Collaborate Disseminate
"I hack your Wifi in 5 Minutes" still seems to be a hot topic on youtube in 2023, atleast on beginner channels like David Bombal. However, is there still any real world application? Even before the advent of WPA3?
Handshake-Captu… Continue reading Is Wifi Penetration Testing Dead?
"I hack your Wifi in 5 Minutes" still seems to be a hot topic on youtube in 2023, atleast on beginner channels like David Bombal. However, is there still any real world application? Even before the advent of WPA3?
Handshake-Captu… Continue reading Is Wifi Penetration Testing Dead?
Your customers expect you to keep their data secure, and this collection of video courses covers everything you need to know about cybersecurity. Continue reading Grab 9 Ethical Hacking Courses for $30 and Improve Your Business Security
I am trying to realize which is the best option to have somewhere installed vulnerable virtual machines and run them whenever you want for Pentest training or other cloudtesting purposes.
Maybe this is something like the TryHackMe platform… Continue reading What is the best way to spin up vulnerable machines for training purposes? [duplicate]
it is my first time with MobSF and Android APK assessment. I have found something while testing a specific APK and I am trying to understand the concept behind it:
Under HARDCODED_SECRETS in MobSF, was found a pair of KEY/SECRET related to… Continue reading MobSF Android Activity APK Pentest
Suppose a domain user has a GenericAll permission on a machine account, but the computer tied to that machine account is inaccessible, and that same machine account has a GenericAll privilege over a Domain Admin user account. Is it possibl… Continue reading How to leverage GenericAll privilege on a machine account without RBCD?
I recently start to learning some Ethical Hacking, to do pentesting, and i was looking for some advices from the community and some techniques in "deserialization vulnerabilities" on web applications.
Continue reading How far can we go with deserialization vulnerabilities
I am an aspiring pen-tester and am trying to learn the basic skills. I recent got a new asus laptop and it will not list aps when i run airodump. I am using Parrot OS if that is any help. My other laptop would list them(Also running Parrot… Continue reading How to fix airodump-ng [interface] not displaying aps
I’m trying to perform a pentest on a VPN server.
I’m trying to find a way to intercept, decrypt and manipulate the DTLS traffic between the VPN client and server – Burp suite style.
In the VPN client, I can enter a server IP address to con… Continue reading Penetration testing a VPN client DTLS traffic?
I’m trying to perform a pentest on a VPN server.
I’m trying to find a way to intercept, decrypt and manipulate the DTLS traffic between the VPN client and server – Burp suite style.
In the VPN client, I can enter a server IP address to con… Continue reading Penetration testing a VPN client DTLS traffic? [closed]