⤷ Title: VSFTPD — Backdoor Command Execution Vulnerability Exploitation
════════════════════════
𐀪 Author: Sahan Thilina
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 23:40:30 GMT
════════════════════════
⌗ Tags: #ftp #backdoor #vsftpd #rce #cve_2011_02523
════════════════════════
𐀪 Author: Sahan Thilina
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 23:40:30 GMT
════════════════════════
⌗ Tags: #ftp #backdoor #vsftpd #rce #cve_2011_02523
Medium
VSFTPD — Backdoor Command Execution Vulnerability Exploitation
It is important to be aware of the numerous vulnerabilities in the dynamic cyber world in order to better prepare for them. The writer…
⤷ Title: How I Found and Reported a Critical XSS Vulnerability in AT&T’s Subdomain (Now Patched)
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 12:47:40 GMT
════════════════════════
⌗ Tags: #responsible_disclosure #ethical_hacking #hackerone_report #xss_vulnerability #web_security
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 12:47:40 GMT
════════════════════════
⌗ Tags: #responsible_disclosure #ethical_hacking #hackerone_report #xss_vulnerability #web_security
Medium
How I Found and Reported a Critical XSS Vulnerability in AT&T’s Subdomain (Now Patched)
Subtitle: A case study in responsible disclosure and the importance of input validation
⤷ Title: Stored XSS — Escalated from High to Critical
════════════════════════
𐀪 Author: 3NVZ
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 02:04:10 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty_tips #bug_bounty #xss_vulnerability #bug_bounty_writeup
════════════════════════
𐀪 Author: 3NVZ
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 02:04:10 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty_tips #bug_bounty #xss_vulnerability #bug_bounty_writeup
Medium
Stored XSS — Escalated from High to Critical
Recently, I discovered a critical stored XSS vulnerability on a self-hosted HackerOne bug bounty program. This issue was severe enough to…
⤷ Title: Understanding DOM-based XSS
════════════════════════
𐀪 Author: Evyeveline
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 13:09:05 GMT
════════════════════════
⌗ Tags: #web_hacking #red_team #dom_based_xss #xss_vulnerability #bug_bounty
════════════════════════
𐀪 Author: Evyeveline
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 13:09:05 GMT
════════════════════════
⌗ Tags: #web_hacking #red_team #dom_based_xss #xss_vulnerability #bug_bounty
Medium
Understanding DOM-based XSS
I am fairly new to coding, and while I understand the basic I’m still getting familiar with classes and their functions. When I came across…
⤷ Title: Using Blind XSS to steal session cookies and log in as a different user
════════════════════════
𐀪 Author: Evyeveline
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 13:00:04 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #bug_bounty #web_hacking #xss_attack #ethical_hacking
════════════════════════
𐀪 Author: Evyeveline
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 13:00:04 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #bug_bounty #web_hacking #xss_attack #ethical_hacking
Medium
Using Blind XSS to steal session cookies and log in as a different user
Cross-Site Scripting is still very common nowadays, especially when it comes to phishing attacks and session hijacking. It’s relatively…
⤷ Title: Beginners Walk-through Portswigger Labs SQL Injection Lab 13-Lab 18
════════════════════════
𐀪 Author: Rhythm Babu Kafle
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 07:00:24 GMT
════════════════════════
⌗ Tags: #portswigger #walkthrough #web_security #sql_injection #cybersecurity
════════════════════════
𐀪 Author: Rhythm Babu Kafle
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 07:00:24 GMT
════════════════════════
⌗ Tags: #portswigger #walkthrough #web_security #sql_injection #cybersecurity
Medium
Beginners Walk-through Portswigger Labs SQL Injection Lab 13-Lab 18
Let’s continue our series in solving the portswiggers lab’s SQL Injection series, with the aim of completing it this time.
