New Writeup❗️
Date: Wed, 13 Jun 2018 16:43:44 GMT
Title: Vulnerability Netflix (cross-site-scripting) XSS
Link: https://medium.com/p/d44010142e2c
Date: Wed, 13 Jun 2018 16:43:44 GMT
Title: Vulnerability Netflix (cross-site-scripting) XSS
Link: https://medium.com/p/d44010142e2c
Medium
Vulnerability Netflix (cross-site-scripting) XSS
Today I wanted to share with you my first vulnerability found in the bugbounty programs. It's the first time I do a POST about a bug. I…
New Writeup❗️
Date: Thu, 16 Feb 2023 07:39:11 GMT
Title: Misusing Azure to get pre-login system shell on your managed device
Link: https://medium.com/p/3f213b976683
Date: Thu, 16 Feb 2023 07:39:11 GMT
Title: Misusing Azure to get pre-login system shell on your managed device
Link: https://medium.com/p/3f213b976683
Medium
Misusing Azure to get pre-login system shell on your managed device
and how you can disable the Bitlocker Recovery key visibility in Azure.
New Writeup❗️
Date: Tue, 22 Nov 2022 09:06:00 GMT
Title: Bug Bounty Tips and Getting Persistence With Electron Applications
Link: https://medium.com/p/c538d4dda446
Date: Tue, 22 Nov 2022 09:06:00 GMT
Title: Bug Bounty Tips and Getting Persistence With Electron Applications
Link: https://medium.com/p/c538d4dda446
Medium
Bug Bounty Tips and Getting Persistence With Electron Applications
By repacking asar files, electron applications, and other bug bounty tips. Starring Signal, Discord, Nordpass, and more
New Writeup❗️
Date: Wed, 16 Nov 2022 09:27:11 GMT
Title: DLL Hijacking Persistence Using Discord
Link: https://medium.com/p/80691a63c559
Date: Wed, 16 Nov 2022 09:27:11 GMT
Title: DLL Hijacking Persistence Using Discord
Link: https://medium.com/p/80691a63c559
Medium
DLL Hijacking Persistence Using Discord
How old hacking techniques like DLL Hijacking still work in the present day and how you can find them yourself.
New Writeup❗️
Date: Sat, 12 Nov 2022 13:28:47 GMT
Title: Getting Stealthy Persistence Using Visual Studio Code
Link: https://medium.com/p/67e731bea34a
Date: Sat, 12 Nov 2022 13:28:47 GMT
Title: Getting Stealthy Persistence Using Visual Studio Code
Link: https://medium.com/p/67e731bea34a
Medium
Getting Stealthy Persistence Using Visual Studio Code
By misusing the settings file
New Writeup❗️
Date: Fri, 11 Nov 2022 07:46:26 GMT
Title: Getting persistence using Git bash
Link: https://medium.com/p/e82c999652f
Date: Fri, 11 Nov 2022 07:46:26 GMT
Title: Getting persistence using Git bash
Link: https://medium.com/p/e82c999652f
Medium
Getting persistence using Git bash
Gething persistence with the windows terminal made me eager to search for more possible persistence methods. Being a full time software…
New Writeup❗️
Date: Wed, 09 Nov 2022 06:50:36 GMT
Title: Stealthy Persistence While Using Windows Terminal.
Link: https://medium.com/p/ff6f4927563a
Date: Wed, 09 Nov 2022 06:50:36 GMT
Title: Stealthy Persistence While Using Windows Terminal.
Link: https://medium.com/p/ff6f4927563a
Medium
Stealthy Persistence While Using Windows Terminal.
By misusing the setting file
New Writeup❗️
Date: Thu, 03 Nov 2022 06:16:49 GMT
Title: How I could have been the administrator for all Dutch companies and create invoices and still can…
Link: https://medium.com/p/de181160cec5
Date: Thu, 03 Nov 2022 06:16:49 GMT
Title: How I could have been the administrator for all Dutch companies and create invoices and still can…
Link: https://medium.com/p/de181160cec5
Medium
How I could have been the administrator for all Dutch companies and create invoices. And still can be…
This is how I got administrator rights for all Dutch companies with the ability to write invoices on a Dutch government agency application.
