Hacking on Medium
Don’t Fall Victim to ‘Juice Jacking’

https://cdn-images-1.medium.com/max/1920/1*WZjYlIKuzHlU78Zpi7l4ig.jpeg
The Shocking Truth About Public Charging Stations

Continue reading on Medium »

Hacking on Medium
Mastering Python for Ethical Hacking: Advanced Techniques and Tools

https://cdn-images-1.medium.com/max/881/0*_e_-am0P33SGg1Fo.jpg
Taking Your Ethical Hacking Skills to the Next Level with Python’s Versatility and Power

Continue reading on Medium »

Hacking on Medium
Uncovering the Secrets of a Backdoored IoT Device: Bugged, a TryHackMe Room Walkthrough with…

https://cdn-images-1.medium.com/max/600/1*YAvF-W0_Cu-XTvwGK7Mrdw.png
Welcome to the exciting world of Internet of Things (IoT) and the MQTT communication protocol! In this post, we’ll explore the use of…

Continue reading on Medium »

Hacking on Medium
Website Security: Protecting Your WordPress Site from Hackers

https://cdn-images-1.medium.com/max/600/0*YyD6e3HG3rRLlsEc
In today’s digital age, website security is a major concern for website owners. With the increasing number of hacking incidents, it’s…

Continue reading on Medium »

Hacking on Medium
Unravelling the Secrets of Reverse Engineering: Practical Applications for In-Depth Analysis —…

https://cdn-images-1.medium.com/max/1200/0*rf_k10pEn6224cUj.jpg
Unlock the power of reverse engineering! Explore real-world examples and applications in software analysis.

Continue reading on Nerd For Tech »

Hacking on Medium
What is Hacking?

https://cdn-images-1.medium.com/max/2600/0*yV5SKoYszraPtjGa
Hacking is a phrase that has garnered broad popularity in the digital age. Unauthorized entry into computer systems or networks with the…

Continue reading on Medium »

Rate Limit Bypass By Parameter Tampering | Easy Win

In this blog, I will walk you around a rate limit bypass technique. This technique is Easy to Win!Continue reading on Medium »
Read more...

hacking: security in practice
Does Zphisher consume a lot of data when monitoring?

I'm on Kali 2023 on VMWare.

So I was trying out Zphisher to see how it works. I phished myself (Facebook) and it worked perfectly. Then I forgot to close ZPhisher, so it was continuing to run in the background while I did some other work. Only after like 3 hours that I noticed that Zphisher is still running. And when I checked my data usage, something has drained like 2GBs of data. Does Zphisher drain that much of data when it's running/monitoring?

Thanks.

submitted by /u/KasunL
[link] [comments]

hacking: security in practice
How to make ZPhisher links work on Windows?

Running Kali 2023 on VMWare.

I'm trying Zphisher on Kali and it works fine when I goto the phishing link it provides, and insert some login info, within Kali. But when I try to use the same link on a Windows browser, the link doesn't load. Is there a way to open ZPhisher links (created on Kali) on a Windows browser?

submitted by /u/KasunL
[link] [comments]

hacking: security in practice
VFD wifi back door

Im not a havker at all tho ive always had an interest in it. Im actually an electrician and cnc technician. Something i noticed in my 18 years is i think potentially scary as hell. I have done a lot of work in waste water treatment facilities which are more and more becoming automated and remote operable. That isnt necessarily the issue i found what the issue is is that every single VFD in these places has wifi capabilities and ive never found one where it had been disabled or had the factory password changed. Like i said im no expert on the matter but it seems to me that someone in close proximity could use this as a back door to the entire operation and even if thatvwerentvthe case you could still effect individual VFDs and create a cascade effect which would shit the operation down. Not a good thing. Am i wrong in thinking thatvthis is the case? It just seems like a rather large oversight in a very critical part of our infrastructure here in the usa.

If youre unaware a VFD is a variable frequency drive. They are used for controlling electric motors. One could very easily destroy a motor by changing one of more key parameters.

Not sure if this is the place to ask this question but it seems like the sort of thing a white hat would be interested in.

submitted by /u/Own_Mechanic_9805
[link] [comments]

hacking: security in practice
Top Hacking Podcasts, Series, or Content to actually learn something?

Hey guys,
Student here.

I was wondering, which hacking or cybersecurity content do you like or know that you *actually* learn from?

I've noticed there's a lot of trash content out there that is click-baiting or just opinions over opinions over opinions. YES, I get it. Professionals in this area of IT have their own opinions about stuff, but I don't get nurtured by other people's opinions only. I want to learn and SEE!

I'm looking to passively LEARN by entertaining myself at the same time when I'm not with the HARD stuff, actively studying.

Plus, we get to share cool resources with each other!

Share your favorite hacking content below.

submitted by /u/AmazingWear465
[link] [comments]

hacking: security in practice
Environmentalist hacker group “Guacamaya” releases DIY Guide to Digital Monkey-wrenching; showing in detail how they hacked Pronico mining, downloaded files and emails to leak, and then repeatedly sabotaged the company's computers over the course of 6 months.

https://external-preview.redd.it/JOOdREgwLuMQOiR1qlczR8-a3pCukmzQaTdwHy6PpBc.jpg?width=640&crop=smart&auto=webp&s=e3d766e91fb6d573d73734c7c64e85d002ca3214 submitted by /u/LickMyCockGoAway
[link] [comments]

hacking: security in practice
Why do people implement SPF without DMARC?

I was under the impression that SPF records are useless without actually having a policy that actions failed verification?

But the more I look the more I see SPF records without anything else.

Am I missing something here? That would mean people can just spoof all they want?

submitted by /u/thehunter699
[link] [comments]

5 common Vulnerabilities in smart contracts

Smart contracts are self-executing contracts with the terms of the agreement between buyer and seller being directly written into code…Continue reading on Medium »
Read more...

What is a reentrancy attack?

Reentrancy attacks are a type of exploit that can be used to drain funds from smart contracts. They work by taking advantage of the fact…Continue reading on Medium »
Read more...