Computer Hacking and Security

[ Oauth2.0, JWT, SAML ] Exploitation: "An attack can come from anywhere, even within! Explore how OAuth2.0, JWT, & SAML can be misused in Authentication & Authorization Attacks." Follow us for updates like this.

Follow the Hacker Associate Page for more updates.

Link:
https://x.com/harshad_hacker/status/1701963655812641031?s=20

New Web App Pentesting Video: Cross Origin Resource Sharing(CORS) Vulnerability Detection on Live Application | Advanced Web Application Pe*******on Testing Training by Hacker Associate.

What is CORS (cross-origin resource sharing)?
Cross-origin resource sharing (CORS) is a browser mechanism which enables controlled access to resources located outside of a given domain. It extends and adds flexibility to the same-origin policy (SOP). However, it also provides potential for cross-domain attacks, if a website's CORS policy is poorly configured and implemented. CORS is not a protection against cross-origin attacks such as cross-site request forgery (CSRF)

CORS Vulnerability Detection on Live Application | AWAPT Training Hacker Associate Cross Origin Resource Sharing(CORS) Vulnerability Detection on Live Application | Advanced Web Application Pe*******on Testing by Hacker Associate.What is CO...

Bounty 20,000 INR + pentest gear from Hak5 | Hacker Associate
Do you have what it takes to solve the kissing-bug puzzle and win 20,000 INR Amazon gift card and a pentest gear from Hak5? At Bounty 20,000 INR + pentest gear from Hak5, we are offering double the price for anyone who can solve our puzzles and earn their place as a hacker associate.
So put your thinking cap on and get started!
Puzzle Page: Check in comment section

Offensive Red Teaming: Live Adversary Attack Emulation
At Live Adversary Attack Emulation, we understand the importance of having a comprehensive and reliable security strategy.

That’s why we offer breach and attack emulation – a service that helps you identify and fix vulnerabilities in your system before they can be exploited by real-life cybercriminals.

Red team training is a vital security measure that all organizations should undertake in order to keep their staff up to date on the latest threats and vulnerabilities.

By simulating real-world attacks, red team training helps employees learn how to respond quickly and effectively to potential threats.

Offensive Red Team Training: Live Adversary Attack Emulation ( Cyber Security) Offensive Red Team Training: Live Adversary Attack Emulation ( Cyber Security)Take Your Expertise To Next Level In RedTeam Activity With Offensive Redteam Pr...

OAES Certification: Offensive API Exploitation & Security | hackerassociate.com
We successfully finished the OAES programme for US clients.

Hacker Associate has launched an industry-specific API Exploitation Programme with a completely hands-on course, and advanced CTF (capture the flag) labs are introduced for each candidate. This OAES 308 Certification programme will focus on complete API exploitation and defence techniques. We will dive deep in detail into all the standards like SOAP, XML, REST, and GRAPH QL, and best practices.

We will also learn how we can pe*****te cloud-based Web API and will go through advanced technique and industry best practices for a modern web application, mobile app, and desktop applications.

Black Hat Training | hackerassociate.com
Live Hunting on "Hotstar" and recovered many keys and shared screenshots for today's sessions.

This technique works smoothly even if you have WAF in between. For more details, log on to hackerassociate.com.

Offensive Bug Hunting : XSS & SQL on Live Application ( Digital Payment Web App ) | Hacker Associate | hackerassociate.com

This is the quick POC. Pause the video after XSS Popup [ 2.32 sec] and observe the output and you will see that sql error and after xss we can go for SQL injection.


https://lnkd.in/g9CMQqp9

Offensive Bug Hunting : XSS on Live Application ( Digital Payment Web App ) | Hacker Associate This is the quick POC. This is a quick proof of concept for XSS on a Live Web Application (digital payment based web application)For Offensive Exploitation T...

Information Disclosure in Version Control History | ALL Methods | hackerassociate.com | Web Recon Tips

Endpoint discloses sensitive information via its version control history.
We will be exploring the following tools :
1. git-cola
2. Git for Windows
3. Wget recursive download [ wget -r URL/.git ]
4. GIT Logs
5. GIT cat-file options etc.

https://lnkd.in/gvfsA4yW

Information disclosure in Version Control History | All Methods Endpoint discloses sensitive information via its version control history.We will be exploring the following tools :1. git-cola 2. Git for Windows 3. Wget re...

Exploring Kali 2021.4 New Features | hackerassociate.com

Kali 2021.4 new features include following :
Improved Apple M1 support
Wide compatibility for Samba
Switching package manager mirrors
Kaboxer theming
Updates to Xfce, GNOME and KDE
Raspberry Pi Zero 2 W + USBArmory MkII ARM images

https://youtu.be/XtmAmhee3pE

Kali 2021.4 Exploring New Features Kali 2021.4 new features include following :Improved Apple M1 supportWide compatibility for SambaSwitching package manager mirrorsKaboxer themingUpdates to ...

For Hardware Hackers : Offensive IOT certification program is live now, visit following link for more information.

Offensive IoT Hacking and Security Training - Hacker Associate Hacker Associate has introduced Offensive IoT Security and Hacking to keep up with changing trends and the need of the hour.

Gadgets Unlocking | Mr Robot USB Unlocking Devices!
Imagine plugging in a seemingly innocent USB drive into a computer and installing backdoors, exfiltrating documents, or capturing credentials.

For Attiny 85 board Link: https://lnkd.in/g9jDDVpp...

Hope you guys enjoyed the episode. For any questions feel free to ask them in comment section or on our social network.

https://lnkd.in/g7a2_ARj

Mr Robot USB Unlocking Devices! Imagine plugging in a seemingly innocent USB drive into a computer and installing backdoors, exfiltrating documents, or capturing credentials.Attiny 85 board...