Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Discussion: Are we entering the golden age of hacking, where software written by language models that "looks correct" to the lazy human operator is used despite being full of vulnerabilities?
Assisted by large language model code generators, people will "write" software they don't understand, and deploy it.
If so, can you provide examples in the wild?
If not, why not?
submitted by /u/BUGFIX-66
[link] [comments]
Discussion: Are we entering the golden age of hacking, where software written by language models that "looks correct" to the lazy human operator is used despite being full of vulnerabilities?
Assisted by large language model code generators, people will "write" software they don't understand, and deploy it.
If so, can you provide examples in the wild?
If not, why not?
submitted by /u/BUGFIX-66
[link] [comments]
Top 10 cybersecurity tools for bug bounty hunters :
Bug bounty hunters use various cybersecurity tools to find vulnerabilities and bugs in software systems. Here are the top 10 cybersecurity…Continue reading on Medium »
Read more...
Bug bounty hunters use various cybersecurity tools to find vulnerabilities and bugs in software systems. Here are the top 10 cybersecurity…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tryhackme -SteelMountain (CTF)
https://cdn-images-1.medium.com/max/700/1*aLgfxELwVK0ZEkMWx_ewqQ.png
Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilize powershell for Windows privilege escalation …
Continue reading on Medium »
Tryhackme -SteelMountain (CTF)
https://cdn-images-1.medium.com/max/700/1*aLgfxELwVK0ZEkMWx_ewqQ.png
Hack into a Mr. Robot themed Windows machine. Use metasploit for initial access, utilize powershell for Windows privilege escalation …
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tryhackme — HackPark(CTF)
https://cdn-images-1.medium.com/max/600/1*YKmdMGvMxyT9RxweVSyy3g.png
Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine!
Continue reading on Medium »
Tryhackme — HackPark(CTF)
https://cdn-images-1.medium.com/max/600/1*YKmdMGvMxyT9RxweVSyy3g.png
Bruteforce a websites login with Hydra, identify and use a public exploit then escalate your privileges on this Windows machine!
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Defend the Web Writeup — Intro 11 : Inspect the Source Code
https://cdn-images-1.medium.com/max/1640/1*I2Xv5gsLrASe2owQZws-XQ.png
In this writeup, I will share my experience of solving a JavaScript CTF challenge by analyzing the source code. By carefully examining the…
Continue reading on Medium »
Defend the Web Writeup — Intro 11 : Inspect the Source Code
https://cdn-images-1.medium.com/max/1640/1*I2Xv5gsLrASe2owQZws-XQ.png
In this writeup, I will share my experience of solving a JavaScript CTF challenge by analyzing the source code. By carefully examining the…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Tryhackme GoldenEye Ctf ( walkthrough)
https://cdn-images-1.medium.com/max/700/1*HQA8oV6AyNMZUYbCGIhxGQ.png
This Ctf Involves Brute-Forcing , Enumiration ,Privillage escalation & Exploiting services .
Continue reading on Medium »
Tryhackme GoldenEye Ctf ( walkthrough)
https://cdn-images-1.medium.com/max/700/1*HQA8oV6AyNMZUYbCGIhxGQ.png
This Ctf Involves Brute-Forcing , Enumiration ,Privillage escalation & Exploiting services .
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
SkyTower Walkthrough
https://cdn-images-1.medium.com/max/1347/0*oy123PiSNtDcdJ4D
An interesting boot to root machine, especially designed for building hackers’ mindset rather than learning the usage of automated tools.
Continue reading on Medium »
SkyTower Walkthrough
https://cdn-images-1.medium.com/max/1347/0*oy123PiSNtDcdJ4D
An interesting boot to root machine, especially designed for building hackers’ mindset rather than learning the usage of automated tools.
Continue reading on Medium »
Hacking on Medium
THM Netsec-Challenge (write up)
https://cdn-images-1.medium.com/max/706/1*3OCXo8a071XAv633ry9PIw.png
Today we are Doing the Nmap Netsec Challenge
Continue reading on Medium »
THM Netsec-Challenge (write up)
https://cdn-images-1.medium.com/max/706/1*3OCXo8a071XAv633ry9PIw.png
Today we are Doing the Nmap Netsec Challenge
Continue reading on Medium »
Medium
THM Netsec-Challenge (write up)
Today we are Doing the Nmap Netsec Challenge
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
isc2.org MFA Bypass Report
Hello All,
I discovered a MFA bypass on (ISC)2's (org behind the CISSP certification) website a few months ago and wanted to share here.
I reported the issue to (ISC)2, and they did fix it, but the issue existed for several months. The issue was caused by a misconfiguration when they changed SSO providers from Okta to Salesforce Identity.
The issue was that you could register SMS as a MFA method in the login flow, bypassing all other registered MFA methods.
If you had the person's password, and they hadn't already registered SMS, then you could bypass the registered MFA method (ie authenticator app code) by entering ANY phone number and registering that phone number as an additional MFA method.
Read my full report here: isc2.org Website MFA Bypass Vulnerability - Blog - GRC Academy
Here is the link to the demonstration video: https://www.youtube.com/watch?v=CPB2GFgQ0j4
After I published my report, I did get some coverage from Brian Krebs and Infosecurity Magazine!
I asked (ISC)2 if they would provide recognition for me, CPEs, or anything else, and they said NO...
The process from submission to trying to get media coverage was quite interesting! I'm happy to answer questions!
Have a great rest of the week!
Jacob Hill | https://www.linkedin.com/in/jacobrhill/
submitted by /u/Unified-Rogue-Agent
[link] [comments]
isc2.org MFA Bypass Report
Hello All,
I discovered a MFA bypass on (ISC)2's (org behind the CISSP certification) website a few months ago and wanted to share here.
I reported the issue to (ISC)2, and they did fix it, but the issue existed for several months. The issue was caused by a misconfiguration when they changed SSO providers from Okta to Salesforce Identity.
The issue was that you could register SMS as a MFA method in the login flow, bypassing all other registered MFA methods.
If you had the person's password, and they hadn't already registered SMS, then you could bypass the registered MFA method (ie authenticator app code) by entering ANY phone number and registering that phone number as an additional MFA method.
Read my full report here: isc2.org Website MFA Bypass Vulnerability - Blog - GRC Academy
Here is the link to the demonstration video: https://www.youtube.com/watch?v=CPB2GFgQ0j4
After I published my report, I did get some coverage from Brian Krebs and Infosecurity Magazine!
I asked (ISC)2 if they would provide recognition for me, CPEs, or anything else, and they said NO...
The process from submission to trying to get media coverage was quite interesting! I'm happy to answer questions!
Have a great rest of the week!
Jacob Hill | https://www.linkedin.com/in/jacobrhill/
submitted by /u/Unified-Rogue-Agent
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
breached.vc alternatives?
with breached.vc being down where can i find leaked passwords to practize analyzing for patterns (to make bruteforce dehashing faster )
submitted by /u/someone13121425
[link] [comments]
breached.vc alternatives?
with breached.vc being down where can i find leaked passwords to practize analyzing for patterns (to make bruteforce dehashing faster )
submitted by /u/someone13121425
[link] [comments]