PENTEST TALES: Smuggling Blind XSS through an Admin Portal’s front door

“The User-Agent is your best friend!”Continue reading on Medium »
Read more...

PayloadsAllTheThings: A Comprehensive Resource for Security Researchers and Bug Bounty Hunters

In today’s digital age, staying vigilant and protecting your online presence from potential cyber threats is crucial.Continue reading on Medium »
Read more...

Hacking on Medium
Top 10 Free hacking books to Read in 2023

1. Hacking: The Art of Exploitation by Jon Erickson

Continue reading on Medium »

Hacking on Medium
Understanding Salsa20 Encryption: A Comprehensive Guide | 2023

https://cdn-images-1.medium.com/max/1366/1*WafSaxjbZ_fy3HqHAHu6ow.png
Exploring the Key Features, Strengths, and Weaknesses of Salsa20 Encryption | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
The 15 Most Interesting Ways To Use Raspberry Pi

https://cdn-images-1.medium.com/max/1500/1*va0qe7ruTKfYrnDZFFQLRQ.png
Most people have at least heard of the Raspberry Pi, even if they haven’t delved into the nitty gritty details about it. The Pi is a…

Continue reading on Medium »

Hacking on Medium
Installing API Pentesting Tools to attack our crAPI API

https://cdn-images-1.medium.com/max/867/1*Yqo_bkRIQWSy63_6l4Jd8A.png
In our last article we installed crAPI vulnerable API and in this one we will start installing tools that are essentials for API…

Continue reading on Medium »

Hacking on Medium
Top 6 Ways To Prevent Cross-Site Request Forgery (CSRF) Attacks On A Developed Website

https://cdn-images-1.medium.com/max/2600/1*oINHs75Ju4oL6W9HsnxdIQ.png
6 Essential Measures to Secure Your Developed Website Against CSRF Attacks

Continue reading on Medium »

hacking: security in practice
It is a good idea to create software that is a ransomware?

I don't know if here is the best place to ask but I think since my idea is to create ransomware it may be worth asking here.

So, I had this idea where I create something like a pomodoro timer but with a ransomware. My idea it's to lock the system for a certain period and then automatically unlock it, I might add an option to avoid encrypting certain apps or files, but I don't know if it is a good idea.

I just wanted to create something for myself but I wanted to also share the code on GitHub so I don't if it's a good idea since everyone can access the code maybe I could be responsible if something wrong happens...

submitted by /u/Plus_Cardiologist540
[link] [comments]

hacking: security in practice
Pompompurin of BreachedForum raided by FBI

A megathread to discuss

https://storage.courtlistener.com/recap/gov.uscourts.nysd.595805/gov.uscourts.nysd.595805.1.0.pdf

https://breached.vc/Thread-Important-Announcement-Pompompurin

https://news.bloomberglaw.com/privacy-and-data-security/dark-web-breachforums-operator-charged-with-computer-crime

https://www.bleepingcomputer.com/news/security/alleged-breachforums-owner-pompompurin-arrested-on-cybercrime-charges/

https://krebsonsecurity.com/2023/03/feds-charge-ny-man-as-breachforums-boss-pompompurin/

https://twitter.com/_IntelligenceX/status/1610302930069889024?t=3twbDYma3kOEd9mLpmejGg&s=19

submitted by /u/DrinkMoreCodeMore
[link] [comments]

hacking: security in practice
any sites for practicing?

hello I'm searching for a site to practice different attacks on. Because one site for one attack is really annoying

submitted by /u/brendanvds2007
[link] [comments]

hacking: security in practice
Wordlists in specific languages

Hello. Using Hashcat I tried to crack a very simple password. As a wordlist I used rockyou.txt from Kali Linux. This list is supposed to have millions of passwords. The entire action took around 12 hours (my machine is on my personal laptop, not very good in HW resources) and in the end was not able to crack the password. The trick was that the password was the equivalent of "Password123" in my native language. Now my question...where can I find wordlists with commonly used passwords, but in different languages that English. I imagine that a wordlist like rockyou.txt has some passwords used in French, German or Spanish. But what about other languages, that are not that well known, yet have very skilled IT specialists, like Romanian, Polish, Czech and so on? They might use common words, but in their language, wich means nothing for a English or German speaker. I think that could come in handy...so any tips where I can find such wordlist? Thanks!

submitted by /u/ImGyba
[link] [comments]

Facebook Creator Studio Misconfiguration $$$$
https://medium.com/@abdulparkar9554/facebook-creator-studio-misconfiguration-348b0ee38c31?source=rss------bug_bounty-5