Hacking on Medium
Learn Hackings

there are many legitimate ways to learn and practice ethical hacking skills. Here are a few suggestions

Continue reading on Medium »

Hacking on Medium
Leaving no trace behind, the “magic” dd command!

https://cdn-images-1.medium.com/max/2600/0*yTuZTwT1efR5gJy1
“dd = disk destroyer?” Just proceed with caution.

Continue reading on System Weakness »

Change Any User Data on NFT Marketplace crosea.io

Kali ini saya mau share bagaimana cara saya menemukan sebuah bug pada NFT Marketplace crosea.io. Pertama selalu saya tegaskan pekerjaan…Continue reading on Medium »
Read more...

hacking: security in practice
JWT Authentication

I am trying to get more information about JWT Authentication in Node.js. I am having trouble finding the vulnerabilities, as I have not yet had a ton of experience with JSON or JavaScript, but a link a friend sent me caught my eye. Of course, I have googled, but it still hasn't clicked in my mind. Why/how is it vulnerable? Example: Say I have credentials to a site that uses JWT Auth and sets the cookie as the JWT. Is there an inherent issue with this? My first guess would be MITM but I'm not sure if that applies.

Again, I am fairly new to this, so any help would be appreciated!

submitted by /u/USIntrepid
[link] [comments]

hacking: security in practice
New Bitcoin DoS (P2P tcp/8333)

https://external-preview.redd.it/fKgoK7sNpNUTa0ODtesR1uqcvHcpThRI_vW8XF0bSNo.jpg?width=108&crop=smart&auto=webp&s=bb553b04f25f99fdc4515a9aaf9c3a37b35950ca submitted by /u/endless
[link] [comments]

Hacking on Medium
Easy Way To PrintNightmare CVE-2021–34527 PoC

https://cdn-images-1.medium.com/max/1456/0*Bq6VyRmYQXZERE8y
The print spooler service is started as the system account which is the highest account in windows that you can take over. You will trick…

Continue reading on Medium »

Hacking on Medium
Using ‘CUPP’ tool by Mebus to Generate Customized Wordlists.

https://cdn-images-1.medium.com/max/2600/0*pVzD89rBGNZ1XVwW
Attempting to generate a customized wordlist based on the details of a target using the ‘Common User Password Profiler’ Tool aka CUFF…

Continue reading on Medium »

hacking: security in practice
Free Training and Swag

https://external-preview.redd.it/b25cx2Om7boguMKmhx9W-4amuVGeBqzuvzqBByl_e4M.jpg?width=108&crop=smart&auto=webp&s=4cafa620f37d8c22eb9c6d370e3e026d8f179a1c submitted by /u/Awkward_Expression64
[link] [comments]

hacking: security in practice
New kali and hacking videos

https://external-preview.redd.it/0zEjDv6dBeROS9IniNFJixVyN2WtgHxDgYI2sBTLaDY.jpg?width=640&crop=smart&auto=webp&s=a3fbb338989b5a17a3da9bc85cf7e2471cc56571 Hey everybody I just wanted to share with you some of my work My buymeacoffee page has everything on it from my videos to my python scripts I have written

submitted by /u/West-Hippo-535
[link] [comments]

hacking: security in practice
Safe free PGP encryptor

Does anybody know what free software I can safely use? I’m not sure what is currently available, I know the old one everyone used to used has been taken down.

submitted by /u/wealthychef369
[link] [comments]

Command Injection: A Silent Killer of Your System

Command injection is a type of cyber attack where an attacker injects malicious code into a command that’s executed by a system. This can…Continue reading on Medium »
Read more...

Stripe’s Two-Factor Authentication (2FA) Bypass
https://infosecwriteups.com/stripes-two-factor-authentication-2fa-bypass-3765344cc272?source=rss------bug_bounty-5