hacking: security in practice
Ransomware in Golang

I built a simple ransomware in Golang. It generates a key then save it in a file then encrypts all the files using the key that was saved. The decrypted file gets the key from the file and then decrypts the encrypted files.

https://github.com/amr8644/Automation-in-Golang/tree/master/Encrypt-Decrypt

submitted by /u/Little-Peanut-765
[link] [comments]

hacking: security in practice
Exploiting admin_ajax.php

Hello I am doing a CTF and have found this in website source code:
/*
var vulnerable = {

"ajax_url": "/wp-admin/admin-ajax.php",

"nonce": "34dff435f4",

"home_url": "/",

how can i go about exploiting it, ideally getting rce

submitted by /u/therebyRut865
[link] [comments]

How I Got Free Travel on Namma Metro
https://infosecwriteups.com/how-i-got-free-travel-on-namma-metro-75066fabc5a0?source=rss------bug_bounty-5

As someone who uses public transportation regularly, I rely on it to get me where I need to go quickly and efficiently. That’s why I was…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-got-free-travel-on-namma-metro-75066fabc5a0?source=rss------bug_bounty-5)

BurpSuite is a powerful web application security testing tool that is widely used by cybersecurity…

In this article, we’ll walk through a step-by-step process for using BurpSuite to find vulnerabilities in a website.Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Leveraging Behavioral Analysis to Catch Living-Off-the-Land Attacks

Attackers are increasingly staying under the radar by using your own tools against you. Only behavioral AI can catch these stealthy attacks.

Hacking on Medium
Unlocking the Mysteries of Quantum Entanglement: The Promising Future of Unhackable Communication…

One fine day, I was casually going through the OpenAI bot, ChatGPT and at first glance, I noticed the few prompt questions on top of the…

Continue reading on Medium »

Hacking on Medium
Can We Hack Your WordPress Site?

https://cdn-images-1.medium.com/max/1500/1*t-rG8RcbkZ9fCt38iFvyyw.jpeg
There are several tools available for scanning WordPress websites for vulnerabilities. Here are some of the most common ones:

Continue reading on Medium »

Hacking on Medium
BurpSuite is a powerful web application security testing tool that is widely used by cybersecurity…

https://cdn-images-1.medium.com/max/1453/1*y8ie2w4V5JMIbYB2FEN3fg@2x.jpeg
In this article, we’ll walk through a step-by-step process for using BurpSuite to find vulnerabilities in a website.

Continue reading on Medium »

Hacking on Medium
Flash Loan Attack on Euler Finance Results in $200 Million Loss: Examining the Vulnerabilities of…

https://cdn-images-1.medium.com/max/768/1*YwNucDfR3GdlNfY24RYdaA.jpeg
On March 13, 2023, Euler Finance, a permissionless borrowing and lending protocol on Ethereum, fell victim to a flash loan attack that…

Continue reading on Medium »