Hacking on Medium
“Locked Out: How to Secure Your Data from Cyber Attacks”

In today’s digital age, protecting our data from cyber attacks is more important than ever. With the increasing number of online…

Continue reading on Medium »

Hacking on Medium
What is a Day Zero attack?

https://cdn-images-1.medium.com/max/1500/1*XvDlQDmLHQuTjpiMeaip2A.jpeg
Day Zero attacks are cyber attacks that exploit a vulnerability or flaw in a system or software before it is discovered or patched by the…

Continue reading on System Weakness »

Hacking on Medium
XML External Entity (XXE) — OWASP (Bahasa Indonesia)

https://cdn-images-1.medium.com/max/759/0*Hdasv-5RWlUdmgEh.png
Berawal dari mengerjakan soal web exploitation pada event picoCTF 2023 bersama tim Cyber Security IPB, saya menemukan kerentanan XXE atau…

Continue reading on Medium »

Hacking on Medium
The pass-the-hash attack explained

https://cdn-images-1.medium.com/max/1100/1*uPALFeYCRc5N5Nng8s94_A.jpeg
A “hash” is a mathematical representation of data, often used as a security measure to ensure that sensitive information, such as…

Continue reading on Medium »

Hacking on Medium
Building a Lightning-Fast Port Scanner: Techniques and Examples

Port scanners are widely used tools in network security testing to detect open ports on remote hosts. They work by sending packets to each…

Continue reading on Medium »

Hacking on Medium
How I Created My Own Virus Scanner: A Step-by-Step Guide

File signatures, also known as magic bytes or magic numbers, are unique sequences of bytes that identify the file type. Every file has a…

Continue reading on Medium »

Hacking on Medium
Steal My Direct to Consumer Sales Strategy

https://cdn-images-1.medium.com/max/640/1*466oaYDDk_EoQ-llcx3xmA.jpeg
Top 10 Benefits of Selling Directly to Consumers and How it Can Boost Your Bottom Line

Continue reading on Medium »

Hacking on Medium
HACK THE BOX — MetaTwo WALKTHROUGH

https://cdn-images-1.medium.com/max/700/0*oMzbZ8eDpsjT_fD6.png
In this write up we’re going to solve a box on hack the box called “MetaTwo”

Continue reading on Medium »

Hacking on Medium
Exploring Khazad Encryption: An In-Depth Look at Features, Strengths, and Weaknesses | 2023

https://cdn-images-1.medium.com/max/1366/1*RS3WylZRJRKOWPcFIAzCvg.png
A Comprehensive Guide to Khazad Encryption Algorithm | Karthikeyan Nagaraj

Continue reading on Medium »

hacking: security in practice
Why don't everyone use custom encryptions? It's easy to implement and impossible to break.

Except brute forcing the login panel of course but you can always limit login attempts.

An example for 'custom encryption' might be something I wrote for a school project when I was 14.

Algorithm was like this: 1. Get user's password as $passwd 2. Use MD5 encryption on $passwd 3. Substr and remove a certain amount of characters from MD5 string. 4. Use MD5 on that string twice more and remove 2 chars from the end. 5. Store the result string in the database as user's password

You can mix and match this however you'd like. You can even use the user's registration timestamp or username length as key while encrypting so it's not the same algorithm for every single user.

And do the same control when a user is logging in.

I can't be the only one who have thought of this. So why isn't this more common? It's basically unbreakable, and since there's a shit ton of websites/apps that are being hacked and release our one-time-encrypted passwords into the wild every single day, it just makes sense to me.

submitted by /u/33sikici33
[link] [comments]

hacking: security in practice
Hello hope you doing good Does hack the box offer a full free learning paths ?

if yes what learning path do you suggest for me ?I know how program using python and c#
i am familiar with 3 or 4 network protocols:)

submitted by /u/Mr_Jaber
[link] [comments]