Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Installing Kali Linux: A Step-by-Step Guide
https://cdn-images-1.medium.com/max/2600/0*2Cj4_nmTrmUOPSM-
Kali Linux is a popular open-source operating system used by ethical hackers and penetration testers. Installing Kali Linux is not much…
Continue reading on Medium »
Installing Kali Linux: A Step-by-Step Guide
https://cdn-images-1.medium.com/max/2600/0*2Cj4_nmTrmUOPSM-
Kali Linux is a popular open-source operating system used by ethical hackers and penetration testers. Installing Kali Linux is not much…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe: Phishing Analysis Tools
https://cdn-images-1.medium.com/max/1267/1*xq0pZ8NRkW5SWuIQ_6QS3Q.jpeg
Please note: I am not going to post any flags from the TryHackMe (THM) platform on my walkthroughs. I feel I would be violating the…
Continue reading on Medium »
TryHackMe: Phishing Analysis Tools
https://cdn-images-1.medium.com/max/1267/1*xq0pZ8NRkW5SWuIQ_6QS3Q.jpeg
Please note: I am not going to post any flags from the TryHackMe (THM) platform on my walkthroughs. I feel I would be violating the…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
The popping history of XSS
https://cdn-images-1.medium.com/max/2600/1*3coUI8c54rvDSfiRtW3d0Q.png
Cross-Site Scripting (XSS) is a type of security vulnerability that has been around since the early days of the World Wide Web. XSS allows…
Continue reading on Medium »
The popping history of XSS
https://cdn-images-1.medium.com/max/2600/1*3coUI8c54rvDSfiRtW3d0Q.png
Cross-Site Scripting (XSS) is a type of security vulnerability that has been around since the early days of the World Wide Web. XSS allows…
Continue reading on Medium »
Reflected XSS on Target with tough WAF ( WAF Bypass )
I was doing web pentesting on a private program. The program had a very tough WAF even typing alert as a payload would block be blocked by…Continue reading on Medium »
Read more...
I was doing web pentesting on a private program. The program had a very tough WAF even typing alert as a payload would block be blocked by…Continue reading on Medium »
Read more...
How could I exploit OpenID "request object" with none algorithm ?
https://www.reddit.com/r/Pentesting/comments/10wsa12/how_could_i_exploit_openid_request_object_with/
https://www.reddit.com/r/Pentesting/comments/10wsa12/how_could_i_exploit_openid_request_object_with/
submitted by /u/tomatediabolik (https://www.reddit.com/user/tomatediabolik)
[link] (https://i.redd.it/k55ufv37nxga1.png) [comments] (https://www.reddit.com/r/Pentesting/comments/10wsa12/how_could_i_exploit_openid_request_object_with/)
[link] (https://i.redd.it/k55ufv37nxga1.png) [comments] (https://www.reddit.com/r/Pentesting/comments/10wsa12/how_could_i_exploit_openid_request_object_with/)
Prospective Employer sent me a Project
https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/
<!-- SC_OFF -->Hey guys, I recently interviewed for a junior PT position and was given a project to do at home to test my self-learning capabilities. I am completely out of my comfort zone as this project is beyond my skills at the moment, but I'm doing my best. If y'all don't mind, what steps should I take in testing a website once I have done basic reconnaissance? I did some vulnerability scanning and tinkered around with Burp but I'm coming up blank. Thank you! <!-- SC_ON --> submitted by /u/Yrsal (https://www.reddit.com/user/Yrsal)
[link] (https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/) [comments] (https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/)
https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/
<!-- SC_OFF -->Hey guys, I recently interviewed for a junior PT position and was given a project to do at home to test my self-learning capabilities. I am completely out of my comfort zone as this project is beyond my skills at the moment, but I'm doing my best. If y'all don't mind, what steps should I take in testing a website once I have done basic reconnaissance? I did some vulnerability scanning and tinkered around with Burp but I'm coming up blank. Thank you! <!-- SC_ON --> submitted by /u/Yrsal (https://www.reddit.com/user/Yrsal)
[link] (https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/) [comments] (https://www.reddit.com/r/Pentesting/comments/10wsqm7/prospective_employer_sent_me_a_project/)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
Why Some Cloud Services Vulnerabilities Are So Hard to Fix
Five months after AWS customers were alerted about three vulnerabilities, nearly none had plugged the holes. The reasons why underline a need for change.
Why Some Cloud Services Vulnerabilities Are So Hard to Fix
Five months after AWS customers were alerted about three vulnerabilities, nearly none had plugged the holes. The reasons why underline a need for change.
Darkdump2 - Search The Deep Web Straight From Your Terminal
http://www.kitploit.com/2023/02/darkdump2-search-deep-web-straight-from.html
http://www.kitploit.com/2023/02/darkdump2-search-deep-web-straight-from.html