hacking: security in practice
Find ip adress.

I hope this is the right subredd for this. So a peace of human garbege wrote to my gf on fb asking her were are doughter goes to kindergarden and the he "hopes he meets her soon". It was a private account and probebly a fake one. But is there anyway to find the ip adress? So I can maybe findout who it is and to let him know what happens to peaces of shit.

Thanks in advance.

submitted by /u/Difficult-Ad-1575
[link] [comments]

hacking: security in practice
Are they trying to hack me?

I don't think this post is against the rules since I haven't actually been hacked yet and I still have access to my account.

My PSN account has two factor authentication enabled and I have just received 6 different authentication codes to sign into my account. I am not trying to sign in and I haven't given my login details to anyone else so I know for sure someone is trying to gain access and whoever they are they already have my email and password.

I'm more concerned by the fact that they keep trying to sign in even though they keep getting stuck at the two factor page. This makes me think they might also have my email login and they are trying to spam me until I reset my password so they can receive the link, reset it and lock me out my account.

What should be my course of action? My email doesn't show any signs of suspicious login or activity but I'm a little hesitant because they seem to be very persistent. (Received another two authentication codes as a write this). Is it worth changing my password since they can't login anyway and my email and password combination are unique for only my PSN (so they can't password spray)? Should I wait for the notifications to stop just in case they are waiting for a reset link?

Thanks in advance

submitted by /u/TysonNitro
[link] [comments]

hacking: security in practice
Collection #1

I'm trying to solve an internet mystery, and that means getting a hold of an old email from 2006. I found out yesterday that the password was leaked in Collection #1, but I have no idea how to access the Collection #1 leaks. (I found one site that had them, but a membership costs several thousand dollars, which is money I can't afford to spend right now.) Is there a way to access the leaked passwords without spending an arm and a leg (and not having my credit card stolen)?

(I apologize if I sound kinda stupid, it's just that technology is not my strong point.)

submitted by /u/_spooktoon_
[link] [comments]

hacking: security in practice
Google dorks legality

Very stupid question: if I accessed a printer with google dorks and the print something would that be illegal?

submitted by /u/PutYourNameHereNow
[link] [comments]

Hacking on Medium
AntiSec — Ethernaut CoinFlip

https://cdn-images-1.medium.com/max/1618/1*gIHol5VN82waQ9kEAKP-Uw.png
Exploiting the randomness of CoinFlip contract from Ethernaut CTF

Continue reading on Medium »

Hacking on Medium
The Alarming Rise of 33 Malware Techniques

https://cdn-images-1.medium.com/max/600/1*KjrK9mA_AVSgsOplVX_Wow.png
The techniques used by advanced stealers are constantly evolving and new ones are being developed every day. It aims to steal sensitive…

Continue reading on Medium »

Hacking on Medium
How AI and Blockchain are Transforming the Hacking Landscape

https://cdn-images-1.medium.com/max/1920/1*v7E06CMdr0tnq3TRvBHYkQ.jpeg
Blockchain and artificial intelligence (AI) are two of the most revolutionary technologies in use today.
While AI has the potential to…

Continue reading on Medium »

Easy Account Takeover on dell subdomain
https://medium.com/@2os5/easy-account-takeover-on-dell-subdomain-6297460741fd?source=rss------bug_bounty-5

السلام عليكم ورحمة الله وبركاتهContinue reading on Medium » (https://medium.com/@2os5/easy-account-takeover-on-dell-subdomain-6297460741fd?source=rss------bug_bounty-5)

Easy Account Takeover on dell subdomain

السلام عليكم ورحمة الله وبركاتهContinue reading on Medium »
Read more...

hacking: security in practice
Significance to “Not Set CSP” While Checking For XSS Vulnerabilities With XSpear?

I’ve been testing out XSpear (used for finding XSS vulnerabilities) lately and a typical potential vulnerability that it shows is “Not Set CSP”. What does this mean and is there anything that can be done with it?

submitted by /u/Training_Finance6716
[link] [comments]

XSSHunter website being shutdown | Setup script attached
https://www.reddit.com/r/Pentesting/comments/10urjz7/xsshunter_website_being_shutdown_setup_script/

<!-- SC_OFF -->Saw a post from the creator that the website is being shut down. Found this cool medium article that seems to be the easiest way to set it up. Got mine setup pretty quickly from it
https://infosecwriteups.com/easy-xsshunter-express-setup-script-d5a66039f7b6?sk=52394aa4a2d66779ffcaeaf7cab63af9 <!-- SC_ON --> submitted by /u/stoigeboiii (https://www.reddit.com/user/stoigeboiii)
[link] (https://www.reddit.com/r/Pentesting/comments/10urjz7/xsshunter_website_being_shutdown_setup_script/) [comments] (https://www.reddit.com/r/Pentesting/comments/10urjz7/xsshunter_website_being_shutdown_setup_script/)

Hacking on Medium
Chainalysis: “North Korean Hackers Stole Nearly $2 Billion In 2022”

https://cdn-images-1.medium.com/max/1000/0*2tqePSG6YXfLa0ma.jpg
In 2022, North Korean hackers stole a staggering $1.7 billion of cryptocurrency — quadrupling the country’s prior record for crypto theft…

Continue reading on Medium »