Hacking on Medium
BlueKeep in details

The BlueKeep vulnerability is a security vulnerability that affects Microsoft Windows 7 and Windows Server 2008 R2 operating systems.

Continue reading on InfoSec Write-ups »

Hacking on Medium
previse (hackthebox) writeup

https://cdn-images-1.medium.com/max/695/1*DNBojsdouYltQcEKeQ70_g.png

Nmap reveals two ports for us, 22 and 80 (both TCP). Port 22 is quickly dealt with, ‘ssh anonymoys@<ip’ does not work.
Continue reading on Medium »

Hacking on Medium
Code Injection via Python Sandbox Escape — how I got a shell inside a network.

https://cdn-images-1.medium.com/max/763/1*ckmwgiL6EwKlm7NaJbib2w.png
Hi Everyone,

Continue reading on Medium »

Hacking on Medium
Article of the Day: New Hacker Group Dark Pink

https://cdn-images-1.medium.com/max/758/1*SYPS6v3SdCCQqN0Y_MK-dw.jpeg
Dark Pink, a newly discovered hacking campaign, threatens Southeast Asian military, government organizations — CyberScoop, AJ Vicens…

Continue reading on Hybrid Analyst »

Hacking on Medium
Android Penetration Tryz — Part 1

https://cdn-images-1.medium.com/max/1366/1*Gl4XA_SwspIUhqaykoK1Gg.jpeg
Android penetration testing efforts in action

Continue reading on InfoSec Write-ups »

Hacking on Medium
What happened when I decided to write down 10 ideas a day?

https://cdn-images-1.medium.com/max/640/1*ldVN45vNlxCTCY2CixeuwA.jpeg
What happened when I decided to write down 10 ideas a day?

Continue reading on Medium »

The Right Time for a Bug Bounty and Security Team

Starting a bug bounty program and hiring a security team are important steps for companies to take to ensure the security and…Continue reading on InfoSec Write-ups »
Read more...

Hi guys, I'm having some trouble figuring out how to restructure the part of my resume that showcases my knowledge. If anyone has any pointers, I'd appreciate the help!
https://www.reddit.com/r/Pentesting/comments/10w8p1z/hi_guys_im_having_some_trouble_figuring_out_how/

submitted by /u/coffeecakeordeath (https://www.reddit.com/user/coffeecakeordeath)
[link] (https://i.redd.it/ckg0m53l4tga1.png) [comments] (https://www.reddit.com/r/Pentesting/comments/10w8p1z/hi_guys_im_having_some_trouble_figuring_out_how/)

Preferred C2 Framework and Why?
https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/

<!-- SC_OFF -->Hey gang!, completely opinion-based post. What is YOUR preferred C2 of Choice on an engagement? I'm currently going through the CRTO and getting some hands on experience with Cobalt Strike, which is fantastic for learning the terminology and opsec craft, but I'd like to hear what everyone else is using out there. Thanks a bunch! <!-- SC_ON --> submitted by /u/Sir_Scrubs_Alot (https://www.reddit.com/user/Sir_Scrubs_Alot)
[link] (https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/) [comments] (https://www.reddit.com/r/Pentesting/comments/10w98aq/preferred_c2_framework_and_why/)

“FREE 350+ Tryhackme Rooms”
https://medium.com/@samantabanti056/free-350-tryhackme-rooms-4f44cfdf640b?source=rss------bug_bounty-5

Hey Guys, I am banti samanta, a Security Researcher and a Bug Bounty Hunter. In this blog, I will be sharing a list of 350+ Free Tryhackme…Continue reading on Medium » (https://medium.com/@samantabanti056/free-350-tryhackme-rooms-4f44cfdf640b?source=rss------bug_bounty-5)

Bypassing API Restrictions for Fun and Profit
https://arnavtripathy98.medium.com/bypassing-api-restrictions-for-fun-and-profit-c9ab746b67be?source=rss------bug_bounty-5

Recently, I downloaded and started testing an application locally which provided dashboard access along with rest API endpoints for it’s…Continue reading on Medium » (https://arnavtripathy98.medium.com/bypassing-api-restrictions-for-fun-and-profit-c9ab746b67be?source=rss------bug_bounty-5)

Reveal the Cloud with Google Dorks
https://infosecwriteups.com/uncover-hidden-gems-in-the-cloud-with-google-dorks-8621e56a329d?source=rss------bug_bounty-5

Find sensitive data in Amazon AWS, Google Cloud, and moreContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/uncover-hidden-gems-in-the-cloud-with-google-dorks-8621e56a329d?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
New Banking Trojan Targeting 100M Pix Payment Platform Accounts

New malware demonstrates how threat actors are pivoting toward payment platform attacks, researchers say.