Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
hack the box or tryhackme
I've used THM for a while just wondering what everyone elses opinions on the two are and which they think is best?
submitted by /u/MaxProton
[link] [comments]
hack the box or tryhackme
I've used THM for a while just wondering what everyone elses opinions on the two are and which they think is best?
submitted by /u/MaxProton
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Any software cracking gurus available for hire?
We use an OLD auto posting software in our sales business, have been using it since 2006 or so, which has primarily become obsolete to most, but still a golden nugget for our day-to-day sales. Well the licensing server has recently gone offline (been unsupported for years, and assume it was pre-paid by the software owner who finally just let it die off)
Well since the licensing server has gone offline, the software owner has gone MIA, but the only thing stopping us is this licensing callback the software does to verify authenticity. We have ALL of the original software files, just need some expert eyes to help pinpoint the roadblock/call backs.
We would be willing to pay someone to dig into it, see if there is a solution to our problem, and bypass this licensing call. We have tried everything in our power to reach out to the owners of the software, but they're long gone.
PM for more detail
submitted by /u/CryptoDir
[link] [comments]
Any software cracking gurus available for hire?
We use an OLD auto posting software in our sales business, have been using it since 2006 or so, which has primarily become obsolete to most, but still a golden nugget for our day-to-day sales. Well the licensing server has recently gone offline (been unsupported for years, and assume it was pre-paid by the software owner who finally just let it die off)
Well since the licensing server has gone offline, the software owner has gone MIA, but the only thing stopping us is this licensing callback the software does to verify authenticity. We have ALL of the original software files, just need some expert eyes to help pinpoint the roadblock/call backs.
We would be willing to pay someone to dig into it, see if there is a solution to our problem, and bypass this licensing call. We have tried everything in our power to reach out to the owners of the software, but they're long gone.
PM for more detail
submitted by /u/CryptoDir
[link] [comments]
11 Expert Tips to Succeed in Bug Bounty
My last, first article, published here after years of silent reading, received such a positive response I decided to create a more…Continue reading on Medium »
Read more...
My last, first article, published here after years of silent reading, received such a positive response I decided to create a more…Continue reading on Medium »
Read more...
11 Expert Tips to Succeed in Bug Bounty
https://medium.com/@ReidAJ/11-expert-tips-to-succeed-in-bug-bounty-3193652c99f4?source=rss------bug_bounty-5
https://medium.com/@ReidAJ/11-expert-tips-to-succeed-in-bug-bounty-3193652c99f4?source=rss------bug_bounty-5
My last, first article, published here after years of silent reading, received such a positive response I decided to create a more…Continue reading on Medium » (https://medium.com/@ReidAJ/11-expert-tips-to-succeed-in-bug-bounty-3193652c99f4?source=rss------bug_bounty-5)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
11 Expert Tips to Succeed in Bug Bounty
https://cdn-images-1.medium.com/max/773/1*I4PW3cOeC7HjJtJYOFUhtw.jpeg
My last, first article, published here after years of silent reading, received such a positive response I decided to create a more…
Continue reading on Medium »
11 Expert Tips to Succeed in Bug Bounty
https://cdn-images-1.medium.com/max/773/1*I4PW3cOeC7HjJtJYOFUhtw.jpeg
My last, first article, published here after years of silent reading, received such a positive response I decided to create a more…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Damn Vulnerable DeFi Challenges : #7 Compromised
https://cdn-images-1.medium.com/max/2000/1*GIu4-1eOnQgWWBjJoAD52A.png
Damn Vulnerable DeFi is a serie of CTF games where the player must find a vulnerability to break or steal a protocol.These educational…
Continue reading on Medium »
Damn Vulnerable DeFi Challenges : #7 Compromised
https://cdn-images-1.medium.com/max/2000/1*GIu4-1eOnQgWWBjJoAD52A.png
Damn Vulnerable DeFi is a serie of CTF games where the player must find a vulnerability to break or steal a protocol.These educational…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
WordPress Login Flooder (DDoS) python script I used on a client to test Fastly VCL misconfig
Recently, I was pentesting a client site and discovered they had a misconfig'd Fastly VCL. As such, it allowed spoofing, which meant all access logging in BigQuery and GCP log viewer were nearly irrelevant as you couldn't trust whether or not it listed true origin IP.
To simulate the need to fix this issue, I wrote a simple Python script for spoofing with a DDoS. Unlike most "DDoS" scripts you'll find in a repo (which don't utilize zombies and therefore only sends requests from your own machine, aka just a DoS), I included mine to cycle through various proxies for obfuscation.
If the client hadn't corrected the VCL config, they were susceptible to a potential unstoppable DDoS, as they had no rate-limiting enabled nor could have discovered the true IP if it were spoofed.
Nevertheless, check the script on GitHub and feel free to submit PRs or fork and use it for your own legal purposes.
submitted by /u/n4bb
[link] [comments]
WordPress Login Flooder (DDoS) python script I used on a client to test Fastly VCL misconfig
Recently, I was pentesting a client site and discovered they had a misconfig'd Fastly VCL. As such, it allowed spoofing, which meant all access logging in BigQuery and GCP log viewer were nearly irrelevant as you couldn't trust whether or not it listed true origin IP.
To simulate the need to fix this issue, I wrote a simple Python script for spoofing with a DDoS. Unlike most "DDoS" scripts you'll find in a repo (which don't utilize zombies and therefore only sends requests from your own machine, aka just a DoS), I included mine to cycle through various proxies for obfuscation.
If the client hadn't corrected the VCL config, they were susceptible to a potential unstoppable DDoS, as they had no rate-limiting enabled nor could have discovered the true IP if it were spoofed.
Nevertheless, check the script on GitHub and feel free to submit PRs or fork and use it for your own legal purposes.
submitted by /u/n4bb
[link] [comments]