⤷ Title: SQL Injection Attacks
════════════════════════
𐀪 Author: Maleesha Rathnayaka
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 16:25:28 GMT
════════════════════════
⌗ Tags: #attack #learn #sql_injection #information_security #cybersecurity
════════════════════════
𐀪 Author: Maleesha Rathnayaka
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 16:25:28 GMT
════════════════════════
⌗ Tags: #attack #learn #sql_injection #information_security #cybersecurity
Medium
SQL Injection Attacks
SQL Injection Attack කියන්නේ attacker කෙනෙක් web application එකක් හරහා database එකට unauthorized commands run කරන attack type එකක්. මේක web…
⤷ Title: SQL injection part — 11 : listing the database contents on non-Oracle databases
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #database_security #sql_injection #web_security #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:18:33 GMT
════════════════════════
⌗ Tags: #database_security #sql_injection #web_security #penetration_testing #cybersecurity
Medium
SQL injection part — 11 : listing the database contents on non-Oracle databases
Hallo CyberExplorer . . . . . .
⤷ Title: What is SQL injection ?
════════════════════════
𐀪 Author: Gohar Ghukasyan
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 12:48:26 GMT
════════════════════════
⌗ Tags: #programming #programming_languages #hacker #vulnerability #sql_injection
════════════════════════
𐀪 Author: Gohar Ghukasyan
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 12:48:26 GMT
════════════════════════
⌗ Tags: #programming #programming_languages #hacker #vulnerability #sql_injection
Medium
What is SQL injection ?
SQL injection (SQLi) is a code injection technique that enables attackers to manipulate a database query.
⤷ Title: How to Install and Use SQLmap in Termux for SQL Injection Testing
════════════════════════
𐀪 Author: Stephanokambeta
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 00:52:39 GMT
════════════════════════
⌗ Tags: #termux #sql_server #termux_tutorial #sql_injection #sqlmap
════════════════════════
𐀪 Author: Stephanokambeta
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 00:52:39 GMT
════════════════════════
⌗ Tags: #termux #sql_server #termux_tutorial #sql_injection #sqlmap
Medium
How to Install and Use SQLmap in Termux for SQL Injection Testing
Originally published at https://terminaltools.blogspot.com
⤷ Title: SQL injection part — 10 : Querying the database type and version on MySQL and Microsoft
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 17:04:52 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #sql_injection #cybersecurity #unionbasedsqli
════════════════════════
𐀪 Author: Ahmad Sopyan
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 17:04:52 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #sql_injection #cybersecurity #unionbasedsqli
Medium
SQL injection part — 10 : Querying the database type and version on MySQL and Microsoft
Hallo CyberExplorer . . . . . .
⤷ Title: SQL injection attack, listing the database contents on non Oracle databases
════════════════════════
𐀪 Author: Fidan Gasimzada
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 17:02:41 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #sql_injection
════════════════════════
𐀪 Author: Fidan Gasimzada
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 17:02:41 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #sql_injection
Medium
SQL injection attack, listing the database contents on non Oracle databases
SQL injection veb saytların verilənlər bazalarına icazəsiz daxil olmaq üçün istifadə edilən bir üsuldur. Bu hücum zamanı, zərərli kod…
⤷ Title: From Admin to Ghost: Post-Removal Access Control Bypass in Team Management Functionality
════════════════════════
𐀪 Author: NH Limon ️
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:46:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
════════════════════════
𐀪 Author: NH Limon ️
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:46:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty
Medium
From Admin to Ghost: Post-Removal Access Control Bypass in Team Management Functionality
Note: This is my first write-up on Medium! Super excited to finally start writing on Medium about my bug bounty findings and more. Feedback…
⤷ Title: From “Buck Bounty?” to My First Real Bug Bounty
════════════════════════
𐀪 Author: Kailaas
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:29:03 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Kailaas
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:29:03 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #cybersecurity
Medium
From “Buck Bounty?” to My First Real Bug Bounty
