New Writeup❗️
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Medium
Übersicht Remote Code Execution, Spotify takeover
some words on the security implications of locally hosted web services
New Writeup❗️
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Medium
Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
When a malicious actor gets access or changes is done to user account. A disavow email will be sent to the original email of the user. That…
New Writeup❗️
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Medium
Page Admin Disclosure when Posting a Reel
Hello , I’m Syd from the Philippines. Today I would like to share one of my findings in Meta Bug Bounty Program. The bug that I found is…
New Writeup❗️
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Medium
Spoof as another Facebook user to report an impostor account
When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…
New Writeup❗️
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Medium
This is how I can Turn Off Your Post Notification
Description/Impact: In m.facebook user can turn on post notification on a post. By turning it on user will be notified if someone reacted…
New Writeup❗️
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Medium
Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Description: Two Factor Authentication (2FA) is a security feature that helps Facebook users protect their account in addition to their…
New Writeup❗️
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Medium
The Joy of Building a Community through Patreon: My Journey with Cyberlix
As a cybersecurity professional, I have always been interested in finding ways to improve the security of organizations and individuals…
New Writeup❗️
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Medium
How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Breaking path normalisation has been my biggest interest in the past couple of years. Let me explain exactly why I have chosen to invest…
New Writeup❗️
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Medium
Tips For Developing A Hacker Mindset
Hey hackers, I hope you are all doing well. This write-up will be about the do’s and don’ts in bug bounty hunting and the pros & cons.
New Writeup❗️
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Medium
Breaking Parser Logic: Gain Access To NGINX Plus API — Read/Write Upstreams.
Hi hackers, in this talk I will explain how I could direct traffic from an internal server to my own by breaking the way their reverse…
New Writeup❗️
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Medium
What VPS to choose?
There are tons of cloud providers that offer different types of servers with a lot of different options. I will talk about the ones I…
New Writeup❗️
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Medium
SSRF to fetch AWS credentials with full access to multiple services
This is a post about how I found a simple yet really critical vulnerability in a bug bounty program. It was the most critical bug I have…
New Writeup❗️
Date: Fri, 30 Sep 2022 23:20:37 GMT
Title: Distributed Bruteforcing of DNS records
Link: https://medium.com/p/7ca481a2f501
Date: Fri, 30 Sep 2022 23:20:37 GMT
Title: Distributed Bruteforcing of DNS records
Link: https://medium.com/p/7ca481a2f501
Medium
Distributed Bruteforcing of DNS records
Using shuffleDNS/pureDNS + BBRF + Axiom
New Writeup❗️
Date: Tue, 20 Sep 2022 09:23:46 GMT
Title: Problem installing Nuclei
Link: https://medium.com/p/76cc3fbc3104
Date: Tue, 20 Sep 2022 09:23:46 GMT
Title: Problem installing Nuclei
Link: https://medium.com/p/76cc3fbc3104
Medium
Problem installing Nuclei
I recently had to reinstall Nuclei from scratch on a testing machine.
New Writeup❗️
Date: Mon, 16 Aug 2021 04:23:20 GMT
Title: How I took over several Stanford subdomains. Also, let me explain you the pain to report it!
Link: https://medium.com/p/d84b08704be8
Date: Mon, 16 Aug 2021 04:23:20 GMT
Title: How I took over several Stanford subdomains. Also, let me explain you the pain to report it!
Link: https://medium.com/p/d84b08704be8
Medium
How I took over several Stanford subdomains. Also, let me explain you the pain to report them!
While using nuclei and the template detect-all-takeovers.yaml, I found several (over 20) subdomains of Stanford (stanford.edu) what were…
New Writeup❗️
Date: Mon, 16 Aug 2021 04:22:31 GMT
Title: How to properly install Nuclei
Link: https://medium.com/p/2619989a5109
Date: Mon, 16 Aug 2021 04:22:31 GMT
Title: How to properly install Nuclei
Link: https://medium.com/p/2619989a5109
Medium
How to properly install Nuclei
Installation step by step avoiding pitfalls
New Writeup❗️
Date: Mon, 16 Aug 2021 04:19:52 GMT
Title: How to run Axiom and waybackurls against all your targets
Link: https://medium.com/p/bfc124fed918
Date: Mon, 16 Aug 2021 04:19:52 GMT
Title: How to run Axiom and waybackurls against all your targets
Link: https://medium.com/p/bfc124fed918
Medium
How to run Axiom and waybackurls against all your targets
This is a short and simple guide how to extract all the waybackurls (♥ tomnomnom) results from all your programs in a fast and simple way.
New Writeup❗️
Date: Tue, 27 Jul 2021 04:00:50 GMT
Title: Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Link: https://medium.com/p/908bea5f5802
Date: Tue, 27 Jul 2021 04:00:50 GMT
Title: Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Link: https://medium.com/p/908bea5f5802
Medium
Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Summary
New Writeup❗️
Date: Sun, 31 Jan 2021 03:38:05 GMT
Title: Distributed Bug Bounty Hunting using Axiom [DBBH]
Link: https://medium.com/p/e3c24a635b8
Date: Sun, 31 Jan 2021 03:38:05 GMT
Title: Distributed Bug Bounty Hunting using Axiom [DBBH]
Link: https://medium.com/p/e3c24a635b8
Medium
Distributed Bug Bounty Hunting using Axiom [DBBH]
Step by step how to install and run Axiom.
New Writeup❗️
Date: Sun, 31 Jan 2021 03:36:28 GMT
Title: How to run subfinder with Axiom
Link: https://medium.com/p/dc2fec98920c
Date: Sun, 31 Jan 2021 03:36:28 GMT
Title: How to run subfinder with Axiom
Link: https://medium.com/p/dc2fec98920c
Medium
How to run subfinder with Axiom
Or running subdomain finder in a distributed manner.
New Writeup❗️
Date: Wed, 26 Jul 2017 15:13:41 GMT
Title: sdfsdfgdsgdsfgsdfg
Link: https://medium.com/p/cc78420480e7
Date: Wed, 26 Jul 2017 15:13:41 GMT
Title: sdfsdfgdsgdsfgsdfg
Link: https://medium.com/p/cc78420480e7
Medium
sdfsdfgdsgdsfgsdfg
jhdafgdgsfdfsdfsdf