The Danger of Automatic Login: Bypassing MFA

A few years ago, during a security assessment, I found a vulnerability that allowed a user to bypass multi-factor authentication (MFA)…Continue reading on Medium »
Read more...

How do I get cross site scripting(“xss”) in “Nokia”

This is my first and last Bug Bounty Writeup this year. 😀Continue reading on Medium »
Read more...

Hacking on Medium
Chaocipher: The Revolutionary Encryption System | 2023

https://cdn-images-1.medium.com/max/878/0*edlm8IWNzfmw9nIm.png
A Comprehensive Guide to the History, Features, and Applications of Chaocipher | Karthikeyan Nagaraj

Continue reading on Medium »

Hacking on Medium
Malware to Bypass Sandbox

https://cdn-images-1.medium.com/max/600/0*DWFi8Ay5_VKzvIyw.jpg
Introduction

Continue reading on Medium »

Hacking on Medium
My Article Crossed 21k Views, And I Do Not Know Why…

https://cdn-images-1.medium.com/max/892/1*FUvig3Vrei4siBBoMs4lHQ.png
A long time ago in a galaxy far, far away, when my blog was in its wee stages of development, I released an article titled: Uncle Jokes…

Continue reading on Medium »

Hacking on Medium
A Guide to Vulnerability Management for Beginners

https://cdn-images-1.medium.com/max/2600/0*i-OiY8LFklQ65TyQ
Using OpenVAS to Find the Weakest Links

Continue reading on Medium »

Rukovoditel 3.3.1 — Remote Code Execution (RCE)

Rukovoditel 3.3.1 — Remote Code Execution (RCE)Continue reading on Medium »
Read more...

hacking: security in practice
Open letter to the Russian Government from an American Hacker

https://external-preview.redd.it/H8T79FSDtM0Gobvtb6qA6BR2HGD4-iGrcaBBW7vusqQ.jpg?width=108&crop=smart&auto=webp&s=6cf63554f420a5d95be9aac14bfb623a3d1a27a7 submitted by /u/endless
[link] [comments]

Websites for subdomain enumeration

why do you need a website when you can use tools at some point in your life you do not have a good pc with good ram or when you need to do…Continue reading on Medium »
Read more...

Deep Web
There used to be a site that compiled celebrity's real contact info, not the clearing houses their management uses, is there anything like that still around?

There used to be a onion site that compiled the real contact info for Many celebrities. This has been since taken down a long time ago. Is there anything similar to that out there now?

submitted by /u/thisguy181
[link] [comments]

Hello Cybersecurity Researchers :),

I am here with an interesting write-up for you all.Continue reading on Medium »
Read more...

Hacking on Medium
The pGALA Incident:

https://cdn-images-1.medium.com/max/1600/1*B1r14---qDZmoFIpdw8vRg.jpeg
Debunking Rumors and Providing Accurate Information

Continue reading on Medium »

Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor
https://www.reddit.com/r/redteamsec/comments/12nyn0z/exconti_and_fin7_actors_collaborate_with_new/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://securityintelligence.com/posts/ex-conti-fin7-actors-collaborate-new-domino-backdoor/) [comments] (https://www.reddit.com/r/redteamsec/comments/12nyn0z/exconti_and_fin7_actors_collaborate_with_new/)

hacking: security in practice
Have you tried Trace Labs?

Has any of you tried getting involved in Trace Labs? If so what your thoughts about it?

Short description for those who don't know what is Trace Labs. It's a platform where hackers find information about missing persons using OSINT. More on their official website tracelabs.org

submitted by /u/scorpsec
[link] [comments]
➖ Sent by @TheFeedReaderBot ➖