⤷ Title: Panda Shop Smishing Syndicate: China-Backed Cybercrime-as-a-Service Hits Millions Globally
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:10:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android RCS #Apple iMessage #carding #China cybercrime #cybercrime_as_a_service #Panda Shop #PII theft #Resecurity #smishing #Telegram fraud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:10:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android RCS #Apple iMessage #carding #China cybercrime #cybercrime_as_a_service #Panda Shop #PII theft #Resecurity #smishing #Telegram fraud
Daily CyberSecurity
Panda Shop Smishing Syndicate: China-Backed Cybercrime-as-a-Service Hits Millions Globally
Resecurity exposes Panda Shop smishing kit linked to Chinese cybercrime, targeting millions via iMessage and RCS with carding and data theft.
⤷ Title: Critical Open Source Library ‘easyjson’ Linked to Russian VK Group
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:02:16 +0000
════════════════════════
⌗ Tags: #Cyber Security #easyjson #Hunted Labs #Open Source Security #Russian cyber threat #Software Supply Chain #VK Group
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 May 2025 00:02:16 +0000
════════════════════════
⌗ Tags: #Cyber Security #easyjson #Hunted Labs #Open Source Security #Russian cyber threat #Software Supply Chain #VK Group
Daily CyberSecurity
Critical Open Source Library 'easyjson' Linked to Russian VK Group
Research reveals the widely used open source library 'easyjson' is controlled by developers linked to Russia's VK Group, raising security concerns.
⤷ Title: SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Wed, 07 May 2025 09:38:35 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Wed, 07 May 2025 09:38:35 GMT
════════════════════════
⌗ Tags: No_Tags
watchTowr Labs
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends)
It’s… another week, and another vendor who is apparently experienced with ransomware gangs but yet struggles with email.
In what we've seen others term "the watchTowr treatment", we are once again (surprise, surprise) disclosing vulnerability research that…
In what we've seen others term "the watchTowr treatment", we are once again (surprise, surprise) disclosing vulnerability research that…
⤷ Title: How to setup a Monthly Free VPS for Bug Hunting
════════════════════════
𐀪 Author: Mostafa Alrefai
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:50:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #github #cybersecurity #penetration_testing #hacking
════════════════════════
𐀪 Author: Mostafa Alrefai
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:50:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #github #cybersecurity #penetration_testing #hacking
Medium
How to setup a Monthly Free VPS for Bug Hunting
In this article, I explained how to setup and use (GitHub CodeSpaces) for bug hunting
⤷ Title: Revisiting the Past, Hacking the Future
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:48:54 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #programming #hacking #technology
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:48:54 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #programming #hacking #technology
Medium
Revisiting the Past, Hacking the Future
From Invalid Reports to Real Vulnerabilities: The Path to Growth in Hacking
⤷ Title: Hacking the Frontend Logic: Exploiting JavaScript Business Flaws
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:45:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #infosec #programming #bug_bounty
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:45:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #infosec #programming #bug_bounty
Medium
Hacking the Frontend Logic: Exploiting JavaScript Business Flaws 💼
Hacking the Frontend Logic: Exploiting JavaScript Business Flaws 💼
⤷ Title: A Must-Have Tool for Bug Hunters: Find Open Redirect Vulnerabilities on Linux
════════════════════════
𐀪 Author: Elie Attieh
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:43:51 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #bug_bounty #pentesting #ethical_hacking
════════════════════════
𐀪 Author: Elie Attieh
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:43:51 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #bug_bounty #pentesting #ethical_hacking
Medium
A Must-Have Tool for Bug Hunters: Find Open Redirect Vulnerabilities on Linux
Automate open redirection detection, save hours of manual testing, and level up your bug bounty recon game.
