Infosec

Advent of Cyber 2022 — Day 13: TryHackMe | Advent of Cyber 2022 The Story Check out SecurityNinja’s video walkthrough for Day 13 here! After receiving the phishing email on Day 6 and investigating malware on Day 12, it seemed everything was ready to go back to normal. However, monitoring systems started…

Hi there, amazing hackers and security enthusiasts! Today, I want to share something really important with you. I’m sure you’ll find it interesting and valuable. So, without further ado, let’s dive in! IDOR Allows Updating user profiles leading to full user account takeover Insecure direct object references (IDOR) Insecure direct object references (IDOR) are a…

Forensic McBlue to the REVscue! THM — aoc 2022 day 12 — Malware : software created to harm a computer or an entire network. Goals: infiltrating networks, breaching sensitive data, disrupting operational services etc. Check for : network connections(External and internal-lateral movement which is essentially a technique used to extend access to other hosts or applications), Registry key modifications(registry run keys for…

Variables A variable is a name given to a memory location in a program. It is like a container to store value. Example — a=40, b=15.12, c="18", name="Amit". We cannot use Keywords ( Reserved words in python ) and other Identifiers like Class name or Function name as a Varible name. Rules for defining a Variable name ( Also applies to Identifiers ) …

InfoSecSherpa: Your Guide Up a Mountain of Information! — Most apps used in US classrooms share students’ personal data with advertisers, researchers find (CyberScoop, December 13th) Security is one of the top challenges companies face today. This expert hacker is helping them identify potential threats. (Business Insider, December 12th) Alabama, Utah become the latest U.S. states to ban TikTok…

This article is the 2nd part of the “Fintech Bug Bounty” series. Summary How I became a millionaire in 3h | Fintech Bug Bounty — Part 1 GraphQL Exploitation Techniques | Fintech Bug Bounty — Part 2 (REDACTED) | Fintech Bug Bounty — Part 3 | Available on Jan 2023 (REDACTED)…

大家好，这是我的第一个文章。在这篇文章中，我将尝试解释我如何在荷兰政府中找到6个漏洞，并因在其网站上找到漏洞而被授予这个酷赃物。在这篇文章中，我将分享我的经验…

Amazon Web Services (AWS) offers a suite of tools to help organizations manage and maintain compliance with various standards and regulations. Two of these tools are AWS Audit Manager and AWS Artifact.