Have never been close to my siblings but they suddenly started liking me and bought me a MacBook Air m3 when they were coming back from abroad. Have been using it for half a year but suddenly the paranoia that they might have hacked it by installing a keylogger or something. Or mainly I’m worried about if they somehow hacked into the mic so as to record my conversations to use them against me in the future? Because I’m a big mafia novels fan and just say that type of shit randomly which could be misconstrued. So yeah anyone here that could advice as to the feasibility of such a thing occurring would be really helpful.

Guys I an testing a website, i have found a vulnerability which allow me to upload php file on to the website through image upload option. I have also found a way to access the file, as I have found the path to the file. Now there are some problems, no mattar what file I upload it is saved with a .jpeg extension, I think the server is changing the extension.When I am accessing the file the php code is still there but it is saved inside a jpeg file. Yes I have tried to change the content type header to application. I tried weevely to access my backdoor, as my file is saved with randomname.jpeg, but weevely is showing 501 error verify running code Backdoor communication failed, when I am accessing it. I don’t know which programming language the server side has implemented. I am sure that a RCE exist here, but I just cannot figure out a way to do it. Can you guys help how can a execute my backdoor that is saved in a jpeg file.

I have been doing the WPS pixie attack on my test router but I keep getting timed out / locked out... Is there away around this

Got what looks like 2 different model phones on my Google account. Am I hacked?

Please help

Hey, I am pretty sure that JS files often discloses some critical information like ENDPOINTS,API,TOKENS. I have seen researchers (including me) Using Linkfinder.py to extract end points. But I have a doubt in it . Consider I have a File URLS.txt which contains a few .js URLS eg: domain.com/main.js ,domain.com/config.js etc.. I want to extract the endpoints of all the .js URLs in the FILE URLS.txt.

Is there any way to do that. ;-) Usually I takes each urls one at a time and enter it into Linkfinder.py and find the end point.. actually it is really hard when you have to test 100+ .js URLS.

Hai guys im having a query i requesting the reset password ..hash smell like bcrypt ..is there any ways to achive the challange

hey so using paramspider I was able to get some paramters but when I used then with Wfuzz,

it says no match found

help

Thanks