Two months ago, I didn’t even know what bug bounty was. I was just chatting with a friend about internships when he casually mentioned the term bug bounty. That one random conversation changed…
⤷ Title: Bypass rate limit & get Application-Level DDoS Vulnerability
════════════════════════
𐀪 Author: Frostyxsec
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:17:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #bug_bounty_tips #cybersecurity #bug_bounty_writeup
════════════════════════
𐀪 Author: Frostyxsec
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:17:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_hunting #bug_bounty_tips #cybersecurity #bug_bounty_writeup
Medium
Bypass rate limit & get Application-Level DDoS Vulnerability in BBP
💻 Intro: Hacking No Rate Limit in the Wild Ever wondered how some apps fail to properly secure their OTP verification process? Well, I…
⤷ Title: Bypass Rate Limit on Reset Password Feature Using X-Forwarded-For Header
════════════════════════
𐀪 Author: ilhamm.0a
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 04:28:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_app_security #bug_bounty_tips #bug_bounty_writeup
════════════════════════
𐀪 Author: ilhamm.0a
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 04:28:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_app_security #bug_bounty_tips #bug_bounty_writeup
Medium
Bypass Rate Limit on Reset Password Feature Using X-Forwarded-For Header
Hello everyone! In this post, I want to share my personal experience discovering and exploiting a vulnerability in the rate limit system of
⤷ Title: Spynote, BadBazaar & Moonshine: The Malware Mafia That’s Eyeing Your Phone
════════════════════════
𐀪 Author: The Cyber Ghost
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 04:16:17 GMT
════════════════════════
⌗ Tags: #malware #bug_bounty #bug_bounty_writeup #virus #cyber_security_awareness
════════════════════════
𐀪 Author: The Cyber Ghost
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 04:16:17 GMT
════════════════════════
⌗ Tags: #malware #bug_bounty #bug_bounty_writeup #virus #cyber_security_awareness
Medium
📱💀 Spynote, BadBazaar & Moonshine: The Malware Mafia That’s Eyeing Your Phone
Hey you. Yeah, you scrolling through your phone, probably thinking it’s just another chill day online. Well… not to freak you out, but what…
⤷ Title: Quick and Easy Way to Start Earning Recon Solana $RECON Tokens
════════════════════════
𐀪 Author: RECON
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:44:02 GMT
════════════════════════
⌗ Tags: #recon #crypto #airdrop #recon_solana
════════════════════════
𐀪 Author: RECON
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:44:02 GMT
════════════════════════
⌗ Tags: #recon #crypto #airdrop #recon_solana
Medium
Quick and Easy Way to Start Earning Recon Solana $RECON Tokens
Follow this guide to easily start receiving $RECON and begin earning.
⤷ Title: From Recon to Root Cause: My First Pentest Bug
════════════════════════
𐀪 Author: Nextk
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 00:53:48 GMT
════════════════════════
⌗ Tags: #hacking #exploitation #web_bug_bounty #recon #ethical_hacking
════════════════════════
𐀪 Author: Nextk
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 00:53:48 GMT
════════════════════════
⌗ Tags: #hacking #exploitation #web_bug_bounty #recon #ethical_hacking
Medium
From Recon to Root Cause: My First Pentest Bug 🐞
A while ago, I was approached by a company whose mission is to provide a platform where employers can gift rewards to their employees — a…
⤷ Title: iOS-Pentesting-101: Jail Breaking iOS 16.7.x+ on iPhone 8/X
════════════════════════
𐀪 Author: sudosuraj
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 07:25:01 GMT
════════════════════════
⌗ Tags: #ios_bug_bounty #sudosuraj #bug_bounty_tips #bug_bounty #mobile_security
════════════════════════
𐀪 Author: sudosuraj
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 07:25:01 GMT
════════════════════════
⌗ Tags: #ios_bug_bounty #sudosuraj #bug_bounty_tips #bug_bounty #mobile_security
Medium
iOS-Pentesting-101: Jail Breaking iOS 16.7.x+ on iPhone 8/X
In this article, we’ll cover setting up an iOS pen-testing lab by jailbreaking an iPhone 8 or iPhone X running iOS 16.7+
⤷ Title: ⚡️Oops, They Logged It! Turning LFI into Remote Shell Like a Pro ⚔️
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 10:10:26 GMT
════════════════════════
⌗ Tags: #money #bug_bounty_tips #hacking #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 10:10:26 GMT
════════════════════════
⌗ Tags: #money #bug_bounty_tips #hacking #bug_bounty #cybersecurity
Medium
⚡️Oops, They Logged It! 🤭 Turning LFI into Remote Shell Like a Pro 💻⚔️🚫💸
Free Link🎈