New Writeup❗️
Date: Wed, 09 Jun 2021 15:54:38 GMT
Title: Second Order Race Condition
Link: https://medium.com/p/be8aaf774783
Date: Wed, 09 Jun 2021 15:54:38 GMT
Title: Second Order Race Condition
Link: https://medium.com/p/be8aaf774783
Medium
Second Order Race Condition
Hi everyone , I have found this bug on a public program on h1 some times back.
New Writeup❗️
Date: Sat, 22 Jan 2022 11:03:24 GMT
Title: Linux sets the timeout period of sudo
Link: https://medium.com/p/8d2785745d95
Date: Sat, 22 Jan 2022 11:03:24 GMT
Title: Linux sets the timeout period of sudo
Link: https://medium.com/p/8d2785745d95
Medium
Linux sets the timeout period of sudo
By default, the timeout period of sudo is 15 minutes, that is to say, within 15 minutes after the last sudo command, you do not need to…
New Writeup❗️
Date: Sun, 21 Nov 2021 04:15:31 GMT
Title: CVE-2021–41277 Metabase sensitive information disclosure
Link: https://medium.com/p/c795b79bc562
Date: Sun, 21 Nov 2021 04:15:31 GMT
Title: CVE-2021–41277 Metabase sensitive information disclosure
Link: https://medium.com/p/c795b79bc562
Medium
CVE-2021–41277 Metabase sensitive information disclosure
CVE-2021–41277 Metabase sensitive information disclosure The vulnerability CVSS score: 9.9, damage level: severe FOFA: app="metabase" Affected version: metabase version < 0.40.5 metabase version >= …
New Writeup❗️
Date: Sun, 21 Nov 2021 03:42:06 GMT
Title: picoCTF Stonks writeup
Link: https://medium.com/p/d454d806bc2
Date: Sun, 21 Nov 2021 03:42:06 GMT
Title: picoCTF Stonks writeup
Link: https://medium.com/p/d454d806bc2
Medium
picoCTF Stonks writeup
make and run it:
New Writeup❗️
Date: Mon, 15 Nov 2021 04:41:15 GMT
Title: MySQL Privilege Escalation Notes
Link: https://medium.com/p/b9ce3270e3d4
Date: Mon, 15 Nov 2021 04:41:15 GMT
Title: MySQL Privilege Escalation Notes
Link: https://medium.com/p/b9ce3270e3d4
Medium
MySQL Privilege Escalation Notes
Determining MySQL runtime privileges
New Writeup❗️
Date: Sun, 14 Nov 2021 03:23:34 GMT
Title: CVE-2021–3945 Django-helpdesk stored XSS
Link: https://medium.com/p/2fc760a8889d
Date: Sun, 14 Nov 2021 03:23:34 GMT
Title: CVE-2021–3945 Django-helpdesk stored XSS
Link: https://medium.com/p/2fc760a8889d
Medium
CVE-2021–3945 Django-helpdesk stored XSS
Django-helpdesk is an open-source ticket system (plug-in) written based on Django, which can be directly integrated into your own Django…
New Writeup❗️
Date: Tue, 09 Nov 2021 02:49:53 GMT
Title: Bypass Chrome Ad-Heavy detection mechanism
Link: https://medium.com/p/25c9e2e4a0c4
Date: Tue, 09 Nov 2021 02:49:53 GMT
Title: Bypass Chrome Ad-Heavy detection mechanism
Link: https://medium.com/p/25c9e2e4a0c4
Medium
Bypass Chrome Ad-Heavy detection mechanism
Bypass Chrome Ad-Heavy detection mechanism Description: The Chrome Ad-Heavy mechanism prevents attacks against malware that may masquerade as ads. Researchers have discovered a vulnerability in the …
New Writeup❗️
Date: Tue, 09 Nov 2021 02:34:19 GMT
Title: The difference between DNS recursive and iterative resolution
Link: https://medium.com/p/3578a1dc903e
Date: Tue, 09 Nov 2021 02:34:19 GMT
Title: The difference between DNS recursive and iterative resolution
Link: https://medium.com/p/3578a1dc903e
Medium
The difference between DNS recursive and iterative resolution
The DNS resolution process is divided into recursive queries and iterative queries, with recursive queries being local name server-centric…
New Writeup❗️
Date: Mon, 12 Sep 2022 16:00:34 GMT
Title: SSRF(g/vrp) for 5000$
Link: https://medium.com/p/d08c8f515c95
Date: Mon, 12 Sep 2022 16:00:34 GMT
Title: SSRF(g/vrp) for 5000$
Link: https://medium.com/p/d08c8f515c95
Medium
SSRF(g/vrp) for 5000$
Hi.
New Writeup❗️
Date: Sat, 02 Jul 2022 15:43:57 GMT
Title: Admin account takeover via weird Password Reset Functionality
Link: https://medium.com/p/166ce90b1e58
Date: Sat, 02 Jul 2022 15:43:57 GMT
Title: Admin account takeover via weird Password Reset Functionality
Link: https://medium.com/p/166ce90b1e58
Medium
Admin account takeover via weird Password Reset Functionality
Hello all, I hope you’re fine! Our story today is a funny ATO I recently found it, so I decided to share it with you.
