Hacking on Medium
How much is your dev team spending on GPT-4?

https://cdn-images-1.medium.com/max/612/1*cPt-4Pk8Jayo_LHK0MeUoA.jpeg
When OpenAI released GPT-4 a couple of weeks ago now, AI developers were still scrambling to transition from the completion model…

Continue reading on Medium »

Hacking on Medium
CTI Flash Briefing: CrowdStrike Tracking Active Intrusion Campaign Targeting 3CX Customers

https://cdn-images-1.medium.com/max/700/0*phtT9eNc5b0oRi42.png
Breakdown: Anyone using the softphone application 3CXDesktopApp from 3CX needs to monitor for any type of anomalous activity on their…

Continue reading on Hunter Strategy »

Hacking on Medium
Phishing Scams

Phishing is a type of online scam in which attackers create a fake website or email that looks like it is from a legitimate source in…

Continue reading on Medium »

Hacking on Medium
How CryptCard Prevents Hacking

https://cdn-images-1.medium.com/max/1920/0*GA1KxokmEATe2BQA.jpg
Reports of cryptocurrency platforms getting hacked are becoming far too regular.

Continue reading on Medium »

https://preview.redd.it/c11lsa2txrqa1.jpg?width=640&crop=smart&auto=webp&s=5251a672adaec74235c31ea91a73a91bb57bb048 submitted by /u/Dinervc_HDD
[link] [comments]

hacking: security in practice
List of common vulnerabilities?

I've been getting a bit further into some hacking, and I've found learning about the different common vulnerabilities like XSS, SQLi, SSTI, buffer overflows, command injection, etc. and what makes them work super fun, are there any good resources you reccomend as a decently thorough "field guide" for what they are, how they can be exploited, what you can do with them, how you can identify them, etc?

submitted by /u/TheMightyFlyingSloth
[link] [comments]

Bug Bounty Hakkında Bilmeniz Gerekenler!

Merhaba arkadaşlar derlemiş olduğum bu makale de sizlere soru cevap olarak gerekli tüm bilgileri vereceğim.Continue reading on Medium »
Read more...

Hacking on Medium
NoName CTF Write-Up

https://cdn-images-1.medium.com/max/862/1*-aNloT-tQ0IL99FUCIpfMQ.png
A solid CTF box incorporating encoding, steganography, and a little linux privesc know-how

Continue reading on Medium »

Hacking on Medium
Bug Bounty Hakkında Bilmeniz Gerekenler!

https://cdn-images-1.medium.com/max/1200/1*Mn0S16Tf5l-LfSRObxq0Bw.png
Merhaba arkadaşlar derlemiş olduğum bu makale de sizlere soru cevap olarak gerekli tüm bilgileri vereceğim.

Continue reading on Medium »

Hacking on Medium
USB ile Veri Çalma

https://cdn-images-1.medium.com/max/639/0*p_EUpJ9BAOFx4e1Z.png
Merhaba arkadaşlar elimden geldiğince sizlere yardımcı olacağına inandığım bir konu ile karşınızdayım.

Continue reading on Medium »

The Time I Found My Bug: A Beginner’s Story

As a beginner in the field of web security, I had always heard about people finding bugs in websites and being rewarded for it. I was…Continue reading on Medium »
Read more...

hacking: security in practice
Clarification on bug bounties

Do sites like bug crowd or Hackerone only take 0 days?

I've been getting back into cyber sec for the last few years and have found several known CVEs in the wild (no 0days). I have approached all the people affected by these directly and they either all ignore me or tell me they dont care. In every case this has happened.
Once I even found full read write access in a database that contained medical information , dox and surgery pictures online.
This medical DB was in another country from my own.
The people who owned the box, the people who owned the medical clinic, the forigen governments intel and cyber sec agency all gave me 100% radio silence .
I eventually contacted CERT of the US, they apparently dealt with the issue and I got nothing out of it .

Some general guidance on what I should do when I find non 0 day CVE would be appreciated.

submitted by /u/zeekertron
[link] [comments]

Dark Reading: Attacks/Breaches
Spera Takes Aim at Identity Security Posture Management

ISPM is a combination of identity attack surface management, and risk reduction, as well as identity threat prevention, detection, and response.