https://a.thumbs.redditmedia.com/ZFdQpRjS8-HekjYZnzVDQn0W9xIOjEy5uguAPuqUbq8.jpg submitted by /u/Weetbix13
[link] [comments]

hacking: security in practice
Certifications

Hey guys so I currently still am a Mechanical Engineering student and have been studying Cybersecurity as a hobby, now I have decided to do it “professionally” and wanted to ask what Certification you would recommend? Already did some research and currently cannot decide between the CompTia Security+ or the CompTia Pentest+, both seem to be recommended for beginners, but I am on a rather tight budget so for now I could only do one, so which one would you recommend for a beginner?

submitted by /u/Tickle_a_Dicktip
[link] [comments]

hacking: security in practice
Password cracking

My understanding from working in a corporate environment is that we need longer passwords to prevent cracking. My question is why it’s necessary if the system locks you out after 3-5 incorrect attempts?

submitted by /u/Shatterstar23
[link] [comments]

[HTB] Session Security

DisclaimerContinue reading on Medium »
Read more...

From payload to 300$ bounty: A story of CRLF injection and responsible disclosure on HackerOne

As a bug bounty hunter, I’m always on the lookout for security vulnerabilities that I can report to companies and earn rewards.Continue reading on Medium »
Read more...

The Danger of Automatic Login: Bypassing MFA

A few years ago, during a security assessment, I found a vulnerability that allowed a user to bypass multi-factor authentication (MFA)…Continue reading on Medium »
Read more...

How do I get cross site scripting(“xss”) in “Nokia”

This is my first and last Bug Bounty Writeup this year. 😀Continue reading on Medium »
Read more...

Hacking on Medium
Chaocipher: The Revolutionary Encryption System | 2023

https://cdn-images-1.medium.com/max/878/0*edlm8IWNzfmw9nIm.png
A Comprehensive Guide to the History, Features, and Applications of Chaocipher | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Malware to Bypass Sandbox

https://cdn-images-1.medium.com/max/600/0*DWFi8Ay5_VKzvIyw.jpg
Introduction

Continue reading on Medium »

Hacking on Medium
My Article Crossed 21k Views, And I Do Not Know Why…

https://cdn-images-1.medium.com/max/892/1*FUvig3Vrei4siBBoMs4lHQ.png
A long time ago in a galaxy far, far away, when my blog was in its wee stages of development, I released an article titled: Uncle Jokes…

Continue reading on Medium »

Hacking on Medium
A Guide to Vulnerability Management for Beginners

https://cdn-images-1.medium.com/max/2600/0*i-OiY8LFklQ65TyQ
Using OpenVAS to Find the Weakest Links

Continue reading on Medium »

Rukovoditel 3.3.1 — Remote Code Execution (RCE)

Rukovoditel 3.3.1 — Remote Code Execution (RCE)Continue reading on Medium »
Read more...

hacking: security in practice
Open letter to the Russian Government from an American Hacker

https://external-preview.redd.it/H8T79FSDtM0Gobvtb6qA6BR2HGD4-iGrcaBBW7vusqQ.jpg?width=108&crop=smart&auto=webp&s=6cf63554f420a5d95be9aac14bfb623a3d1a27a7 submitted by /u/endless
[link] [comments]

Websites for subdomain enumeration

why do you need a website when you can use tools at some point in your life you do not have a good pc with good ram or when you need to do…Continue reading on Medium »
Read more...

Deep Web
There used to be a site that compiled celebrity's real contact info, not the clearing houses their management uses, is there anything like that still around?

There used to be a onion site that compiled the real contact info for Many celebrities. This has been since taken down a long time ago. Is there anything similar to that out there now?

submitted by /u/thisguy181
[link] [comments]