New Writeup❗️
Date: Sun, 15 May 2022 15:59:15 GMT
Title: How I managed to take over any account visits my profile with Stored XSS
Link: https://medium.com/p/6b378d33e90f
Date: Sun, 15 May 2022 15:59:15 GMT
Title: How I managed to take over any account visits my profile with Stored XSS
Link: https://medium.com/p/6b378d33e90f
Medium
0-click ATO via Stored-XSS
Hello everybody, today we have a simple Stored XSS vulnerability that leads to stealing cookies and Taking over the account. Let’s start
New Writeup❗️
Date: Tue, 14 Dec 2021 17:40:07 GMT
Title: How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Link: https://medium.com/p/2824cd4dfab
Date: Tue, 14 Dec 2021 17:40:07 GMT
Title: How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Link: https://medium.com/p/2824cd4dfab
Medium
How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Hello all, hope you’re OK. Our journey today is about how I found multiple SQL Injections in a bug bounty program in just a few minutes…
🗿1
New Writeup❗️
Date: Sat, 06 Nov 2021 10:23:56 GMT
Title: How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Link: https://medium.com/p/9c3bb3780e8f
Date: Sat, 06 Nov 2021 10:23:56 GMT
Title: How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Link: https://medium.com/p/9c3bb3780e8f
Medium
How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes
Hello all, hope you’re OK. Our journey today is about how I found multiple SQL Injection in a BugBounty program in just few minutes with a…
🗿1
New Writeup❗️
Date: Sun, 20 Sep 2020 17:36:01 GMT
Title: Cybertalents Quals : Saudi, Sudan, Egypt and Tunisia National CTF 2020 Write-Up
Link: https://medium.com/p/a2de89bdcf
Date: Sun, 20 Sep 2020 17:36:01 GMT
Title: Cybertalents Quals : Saudi, Sudan, Egypt and Tunisia National CTF 2020 Write-Up
Link: https://medium.com/p/a2de89bdcf
Medium
Cybertalents Quals : Saudi, Sudan, Egypt and Tunisia National CTF 2020 Write-Up
Cybertalents Quals Challenges Write-Up
New Writeup❗️
Date: Mon, 12 Dec 2022 20:43:43 GMT
Title: PII data exfiltration within minutes
Link: https://medium.com/p/f06d4587d201
Date: Mon, 12 Dec 2022 20:43:43 GMT
Title: PII data exfiltration within minutes
Link: https://medium.com/p/f06d4587d201
Medium
PII data exfiltration within minutes
Hello Everyone,
New Writeup❗️
Date: Sun, 19 Sep 2021 17:10:39 GMT
Title: How a simple manipulation let me buy anything for free?
Link: https://medium.com/p/76d2fd253949
Date: Sun, 19 Sep 2021 17:10:39 GMT
Title: How a simple manipulation let me buy anything for free?
Link: https://medium.com/p/76d2fd253949
Medium
How a simple manipulation let me buy anything for free?
Hello guys, as you all know my name is Mayank Garg and this is my second blog on my medium. This is not any kind of a write-up or a…
New Writeup❗️
Date: Sat, 24 Apr 2021 13:12:20 GMT
Title: Oopsie — HacktheBox Writeup ( getting root flag without actually being root )
Link: https://medium.com/p/88a9d171bbbc
Date: Sat, 24 Apr 2021 13:12:20 GMT
Title: Oopsie — HacktheBox Writeup ( getting root flag without actually being root )
Link: https://medium.com/p/88a9d171bbbc
Medium
Oopsie — HacktheBox Writeup ( getting root flag without actually being root )
Introduction:
New Writeup❗️
Date: Fri, 16 Dec 2022 18:37:08 GMT
Title: Simple CORS misconfig leads to disclose the sensitive token worth of $$$
Link: https://medium.com/p/91433763f4d6
Date: Fri, 16 Dec 2022 18:37:08 GMT
Title: Simple CORS misconfig leads to disclose the sensitive token worth of $$$
Link: https://medium.com/p/91433763f4d6
Medium
Simple CORS misconfig leads to disclose the sensitive token worth of $$$
Hey fellow hacker’s and Bug hunters , Recently i found some weird CORS misconfiguration in one of my targets.
New Writeup❗️
Date: Fri, 18 Feb 2022 04:13:45 GMT
Title: How I took over the Manager’s account in Bus Booking website.
Link: https://medium.com/p/168c56430302
Date: Fri, 18 Feb 2022 04:13:45 GMT
Title: How I took over the Manager’s account in Bus Booking website.
Link: https://medium.com/p/168c56430302
Medium
How I took over the Manager’s account in Bus Booking website.
Hey fellow hackers and Bug hunters,
New Writeup❗️
Date: Sun, 30 Jan 2022 15:03:08 GMT
Title: How I exposed the teacher’s Aadhaar card, bank details on the college website.
Link: https://medium.com/p/3e8d44446378
Date: Sun, 30 Jan 2022 15:03:08 GMT
Title: How I exposed the teacher’s Aadhaar card, bank details on the college website.
Link: https://medium.com/p/3e8d44446378
Medium
How I exposed the teacher’s Aadhaar card, bank details on the college website.
Hey fellow hackers and Bug hunters,