hacking: security in practice
Password cracking

My understanding from working in a corporate environment is that we need longer passwords to prevent cracking. My question is why it’s necessary if the system locks you out after 3-5 incorrect attempts?

submitted by /u/Shatterstar23
[link] [comments]

[HTB] Session Security

DisclaimerContinue reading on Medium »
Read more...

From payload to 300$ bounty: A story of CRLF injection and responsible disclosure on HackerOne

As a bug bounty hunter, I’m always on the lookout for security vulnerabilities that I can report to companies and earn rewards.Continue reading on Medium »
Read more...

The Danger of Automatic Login: Bypassing MFA

A few years ago, during a security assessment, I found a vulnerability that allowed a user to bypass multi-factor authentication (MFA)…Continue reading on Medium »
Read more...

How do I get cross site scripting(“xss”) in “Nokia”

This is my first and last Bug Bounty Writeup this year. 😀Continue reading on Medium »
Read more...

Hacking on Medium
Chaocipher: The Revolutionary Encryption System | 2023

https://cdn-images-1.medium.com/max/878/0*edlm8IWNzfmw9nIm.png
A Comprehensive Guide to the History, Features, and Applications of Chaocipher | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Malware to Bypass Sandbox

https://cdn-images-1.medium.com/max/600/0*DWFi8Ay5_VKzvIyw.jpg
Introduction

Continue reading on Medium »

Hacking on Medium
My Article Crossed 21k Views, And I Do Not Know Why…

https://cdn-images-1.medium.com/max/892/1*FUvig3Vrei4siBBoMs4lHQ.png
A long time ago in a galaxy far, far away, when my blog was in its wee stages of development, I released an article titled: Uncle Jokes…

Continue reading on Medium »

Hacking on Medium
A Guide to Vulnerability Management for Beginners

https://cdn-images-1.medium.com/max/2600/0*i-OiY8LFklQ65TyQ
Using OpenVAS to Find the Weakest Links

Continue reading on Medium »

Rukovoditel 3.3.1 — Remote Code Execution (RCE)

Rukovoditel 3.3.1 — Remote Code Execution (RCE)Continue reading on Medium »
Read more...

hacking: security in practice
Open letter to the Russian Government from an American Hacker

https://external-preview.redd.it/H8T79FSDtM0Gobvtb6qA6BR2HGD4-iGrcaBBW7vusqQ.jpg?width=108&crop=smart&auto=webp&s=6cf63554f420a5d95be9aac14bfb623a3d1a27a7 submitted by /u/endless
[link] [comments]

Websites for subdomain enumeration

why do you need a website when you can use tools at some point in your life you do not have a good pc with good ram or when you need to do…Continue reading on Medium »
Read more...

Deep Web
There used to be a site that compiled celebrity's real contact info, not the clearing houses their management uses, is there anything like that still around?

There used to be a onion site that compiled the real contact info for Many celebrities. This has been since taken down a long time ago. Is there anything similar to that out there now?

submitted by /u/thisguy181
[link] [comments]

Hello Cybersecurity Researchers :),

I am here with an interesting write-up for you all.Continue reading on Medium »
Read more...

Hacking on Medium
The pGALA Incident:

https://cdn-images-1.medium.com/max/1600/1*B1r14---qDZmoFIpdw8vRg.jpeg
Debunking Rumors and Providing Accurate Information

Continue reading on Medium »

Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor
https://www.reddit.com/r/redteamsec/comments/12nyn0z/exconti_and_fin7_actors_collaborate_with_new/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://securityintelligence.com/posts/ex-conti-fin7-actors-collaborate-new-domino-backdoor/) [comments] (https://www.reddit.com/r/redteamsec/comments/12nyn0z/exconti_and_fin7_actors_collaborate_with_new/)