OWASP Top 10: 1-Injection

IntroductionsContinue reading on InfoSec Write-ups »
Read more...

Apple Bug bounty writeups XSS(2021)

About me:
Read more...

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials
Baserunner : A Tool For Exploring Firebase Datastores

Baserunner is atool for exploring and exploiting Firebase datastores. See this post on our blog for an overview of how Firebase works and why we developed this tool. Set Up git clone https://github.com/iosiro/baserunner.gitcd baserunnernpm installnpm run buildnpm startGo to http://localhost:3000 in your browser. Usage The Baserunner interface looks like this: First, use the configuration textbox to load […]

The post Baserunner : A Tool For Exploring Firebase Datastores appeared first on Kali Linux Tutorials.

___________________________
@hacking_Attack
@Hacking_Video

All about Information disclosure

What is Information disclosure ?
Read more...

Not Applicable: Homograph Attack via Whatsapp Status

The IDN (Internationalized Domain Name): https://fаcebook.com/is a homograph for the Latin https://xn--fcebook-2fg.com/.
While putting a…
Read more...

hacking: security in practice
Pm me

Before you comment hating on this , I’m trying to do a good thing pm me for the story and/or if you interested in helping. I’ve tried almost everything and am stressed,please find it in your heart to help me

submitted by /u/dcn011
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
A friend of mine is being targeted by a hacker/hackers, she got a new phone and changed the passwords but there still in. What can she do?

I’ve only learned of the situation today, she told me its been going on for a few months. To my knowledge there is no reason for her to be a target, she doesn’t know anything she shouldn’t, she doesn’t offend people and shes not rich. The hacker/hackers are in her emails, and her boyfriends email that was on her phone, her amazon, and created an iCloud account in her name and attached it to her device. Her firestick/tv is also hacked, i don’t know the specifics on this as i was mainly questioning about the phone.

With my knowledge of hacking/computer security i told her its best to just ask google/yahoo/icloud to terminate the accounts and trash the devices. As in my head thats the only quick and easy option. But she feels as though it will drive her insane if she does not find out who and why there doing it. Information on the accounts and her devices is being shuffled around and deleted and undeleted.

To what I’ve seen on tv and movies it sounds as though shes a targeted individual. Ive never bought into that being a thing till now.

Also she has already secured her banks.

Is there anything she can do to stop this?

submitted by /u/idontknowwhattoasnam
[link] [comments]

hacking: security in practice
My macbook is hacked remotely. Problem persists despite wiping my hard disk in 2018.

It was in 2018, I downloaded a pirated software and soon my laptop would become very slow (I suspect it was hacked for crypto mining) so then I deleted everything and formatted my laptop. This process was utterly troublesome because some of the steps I followed on Apple troubleshooting didn’t work. I believe the hacker did already some damage to the system. After 20+ attempts, I had successfully wiped out my laptop but weird abnormalities I discovered:

* My laptop is incredibly laggy when I try to login at start up
* Some texts I write, gets completely wiped out sometimes
* Just today, I was writing a comment on YouTube, and as it got posted, a very suspicious ‘Well done:)’ was written at the very beginning of my comment. I wrote who are you? In Text Edit and my YouTube account name was changed to ‘Le Lu’. I refreshed my page, everything was back to normal. There was no ‘(edited)’ next to my comment.

What should I do? Is my laptop eve going to be recoverable?

submitted by /u/zeit9000
[link] [comments]

Hacking on Medium
Command Line Tools for Faster File System Navigation

https://cdn-images-1.medium.com/max/1920/1*gtSGPMh6BE5pwA8tu67eeg.png
Command-line utilities to replace “cd” command for faster file system navigation.

Continue reading on Medium »

SQLFluff - A SQL Linter And Auto-Formatter For Humans
http://www.kitploit.com/2021/05/sqlfluff-sql-linter-and-auto-formatter.html

___________________________
@hacking_Attack
@Hacking_Video

SQLFluff is a dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.
Getting Started
To get started, install the package and run sqlfluff lint or sqlfluff fix. test.sql $ sqlfluff lint test.sql == [test.sql] FAIL L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4 L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line L: 1 | P: 27 | L001 | Unnecessary trailing whitespace '>$ pip install sqlfluff
$ echo " SELECT a + b FROM tbl; " > test.sql
$ sqlfluff lint test.sql
== [test.sql] FAIL
L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4
L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line
L: 1 | P: 27 | L001 | Unnecessary trailing whitespace You can also have a play using SQLFluff online (https://sqlfluff-online.herokuapp.com/). For full CLI usage and rules reference, see the docs.
Documentation
For full documentation visit docs.sqlfluff.com (https://docs.sqlfluff.com/en/stable/).
Releases
SQLFluff is in beta phase - expect the tool to change significantly with potentially non-backward compatible api and configuration changes in future releases. If you'd like to join in please consider contributing (https://github.com/sqlfluff/sqlfluff/blob/master/CONTRIBUTING.md). New releases are made monthly. For more information, visit Releases (https://github.com/sqlfluff/sqlfluff/releases).
SQLFluff on Slack
We have a fast-growing community on Slack, come and join us! https://join.slack.com/t/sqlfluff/shared_invite/zt-o1f4x0e8-pZzarAIlQmKj_6ZwD16w0g
Contributing
There's lots to do in this project, and we're just getting started. If you want to understand more about the architecture of SQLFluff, you can find more here (https://docs.sqlfluff.com/en/latest/architecture.html). If you'd like to contribute, check out the open issues on GitHub (https://github.com/sqlfluff/sqlfluff/issues). You can also see the guide to contributing (https://github.com/sqlfluff/sqlfluff/blob/master/CONTRIBUTING.md).

