⤷ Title: Massive GitHub Malware Campaign Targets Gamers and Software Pirates with Redox Stealer
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:39:36 +0000
════════════════════════
⌗ Tags: #Malware #GitHub Malware Campaign #Redox Stealer
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:39:36 +0000
════════════════════════
⌗ Tags: #Malware #GitHub Malware Campaign #Redox Stealer
Daily CyberSecurity
Massive GitHub Malware Campaign Targets Gamers and Software Pirates with Redox Stealer
Uncover the dangers of Redox Stealer, a malware spreading through fake GitHub repositories targeting gamers and software users.
⤷ Title: Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:35:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_23388 #CVE_2025_23389 #Rancher #SUSE
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:35:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_23388 #CVE_2025_23389 #Rancher #SUSE
Daily CyberSecurity
Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
These flaws, identified as CVE-2025-23388 and CVE-2025-23389, could allow attackers to launch denial-of-service (DoS) attacks and impersonate users
⤷ Title: Black Basta and Cactus Ransomware Groups Weaponize BackConnect Malware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:31:16 +0000
════════════════════════
⌗ Tags: #Malware #BackConnect malware #Black Basta #Cactus Ransomware #ESXi #Microsoft Teams #Operation Duckhunt #QBACKCONNECT #SystemBC #WinSCP
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:31:16 +0000
════════════════════════
⌗ Tags: #Malware #BackConnect malware #Black Basta #Cactus Ransomware #ESXi #Microsoft Teams #Operation Duckhunt #QBACKCONNECT #SystemBC #WinSCP
Daily CyberSecurity
Black Basta and Cactus Ransomware Groups Weaponize BackConnect Malware
Learn about QBACKCONNECT and its role in the tactics of Black Basta and Cactus ransomware groups for cyber threats.
⤷ Title: CVE-2025-0289: Paragon Partition Manager Flaw Exploited in BYOVD Ransomware Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 03 Mar 2025 23:47:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #BYOVD ransomware attacks #CVE_2025_0285 #CVE_2025_0286 #CVE_2025_0287 #CVE_2025_0288 #CVE_2025_0289 #Paragon Partition Manager #Windows Vulnerable Driver Blocklist
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 03 Mar 2025 23:47:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #BYOVD ransomware attacks #CVE_2025_0285 #CVE_2025_0286 #CVE_2025_0287 #CVE_2025_0288 #CVE_2025_0289 #Paragon Partition Manager #Windows Vulnerable Driver Blocklist
Daily CyberSecurity
CVE-2025-0289: Paragon Partition Manager Flaw Exploited in BYOVD Ransomware Attacks
Explore CVE-2025-0289 vulnerabilities in Paragon Partition Manager and their impact on ransomware attacks targeting privilege escalation.
⤷ Title: Blind SQL Injection in Oracle Database: Exfiltrating Data with Burp Collaborator — SQL Injection…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:26:32 GMT
════════════════════════
⌗ Tags: #sql_injection_oracle_db #sqli_data_exfiltration #bug_bounty #blind_sql_injection #bug_bounty_writeup
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:26:32 GMT
════════════════════════
⌗ Tags: #sql_injection_oracle_db #sqli_data_exfiltration #bug_bounty #blind_sql_injection #bug_bounty_writeup
Medium
Blind SQL Injection in Oracle Database: Exfiltrating Data with Burp Collaborator — SQL Injection Labs
[Write-up] Blind SQL Injection with Out-of-Band Data Exfiltration.
⤷ Title: Day 22: Account Takeover Worth $1000
════════════════════════
𐀪 Author: dani3l
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:08:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #account_takeover #ethical_hacking
════════════════════════
𐀪 Author: dani3l
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:08:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #account_takeover #ethical_hacking
Medium
Day 22: Account Takeover Worth $1000
Today’s write-up by Faique showcases a critical authentication flaw that led to an account takeover due to misconfigured 2FA and OAuth.
