GitLab Community Edition (CE) 13.10.3 - (Sign_Up) User Enumeration Vulnerability

Exploit Title: GitLab Community Edition CE 13.10.3 - 'SignUp' User Enumeration Exploit Author: @4D0niiS https://github.com/4D0niiS Vendor Homepage: https://gitlab.com/ Version: 13.10.3 Tested on: Kali Linux 2021.1 INFO: An unauthenticated attacker can remotely enumerate the existence of different...

Groups Call for Ethical Guidelines on Location-Tracking Tech

The Locus Charter asks companies to commit to 10 principles, including minimizing data collection and actively seeking consent from users...

MangaDex Site Offline Following Hacking Incident

MangaDex, the online repository of manga animation comics, will be closed until further notice following a hacking incident. Last week, the site reported that a cyberattacker had gained access to an administrative account, “through the reuse of a session token found in an old database leak throug...

Cybersecurity Bug-Hunting Sparks Enterprise Confidence

Nearly three-quarters of IT security professionals 73 percent surveyed say they prefer to buy technology and services from vendors who are proactive about security, including leveraging ethical hacking and having transparent communications about vulnerabilities. But less than half of vendors...

Malicious Code Bombs Target Amazon, Lyft, Slack, Zillow

Researchers have spotted malicious packages targeting internal applications for Amazon, Lyft, Slack and Zillow among others inside the npm public code repository — all of which exfiltrate sensitive information. The packages weaponize a proof-of-concept PoC code dependency-confusion exploit that w...

A Ban on Ad Targeting: Why Did EU Regulators Call for It?

By Waqas Brands use ad targeting to attract potential customers but is it an ethical approach? Why is the EU asking for a ban on ad targeting? This is a post from HackRead.com Read the original post: A Ban on Ad Targeting: Why Did EU Regulators Call for It?...

Darkdump - Search The Deep Web Straight From Your Terminal

Darkdump is a simple script written in Python3.9 in which it allows users to enter a search term query in the command line and darkdump will pull all the deep web sites relating to that query. Darkdump wraps up the darksearch.io API. Installation 1. git clone https://github.com/josh0xA/darkdump 2...

Microsoft patent reveals chatbot to talk to dead people

By Habiba Rashid Microsoft Patent Regarding A Conversational Chatbot For The Deceased: A Question Of Ethical Standing? This is a post from HackRead.com Read the original post: Microsoft patent reveals chatbot to talk to dead people...

5 cases when ethical hackers saved companies from devastating hacks

By Habiba Rashid Ethical hackers are the good guys in the cybersecurity industry - Here are 5 instances where these hackers have rescued companies from cyberattacks. This is a post from HackRead.com Read the original post: 5 cases when ethical hackers saved companies from devastating hacks...

Exploit for Path Traversal in Gitlab

The warn For demonstration purpose and ethical hacking only...

Ethical hacking, the best prevention against cyber attacks

By Waqas Ethical hacking is a part of cybersecurity that protects your organizations' online presence from different malicious threats like hacking, phishing, etc. This is a post from HackRead.com Read the original post: Ethical hacking, the best prevention against cyber attacks...

Unauthorized Access Vulnerability in Unified Identity Platform of Lianhe Technology Co.

Lianyi Technology Co., Ltd. was registered and established on July 05, 2004 in Guangzhou Administration for Industry and Commerce. The company's business scope includes software development; information system integration services; information technology consulting services and so on. An...

Pen Testing By Numbers: Tracking Pen Testing Trends and Challenges

Over the years, penetration testing has had to change and adapt alongside the IT environments and technology that need to be assessed. Broad cybersecurity issues often influence the strategy and growth of pen-testing. In such a fast-paced field, organizations get real value from learning about...

WPCracker - WordPress User Enumeration And Login Brute Force Tool

WordPress user enumeration and login Brute Force tool for Windows and Linux With the Brute Force tool, you can control how aggressive an attack you want to perform, and this affects the attack time required. The tool makes it possible to adjust the number of threads as well as how large password...

Schneider Electric Web Server on Modicon M340

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Classic Buffer Overflow 2. RISK...

Police Vouch for Hacker Who Guessed Trump’s Twitter Password

When Dutch ethical hacker Victor Gevers tried to alert Secret Service that he was able to guess the password to President Donald Trump’s Twitter handle last October, there were plenty of skeptics, most notably at the White House. Now, Dutch prosecutors have determined Gevers did, in fact, guess t...

WSMan-WinRM - A Collection Of Proof-Of-Concept Source Code And Scripts For Executing Remote Commands Over WinRM Using The WSMan.Automation COM Object

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object. Background For background information, please refer to the following blog post: WS-Management COM: Another Approach for WinRM Lateral Movement Notes...

Tianfu Cup 2020: Hackers pwn Windows, iPhone, Chrome for big bucks

By Sudais Asif In total, ethical hackers earned $1.2 million in the bug bounty competition. This is a post from HackRead.com Read the original post: Tianfu Cup 2020: Hackers pwn Windows, iPhone, Chrome for big bucks...

Survey: Cybersecurity Skills Shortage is ‘Bad,’ But There’s Hope

More than half of cybersecurity professionals in a recent survey — 57 percent — reported that the cybersecurity skills shortage is either “bad” or “very bad” at their companies. That’s according to a recent survey and whitepaper published by Trustwave, which also outlined a prescription for...

Bug-Bounty Awards Spike 26% in 2020

Cross-site scripting XSS remained the most impactful vulnerability and thus the one reaping the highest rewards for ethical hackers in 2020 for a second year running, according to a list of top 10 vulnerabilities released on Thursday by HackerOne. The vulnerability — which enables attackers to...