Download Sqlfluff (https://github.com/sqlfluff/sqlfluff)

___________________________
@hacking_Attack
@Hacking_Video

SQLFluff - A SQL Linter And Auto-Formatter For Humans

SQLFluff is a dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.Getting Started To get started, install the package and run sqlfluff lint or sqlfluff fix. $ pip install sqlfluff$ echo " SELECT a + b FROM tbl; " > test.sql$ sqlfluff lint test.sql== test.sql FAILL: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a lineL: 1 | P: 27 | L001 | Unnecessary trailing whitespace You can also have a play using SQLFluff online. For full CLI usage and rules reference, see the docs. Documentation For full documentation visit docs.sqlfluff.com. Releases SQLFluff is in beta phase - expect the tool to change significantly with potentially non-backward compatible api and configuration changes in future releases. If you'd like to join in please consider contributing. New releases are made monthly. For more information, visit Releases. SQLFluff on Slack We have a fast-growing community on Slack, come and join us! https://join.slack.com/t/sqlfluff/shared_invite/zt-o1f4x0e8-pZzarAIlQmKj_6ZwD16w0g Contributing There's lots to do in this project, and we're just getting started. If you want to understand more about the architecture of SQLFluff, you can find more here. If you'd like to contribute, check out the open issues on GitHub. You can also see the guide to contributing. Download Sqlfluff
Read more...

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
SQLFluff - A SQL Linter And Auto-Formatter For Humans

https://1.bp.blogspot.com/-43j_9MotGMY/YKS4b8ieLCI/AAAAAAAAWO4/_ANfE8G8RPAwsvZaRJ9q_bqqfNDImADiQCNcBGAsYHQ/w640-h132/sqlfluff_1_sqlfluff-wide.png
SQLFluff is a dialect-flexible and configurable SQL linter. Designed with ELT applications in mind, SQLFluff also works with jinja templating and dbt. SQLFluff will auto-fix most linting errors, allowing you to focus your time on what matters.
Getting Started

To get started, install the package and run sqlfluff lintor sqlfluff fix.

test.sql $ sqlfluff lint test.sql == [test.sql] FAIL L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4 L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line L: 1 | P: 27 | L001 | Unnecessary trailing whitespace ">$ pip install sqlfluff
$ echo " SELECT a + b FROM tbl; " > test.sql
$ sqlfluff lint test.sql
== [test.sql] FAIL
L: 1 | P: 1 | L003 | Single indentation uses a number of spaces not a multiple of 4
L: 1 | P: 14 | L006 | Operators should be surrounded by a single space unless at the start/end of a line
L: 1 | P: 27 | L001 | Unnecessary trailing whitespace

You can also have a play using SQLFluff online.

For full CLI usage and rules reference, see the docs.

Documentation

For full documentation visit docs.sqlfluff.com.

Releases

SQLFluff is in beta phase - expect the tool to change significantly with potentially non-backward compatible api and configuration changes in future releases. If you'd like to join in please consider contributing.

New releases are made monthly. For more information, visit Releases.

SQLFluff on Slack

We have a fast-growing community on Slack, come and join us!

https://join.slack.com/t/sqlfluff/shared_invite/zt-o1f4x0e8-pZzarAIlQmKj_6ZwD16w0g

Contributing

There's lots to do in this project, and we're just getting started. If you want to understand more about the architecture of SQLFluff, you can find more here.

If you'd like to contribute, check out the open issues on GitHub. You can also see the guide to contributing.
Download Sqlfluff

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Great Comparison of Stealth Hacks Versus Destructive Hacks By Ralph Langner

I've highly recommended the documentary Zero Days by Alex Gibney in the past, as the interviews with cybersecurity experts and military personnel are gold. One of the people in the film that Alex interviews is Ralph Langner, who provides great information about the digital world, security and Stuxnet in Alex's film. He created his own documentary about Stuxnet, highlighting two campaigns of it in his video The Stuxnet Story: What really happened at Natanz.

He compares and contrasts the two campaigns - the first campaign being the worst nightmare for entities, as it operated in stealth and did little damage over time that could have been easily dismissed as normal operations. Some of the points he brings up about the first campaign remind me of how people always talk about destructive attacks because they sound more interesting, but it's the recon or informational attacks that hackers do that can be far worse, even though it's only informational. Intellectual property theft, as an example, can be very costly for a company, but for an attacker, it can be a short and stealthy campaign that never is discovered if done right.

By contrast the second campaign sounds worse in theory because destruction is involved, but actually results in the underlying problem being solved faster because it's identified quicker: it does more damage, it spreads everywhere, uses zero days and stolen certificates, and makes noise which results in it being discovered. This is like an attack group that takes on a big target and causes major disruptions for people all over: they then become the focus and enemy of a lot of people who didn't know about them, rather than operating by stealth (the recent pipeline attack is a good example of this, as the attack made many people aware of the group and has created a lot of enemies for the group). This type of attack lacks long term strategy and creates a lot of enemies; as Sun Tzu might caution - it actually costs more over the long run for the attacker.

This is a good reminder that while destructive hacks get a lot of attention, we should be extremely careful with information hacks. While less glamorous or interesting, they actually can be much more costly.

submitted by /u/timfcrn
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Which is your favourite cybersecurity youtube channel? And why?

Mine is hak5 because I love their teaching style and their whole series - weekly dose of techno lust is my favourite one. Hak5 features talented hackers such as glytch which is awesome.

submitted by /u/dominatevil
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to bypass Fileboom download speed limit?

Hey guys, how do you bypass Fileboom's speed limit in Free mode. I mean yes it's free but their speed limit is insanely too low like 50KB/s

submitted by /u/Recent-Skill7022
[link] [comments]