⤷ Title: Why beginners should look for open redirect vulnerabilities: An easy win in ethical hacking
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:41:02 GMT
════════════════════════
⌗ Tags: #programming #hacking #cybersecurity #bugbounty_writeup #bug_bounty
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:41:02 GMT
════════════════════════
⌗ Tags: #programming #hacking #cybersecurity #bugbounty_writeup #bug_bounty
Medium
Why beginners should look for open redirect vulnerabilities: An easy win in ethical hacking
If you’re new to ethical hacking or bug bounty hunting, finding your first vulnerability can feel overwhelming. Many security flaws require…
⤷ Title: Rate limit bypass lead to OTP bypass($600)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:35:59 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #bugcrowd #cybersecurity
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:35:59 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #bugcrowd #cybersecurity
Medium
Rate limit bypass lead to OTP bypass($600)
Description:
⤷ Title: The Mindset of a Successful Bug Bounty Hunter: Think Like a Hacker, Act Like a Scientist
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:28:46 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #ethical_hacking #programming #cybersecurity
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:28:46 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #ethical_hacking #programming #cybersecurity
Medium
The Mindset of a Successful Bug Bounty Hunter: Think Like a Hacker, Act Like a Scientist
Bug bounty hunting is not just about tools, exploits, or CVEs. It’s about mindset. You can have the best recon automation, the latest Burp…
⤷ Title: Advanced Bug Hunting Techniques: Unearthing Unique Bugs with AI and Exploits
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:20:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:20:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity
Medium
Advanced Bug Hunting Techniques: Unearthing Unique Bugs with AI and Exploits
Introduction
⤷ Title: The Underground Art of Client-Side Bug Hunting: Uncovering Hidden Vulnerabilities in Web…
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:11:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #internet #bug_bounty #hacking
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:11:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #internet #bug_bounty #hacking
Medium
The Underground Art of Client-Side Bug Hunting: Uncovering Hidden Vulnerabilities in Web Applications
Introduction
⤷ Title: I hack the online gambling via xss upload (part 2) (3500 USD)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:05:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #xss_vulnerability #xss_attack #bug_bounty
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:05:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #xss_vulnerability #xss_attack #bug_bounty
Medium
I hack the online gambling via xss upload (part 2) (3500 USD)
So if you did not already read the part 1 here is the link
⤷ Title: The Art of WAF Bypass: Advanced Techniques and Strategies for Ethical Hackers
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:02:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty_tips #cyber_security_awareness #bug_bounty
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:02:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty_tips #cyber_security_awareness #bug_bounty
Medium
The Art of WAF Bypass: Advanced Techniques and Strategies for Ethical Hackers
Introduction
⤷ Title: ️♂️ When Google Became My Personal Vulnerability Scanner and helped me to find Exposed…
════════════════════════
𐀪 Author: Gokuleswaran B
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:47:54 GMT
════════════════════════
⌗ Tags: #dorks #bug_bounty_tips #bug_bounty_writeup #vulnerability #bug_bounty
════════════════════════
𐀪 Author: Gokuleswaran B
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:47:54 GMT
════════════════════════
⌗ Tags: #dorks #bug_bounty_tips #bug_bounty_writeup #vulnerability #bug_bounty
Medium
🕵️♂️ When Google Became My Personal Vulnerability Scanner and helped me to find Exposed…
Ever heard of a free vulnerability scanner that requires zero installation? Spoiler alert: It’s called Google.
⤷ Title: PORT KNOCKING
════════════════════════
𐀪 Author: XploitHunter
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:41:43 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #port_knocking #network_penetration #educational
════════════════════════
𐀪 Author: XploitHunter
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:41:43 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #port_knocking #network_penetration #educational
Medium
PORT KNOCKING
TL;DR
⤷ Title: Using LSB To Hide Data In My Socks
════════════════════════
𐀪 Author: Rutger Flohil
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:23:27 GMT
════════════════════════
⌗ Tags: #steganography #cybersecurity #python #hacking #programming
════════════════════════
𐀪 Author: Rutger Flohil
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:23:27 GMT
════════════════════════
⌗ Tags: #steganography #cybersecurity #python #hacking #programming
Medium
Using LSB To Hide Data In My Socks
Hiding Data In Plain Sight — Part Two
⤷ Title: I hack the online gambling via xss upload (part 1) 5000 USD)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:42:03 GMT
════════════════════════
⌗ Tags: #hacking #bugbounty_writeup #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:42:03 GMT
════════════════════════
⌗ Tags: #hacking #bugbounty_writeup #cybersecurity #bug_bounty
Medium
I hack the online gambling via xss upload (part 1) (5000 USD)
Lets dive directly on the bug so your reading time will not be wasted.
⤷ Title: Critical IDOR on chat message (1000 USD)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:12:07 GMT
════════════════════════
⌗ Tags: #bugbounty_tips #cybersecurity #hacking #bug_bounty
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:12:07 GMT
════════════════════════
⌗ Tags: #bugbounty_tips #cybersecurity #hacking #bug_bounty
Medium
Critical IDOR on chat message (1000 USD)
When I was hunting on a private program, I noticed an API that was not included in their scope, so I ignored it. However, after hunting for…
⤷ Title: Zero Architecture: A Paradigm Shift in Cybersecurity
════════════════════════
𐀪 Author: Aashish Baweja
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 04:09:34 GMT
════════════════════════
⌗ Tags: #architecture #hacking #machine_learning #cybersecurity #cyber_security_awareness
════════════════════════
𐀪 Author: Aashish Baweja
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 04:09:34 GMT
════════════════════════
⌗ Tags: #architecture #hacking #machine_learning #cybersecurity #cyber_security_awareness
Medium
Zero Architecture: A Paradigm Shift in Cybersecurity
Zero Architecture model
⤷ Title: TryHackMe SAL1 Certification Complete Review & Walkthrough
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:14:30 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #tryhackme_walkthrough #cybersecurity #cyberattack
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:14:30 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #tryhackme_walkthrough #cybersecurity #cyberattack
Medium
TryHackMe SAL1 Certification Complete Review & Walkthrough
The TryHackMe SAL1 Certification offers a robust framework for individuals aiming to deepen their cybersecurity expertise. Through a series…
⤷ Title: How I Achieved the Hall of Fame on a U.S. Government Website
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 04:08:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #infosec #hacking #us_government
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 04:08:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #infosec #hacking #us_government
Medium
How I Achieved Hall of Fame on a U.S. Government Website💥
I’m Abhijeet Kumawat, a passionate security researcher 🕵️♂️, and today, I’m excited to share a recent vulnerability story of how I…