Hacking on Medium
HackMyVm: WMessage

https://cdn-images-1.medium.com/max/910/1*GbrY7P0SFA_vN23uTiulbA.png
Today we are going to take a look at WMessage on HackMyVm: https://hackmyvm.eu/machines/machine.php?vm=WMessage

Continue reading on Medium »

Hacking on Medium
Steal My Simple Marketing Plan

https://cdn-images-1.medium.com/max/640/1*ECpbV3P3q9GFxYMYH412bA.jpeg
Your Super Simple Fast Start Marketing Plan

Continue reading on Medium »

Hacking on Medium
The Dark

https://cdn-images-1.medium.com/max/700/0*cXVisgGi5LKy6kyt
Explore the darknet with these clickable onion v3 addresses!

Continue reading on Medium »

Hacking on Medium
What is SQL Injection and How Does it Work

https://cdn-images-1.medium.com/max/971/1*35Ll5tLjDfgltIRgVzG9Cg.jpeg
SQL Injection is a web hacking technique of inserting SQL commands in user-supplied data fields of web applications and submitting them…

Continue reading on InfoSec Write-ups »

Hacking on Medium
TryHackMe: Burp Suite: Basics — Walkthrough

https://cdn-images-1.medium.com/max/875/0*mJHzwgbI_7ey9QlZ.png
Room URL: https://tryhackme.com/room/burpsuitebasics

Continue reading on Medium »

Hacking on Medium
Poolz Hack Description

https://cdn-images-1.medium.com/max/1638/1*JyDO8DpMo1feKlI5w0Z8JA.jpeg
Ironblocks detection system was tracking @Poolz_ protocol hack and was notified in real-time when the hack began. The hacker was able to…

Continue reading on Medium »

hacking: security in practice
Using Hydra against a website with a domain?

I am doing a hacker101 ctf challenge where the website looks something along the lines of https://2a9039bb6bed24d639d897044b7bbfe9.ctf.hacker101.com/. The challenge is titled petshop pro. At some point of the challenge, I have to bruteforce a web form. My normal method of using Hydra on ctf challenges does not work because I have to mention an IP address for it to work. My normal method of usage would look something like this:

hydra -l Elliot -P fsocity.dic 10.10.250.126 http-post-form "/wp-login.php:log=^USER^+&pwd=^PASS^&rememberme=forever&wp-submit=Log+In&redirect_to=http%3A%2F%2F10.10.250.126%2Fwp-admin%2F&testcookie=1:F=ERROR" -V

I tried using dig on the domain but can't seem to find the IP address. For some reason, previous writeup for this challenge have IP addresses to work with. Is there any way I could use Hydra with a domain name and without an IP address?

submitted by /u/Super_Tsumu
[link] [comments]

hacking: security in practice
Two U.S. Men Charged in 2022 Hacking of DEA Portal

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Bypassing Character Limit — XSS Using Spanned Payload

Hello, I am Syed Mushfik Hasan Tahsin aka SMHTahsin33, an 18 Y/O Cyber Security Enthusiast from Bangladesh. I am into Infosec due to…Continue reading on InfoSec Write-ups »
Read more...

Reconnaissance tools that every pen tester and bug bunty hunter should know.
https://medium.com/geekculture/reconnaissance-tools-that-every-pen-tester-and-bug-bunty-hunter-should-know-18c02717d786?source=rss------bug_bounty-5