Regular phishing awareness should be done in the organization. Regular 2FA/MFA hacking awareness should be done in the organization. The Phishing campaign should be run internally in the organization to check the employee’s awareness. Reward the employees if they successfully pass the phishing internal check. So that all other employees remember it. Reward the employees who tell about the phishing email or any phishing activity. This creates a positive impact in the organization and the team.

This tool is used to run binaries through Burp, tools like SSLscan, Nmap, FFUF, etc. The binaries that give the output on the terminal can be used in this Burp extension. I am not sure if this Burp extender will make your life easy or not. I just made it for learning purposes. Download: https://lazyhacker22.blogspot.com/2022/08/BurpBinaryRunner.html

ATM Hack ATM is a jackpot for criminals, it is a metal box that contains lots of cash. ATM is just a computer often a windows computer with an input device like a touch screen and buttons. It also has cassettes which hold lots of cash. In older days and in today’s…

Hello Everyone, Finally, after one week of work, I learned many new things in Jython as well as in Java. …

What is serialization? Serialization is the process of converting the state of an object into byte streams to save into the file. Why do we need Serialization? Let’s take an example of a computer game, when we start the game we get the option to resume it. Now think about, how it’s possible that the game starts from…

Salting is the concept of adding random data in the plaintext data (Example: Password) and then creating the hash of that combination this is called salting. By doing this, even if you are using the same plain text, it is possible to get different hashes.

Nowadays we start using many technology devices in our homes. Many people are installing CCTV or security cameras in their houses, private rooms, offices, private places, etc for security purposes and monitoring, but many of them don’t know how to configure that device securely. So let’s talk about CCTV and…

There are many ways to achieve this, one of the ways is here. I want a tool that sends requests to my website, but from different proxies. So I searched for some tools, but I faced the integration issue because I want to automate the whole process. That’s the reason I have created my own tool. I learned a new concept of proxies.

JWT vulnerabilities: Tamper without modifying anything Modify algorithm to none Bruteforce weak signing key Privilege Escalation by JWK header injection (RS256 or asymmetric hashing algorithm attack) Privilege Escalation by JKU header injection (RS256 or asymmetric hashing algorithm attack) The exploitation of kid header in JWT (Directory Traversal and command Injection)…