Hacking

Introduction: As a red team operator, it is crucial to continually explore advanced techniques to effectively simulate real-world threats during authorized penetration tests. Backdooring Windows systems provides a powerful avenue for unauthorized access and control. In this reference manual, we will explore five advanced ways to backdoor a Windows system, equipping…

Hello guys! I am Vishnu Thulasidoss. Couple of months back when I was interning in Chennai, for some reasons I was supposed to travel to my hometown. So, I was looking for a bus ticket on Redbus. They were charging around 1300 Rs for a single seat, and around 1200…

Hello hunters, let me explain how did I overcome this XSS challenge set up by the bug bounty platform Intigriti. It may be a source of inspiration for some of you during your research. To start, let’s see the rules The challenge runs from the 23rd of May until the 29th of May, 11:59 PM CET…

By Jerry Tan (Div0-N0H4TS Finance) — id -un Hello, my name is Jerry, and I’m excited to tell you a bit more about my background. Although I’m a recent graduate, I already have over four years of experience in the cybersecurity industry. I achieved this by working and studying simultaneously, which allowed me to gain practical experience while…

Hello everyone, I’m back with a new write-up. When we talk about the Hacker Mindset, we mean how hackers can achieve their goals by any means and how they can leverage everything to their advantage even if it’s not a Vulnerability. …

NMAP is an open source scanning tool for Linux Operating Systems used to scan a target and discover a variety of information about the target. Here I would be explaining a few basics about NMAP. Installing NMAP To install NMAP on Ubuntu, use the following command sudo apt-get install nmap …

Tales from a recent cloud security research of App Runner service in the AWS cloud backed by Container Service (ECS) and how an attacker can steal the secrets stored in the AWS Secrets Manager Background As a security researcher, I typically test all kinds of applications, infrastructure, cloud services, and API…

Description: This room is aimed for beginner level hackers but anyone can try to hack this box. There are two main intended ways to root the box. If you find more dm me in discord at Fsociety2006. Link: https://tryhackme.com/room/brooklynninenine Level: easy Tools used: nmap, hydra, steghide, stegcracker Adding the IP address of the machine to /etc/hosts Adding the target…

This write-up exposes several easily exploitable vulnerabilities that can result in price tampering. However, it offers a fresh perspective on how these risks can be addressed — Hello Everyone I am Vishal Vishwakarma [@rootxvishal] I hope you enjoy it and learn something new from it. Introduction Online shopping has become a popular trend in recent years, and as a result, online retailers are always looking for ways to attract more customers. One way to do this is by…