When not letting go, and fighting for your rights, payback.. — The Death Eaters If you are a Harry Potter fan, just like my girlfriend is, you already know who these people are. Some of you might know them by their most common name — triagers. Triager is the assessment of a security event to determine if there is a security incident, its priority…

Many websites have private S3 buckets holding secrets inside. We want them. — What Is An Amazon S3 Bucket? Is a public static cloud file storage resource available in Amazon Web Services’ (AWS) Simple Storage Service (S3), an object storage offering. S3 buckets, are similar to file folders, store objects, which consist of data and its descriptive metadata. Amazon S3 uses the same scalable storage infrastructure that Amazon.com uses…

Are you Attacking Web Apps Admin Panels The Right Way? — You should start here: Part_1 Intro Picking up from where we left off in part two. This time, we are on a Windows Server. Personally, I’m not a big fan of Windows Servers, and once you try to become a professional Red Teamer, you will understand why. …

Not Attacking Web Apps Admin Panels The Right Way? — You should start here: Part_1 Here is Part_3 Tools: Msfvenom Metasploit PHP Kali Linux Intro Picking up from where we left off in part one, let’s assume you have gained access to a panel control. Now, we will attempt to gain access to the server being use to control that website using a reverse shell. There are…

Attacking Web Apps Admin Panels The Right Way — Note:Tutorial Not too Beginner Friendly With some tweaking what you will be learning here can be apply to any Web App. This Tutorial will cover regular CMS and WordPress as a bonus. Tools: Proxychains hashid Cewl John The Repper Wpscan VM Kali Hydra Part 1: By taking a quick look at the source…

Never underestimate someone’s ability — Everyone had heard about the worst Uber hack. On Thursday, Uber learned that its computer network had been compromised, prompting the firm to shut down a number of its internal communications and engineering systems as it looked into the scope of the attack. A person claiming responsibility for the attack…

Make an application to recognize and transcribe human speech (often called speech-to-text). — Prerequisites.txt 🛠 Create a free Azure subscription here. In the Azure portal, create a Speech resource. You can trial the service for free and then subscribe to a premium tier for production later. Obtain the resource key as well as the region. …

Not all heroes wear a cape or get pay for their work — Intro I’d been doing ethical hacking and developing tools for a long time now. But for some reason, I never got interested in making or running a website. A few weeks ago, I bought a domain and hosting for my first ever webpage. I felt like a person trying to understand…

IDOR stands for insecure direct object reference — What exactly is IDOR? The insecure direct object reference is abbreviated as IDOR. An IDOR flaw allows an attacker to gain unauthorized access to resources or perform actions on a web application. This is accomplished by altering the request parameters supplied to the server while retrieving objects (such as documents, files, and data). …