tiny understanding in networks.

Few months ago I entered a gaming site which is called - slither.io which runs on http port 80.
Since then (after months) every time when I reset my laptop and then run the command "netstat" I see connection established to foreign address "slither:<high" sometimes its 19200 and sometimes its 49800 (but it's always high ports - not the first 1024 ones).


​

Whenever I run the command "netstat -ano" I can see the process (PID) that runs/is connected to this established connection - which is always something like 6620 or 7208 etc... when I got to the task manager under details, I see that it is always connected to mysqld.exe process (which is really installed on my computer for software development reasons).

Whenever I "end task" of this PID - the established connections are gone. but whenever I reset my laptop - the established connections to slither.io are back with different ports and different PID.

I tried to add slither.io into my hosts file in system/etc - and it really blocked it (and I cannot reach out to it through the browser or http request) but it is still keep on coming back and appearing in my netstat results screen. I wonder what kind of virus / trolling act could it be ?

Be glad to get some help how to remove those established connections to my laptop whenever I reset and open it.

​

​

netstat command

​

​

netstat -ano command (where i can see PID 7208)

​

​

MYSQLD.EXE PID 7208 connected to this established connection of slither.

submitted by /u/B73xIt4111
[link] [comments]