SummaryContinue reading on Medium » (https://shahjerry33.medium.com/lfi-an-interesting-tweak-9c5638dbdd1b?source=rss------bug_bounty-5)

Calling Bug Bounty Hunters

Oasys объединяется с Immunefi, ведущей bug bounty платформой.Continue reading on Medium »
Read more...

Facebook Creator Studio Misconfiguration $$$$

Hello fellow researchers, my name is Abdul Rehman Parkar, and I work at IZYITS.Continue reading on Medium »
Read more...

Bypassing Character Limit — XSS Using Spanned Payload
https://infosecwriteups.com/bypassing-character-limit-xss-using-spanned-payload-7301ffac226e?source=rss------bug_bounty-5

Hello, I am Syed Mushfik Hasan Tahsin aka SMHTahsin33, an 18 Y/O Cyber Security Enthusiast from Bangladesh. I am into Infosec due to…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/bypassing-character-limit-xss-using-spanned-payload-7301ffac226e?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
How Do Attackers Hijack Old Domains and Subdomains?

Here is a cautionary tale of what happens if side-projects or sections of the website becomes obsolete. If you don't remove them, someone might hijack your subdomain.

Immunefi PoC Templates
https://medium.com/immunefi/immunefi-poc-templates-4345f098ac69?source=rss------bug_bounty-5

IntroductionContinue reading on Immunefi » (https://medium.com/immunefi/immunefi-poc-templates-4345f098ac69?source=rss------bug_bounty-5)

CovertVPN in Cobalt Strike refusing to connect to VPN interface
https://www.reddit.com/r/redteamsec/comments/11sdq4y/covertvpn_in_cobalt_strike_refusing_to_connect_to/

<!-- SC_OFF -->I have gone through both aggressor scripts and the GUI to create a VPN interface, I also then assigned it an IP address within the subnet of the network I am trying to access. frustratingly whenever I try to connect to the interface for a VPN connection, Cobalt Strike refuses. When I go through the GUI, I attempt to pivot through a VPN connection but the interface doesn't even show up in the dialog box that pops up when the VPN connection makes you choose an interface. I then went the aggressor script route, the interface clearly exists after issuing an ifconfig command but still, the script returns an error saying something to the effect of " is null" which I checked and all of the variables are being passed into the bcovertvpn() function without any blanks, I am getting very frustrated with this and would like an explanation as to why CS keeps giving me issues with this particular feature? <!-- SC_ON --> submitted by /u/baronobeefdip2 (https://www.reddit.com/user/baronobeefdip2)
[link] (https://www.reddit.com/r/redteamsec/comments/11sdq4y/covertvpn_in_cobalt_strike_refusing_to_connect_to/) [comments] (https://www.reddit.com/r/redteamsec/comments/11sdq4y/covertvpn_in_cobalt_strike_refusing_to_connect_to/)

Hacking on Medium
2023 — New Cyber ERA (What India Has Done Till Now)

https://cdn-images-1.medium.com/max/620/0*y9ucp4rFoDX_4SPH.jpg
The year 2023 marks the beginning of a new era in cyber security. As technology advances, the threat landscape evolves, and cyber attacks…

Continue reading on Medium »

Hacking on Medium
The Art of Cyber Espionage and Its Role in Global Power

https://cdn-images-1.medium.com/max/1280/0*VQVNHbhYaSJcj_wW.jpg
In the contemporary interconnected realm, the act of cyber espionage has transformed into a formidable instrument in the arsenal of…

Continue reading on Medium »

Hacking on Medium
Bitcoin account hijacking using OSINT techniques

https://cdn-images-1.medium.com/max/2600/0*6z_2Ieo9AzLix6a-
Researchers at Kudelski Security have managed to break Bitcoin and Ethereum wallets using a novel attack against one of the most popular…

Continue reading on System Weakness »

hacking: security in practice
Business benefits of incorporating an IAM solution offering biometric authentication

https://external-preview.redd.it/Eaq-MzKxlX4cnT1pe7nVUAviO_EVl_74Ht8fOwuYT-U.jpg?width=640&crop=smart&auto=webp&s=45793a8114e4f63245669dbb116eff59ab4b764a submitted by /u/Express_Garage9682
[link] [comments]

hacking: security in practice
my friend found videos of herself online but has no idea how they got out

if there is a subreddit more appropriate to ask for advice i would really appreciate being redirected

i need some advice about how to retrack the person who posted these videos. my friend had gotten a message sent to her from one of her friends who she trusts that sent her an explicit video she found of her online. her friend does only fans, and reverse searches her tag online to find if her content has been reposted so she can take it down. she found herself posted on an explicit website, and found my friend posted by this account as well. the video is real, and my friend knows it exists only on her boyfriends phone and trusts that he had not sent this video to anyone or uploaded it anywhere, and i believe this as well. the account it was posted from has posted other girls of our same (fetishized) race who live in our city. she feels like this was a personal attack and that it is someone local from our city somehow hacking people they know. my question is what possibilities are there as to how someone else could have gotten this access and is there a way they can be tracked? like if we got police involved or hired someone to do a tracking job would it be possible?

submitted by /u/sorbean
[link] [comments]