⤷ Title: Exploiting a Referer Header for Open Redirect
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:43:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #open_redirect #infosec #rewards #bug_bounty
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:43:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #open_redirect #infosec #rewards #bug_bounty
Medium
Exploiting a Referer Header for Open Redirect
Today, I’m excited to share how I found an open redirect vulnerability by manipulating the Referer header on a bug bounty program. In this article, I’ll walk you through: An open redirect happens…
⤷ Title: 2FA Bypass: A Case of Insecure Implementation
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:42:57 GMT
════════════════════════
⌗ Tags: #2fa_authentication #ethical_hacking #bug_bounty #penetration_testing #infosec
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:42:57 GMT
════════════════════════
⌗ Tags: #2fa_authentication #ethical_hacking #bug_bounty #penetration_testing #infosec
Medium
2FA Bypass: A Case of Insecure Implementation
Two-factor authentication (2FA) is widely seen as one of the best ways to secure user accounts. Whether it’s through SMS codes, authenticator apps, or hardware tokens, 2FA is meant to protect users…
⤷ Title: Stored HTML Injection — Email Invite Manipulation
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:39:21 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #bug_bounty #bug_bounty_writeup #html
════════════════════════
𐀪 Author: Ehtesham Ul Haq
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:39:21 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #bug_bounty #bug_bounty_writeup #html
Medium
Stored HTML Injection — Email Invite Manipulation
Introduction
⤷ Title: DOM-inated! How a Tiny JS Sink Turned Into Critical XSS
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:39:11 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #hacking #bug_bounty #money
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:39:11 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #hacking #bug_bounty #money
Medium
DOM-inated! How a Tiny JS Sink Turned Into Critical XSS 🚨🧬
Hey there!😁
⤷ Title: Query Confusion: How HTTP Parameter Pollution Made the App Spill Secrets
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #money #hacking
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #money #hacking
Medium
Query Confusion: How HTTP Parameter Pollution Made the App Spill Secrets 🧼📤
Hey there!😁
⤷ Title: $2,900 Bounty: Public S3 Bucket Exposure in Shopify
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:38:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #technology #report
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 07 May 2025 06:38:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #technology #report
Medium
$2,900 Bounty: Public S3 Bucket Exposure in Shopify
How a Simple S3 Misconfiguration Exposed Private Images Across Shopify Stores and Earned a $2,900 Bounty
⤷ Title: Cobalt Strike: como uma ferramenta de segurança virou motivo de tensão entre Brasil e Paraguai
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 06 May 2025 14:07:49 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 06 May 2025 14:07:49 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
Cobalt Strike: a origem da tensão entre Brasil e Paraguai
Entenda o que é o Cobalt Strike, como ele impactou as relações Brasil-Paraguai e como proteger sua empresa contra essa ameaça cibernética crescente.
⤷ Title: Exploring the Bug Bounty Program: A Gateway to Ethical Hacking and Cybersecurity Careers
════════════════════════
𐀪 Author: Anand Narayanan
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:09:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #cyber_security_courses #bug_bounty #ethical_hacking
════════════════════════
𐀪 Author: Anand Narayanan
════════════════════════
ⴵ Time: Wed, 07 May 2025 11:09:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #cyber_security_courses #bug_bounty #ethical_hacking
Medium
Exploring the Bug Bounty Program: A Gateway to Ethical Hacking and Cybersecurity Careers
As technology is embedding itself deeper and deeper into our daily lives, digital attackers are getting increasingly more sophisticated…
⤷ Title: How a JavaScript File Led Me to an Open Redirect Vulnerability
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:46:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #open_redirect #cybersecurity
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:46:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #open_redirect #cybersecurity
Medium
How a JavaScript File Led Me to an Open Redirect Vulnerability
Manual recon is underrated — and this bug proves it.
⤷ Title: SubNotifier
════════════════════════
𐀪 Author: Nahid Əliyev
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:16:41 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Nahid Əliyev
════════════════════════
ⴵ Time: Wed, 07 May 2025 10:16:41 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #bug_bounty
Medium
SubNotifier
Hi all, I’m a security researcher and love doing bug bounties. I created this tool for making subdomain scanning neater and smoother…
⤷ Title: Unveiling Critical Weaknesses: A Rigorous Penetration Test of a Web Application
════════════════════════
𐀪 Author: Tusharpuri
════════════════════════
ⴵ Time: Wed, 07 May 2025 09:20:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #application_security #infosec #offensive_security
════════════════════════
𐀪 Author: Tusharpuri
════════════════════════
ⴵ Time: Wed, 07 May 2025 09:20:58 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #application_security #infosec #offensive_security
Medium
Unveiling Critical Weaknesses: A Rigorous Penetration Test of a Web Application
In a recent penetration testing engagement, I was tasked with assessing the security of a web application designed to manage test metrics…
⤷ Title: JS Recon To HTML Injection
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Wed, 07 May 2025 08:37:38 GMT
════════════════════════
⌗ Tags: #information_technology #bug_bounty #programming #coding #hacking
════════════════════════
𐀪 Author: Raunak Gupta Aka Biscuit
════════════════════════
ⴵ Time: Wed, 07 May 2025 08:37:38 GMT
════════════════════════
⌗ Tags: #information_technology #bug_bounty #programming #coding #hacking
Medium
JS Recon To HTML Injection 😎
My Introduction
⤷ Title: “ Mastering Bug Bounty Recon: Tools & Techniques to Uncover Vulnerabilities ”
════════════════════════
𐀪 Author: Hex00
════════════════════════
ⴵ Time: Wed, 07 May 2025 08:12:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #recon #bug_bounty #bug_bounty_tips #subdomains_enumeration
════════════════════════
𐀪 Author: Hex00
════════════════════════
ⴵ Time: Wed, 07 May 2025 08:12:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #recon #bug_bounty #bug_bounty_tips #subdomains_enumeration
Medium
“🔍 Mastering Bug Bounty Recon: Tools & Techniques to Uncover Vulnerabilities 🚀💻”
Introduction:
⤷ Title: ️♂️ Unlisted but Not Unseen: How I Found the Admin Panel in a JavaScript Comment
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 07:59:03 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #money
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Wed, 07 May 2025 07:59:03 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #money
Medium
🕵️♂️💬 Unlisted but Not Unseen: How I Found the Admin Panel in a JavaScript Comment
Hey there!😁