New Writeup❗️
Date: Tue, 13 Sep 2022 16:10:09 GMT
Title: Blind XSS and Time-Based SQL Injection to Admin Panel Control and Database Takeover
Link: https://medium.com/p/9b7645a53748
Date: Tue, 13 Sep 2022 16:10:09 GMT
Title: Blind XSS and Time-Based SQL Injection to Admin Panel Control and Database Takeover
Link: https://medium.com/p/9b7645a53748
Medium
Blind XSS and Time-Based SQL Injection to Admin Panel Control and Database Takeover
Hello Fellas,
🗿1
New Writeup❗️
Date: Fri, 12 Aug 2022 06:23:52 GMT
Title: Contentful Access Token Disclosure in Android APK
Link: https://medium.com/p/ace5f7bdf98
Date: Fri, 12 Aug 2022 06:23:52 GMT
Title: Contentful Access Token Disclosure in Android APK
Link: https://medium.com/p/ace5f7bdf98
Medium
Contentful Access Token Disclosure in Android APK
Hello, My name is Ali, a Penetration Tester and a Certified Ethical Hacker. It’s my first write-up of 2022 on Android APK Pen testing. I…
New Writeup❗️
Date: Sat, 24 Dec 2022 05:35:59 GMT
Title: How I hacked into police and ivoted attack to RCE
Link: https://medium.com/p/83e5c7e5dfd6
Date: Sat, 24 Dec 2022 05:35:59 GMT
Title: How I hacked into police and ivoted attack to RCE
Link: https://medium.com/p/83e5c7e5dfd6
Medium
How I hacked into police and ivoted attack to RCE
Let’s breach in guys,So there was Section for the appreciation letters on site which has public appreciation letters of police.wich has…
New Writeup❗️
Date: Fri, 14 Oct 2022 17:26:11 GMT
Title: Story about Escalation of HTML Injection to EC2 Instance credentials leak
Link: https://medium.com/p/e2cbd7343a83
Date: Fri, 14 Oct 2022 17:26:11 GMT
Title: Story about Escalation of HTML Injection to EC2 Instance credentials leak
Link: https://medium.com/p/e2cbd7343a83
Medium
Story about Escalation of HTML Injection to EC2 Instance credentials leak
Hello all, Thank for the overwhelming response here I am with my new finding tale.
New Writeup❗️
Date: Sat, 01 Oct 2022 18:12:06 GMT
Title: Tale of Easy P1 Bugs in Wild
Link: https://medium.com/p/1b7f5bf80eef
Date: Sat, 01 Oct 2022 18:12:06 GMT
Title: Tale of Easy P1 Bugs in Wild
Link: https://medium.com/p/1b7f5bf80eef
Medium
Tale of Easy P1 Bugs in Wild
So after long time, i got back on bugcrowd where i had private program so i looked at scope it was wildcard (*.redicated.com) scope.I…
New Writeup❗️
Date: Thu, 31 Dec 2020 06:29:06 GMT
Title: Threat Hunting 101— Part1
Link: https://medium.com/p/4f7e544a2df2
Date: Thu, 31 Dec 2020 06:29:06 GMT
Title: Threat Hunting 101— Part1
Link: https://medium.com/p/4f7e544a2df2
Medium
Threat Hunting 101— Part1
This is a primer for threat hunting. I would be doing a series of articles around it. So let’s start by defining what threat hunting is…
New Writeup❗️
Date: Sun, 27 Sep 2020 21:51:31 GMT
Title: What is a Magic Byte and how to exploit
Link: https://medium.com/p/1e286da1c198
Date: Sun, 27 Sep 2020 21:51:31 GMT
Title: What is a Magic Byte and how to exploit
Link: https://medium.com/p/1e286da1c198
Medium
What is a Magic Byte and how to exploit
You might be wondering what exactly is magic byte and what is so magical about it. Don’t worry if you are a programmer you might already…
New Writeup❗️
Date: Sun, 13 Sep 2020 16:42:30 GMT
Title: Business logic vulnerabilities — Low-level logic flaw
Link: https://medium.com/p/f308a21a945d
Date: Sun, 13 Sep 2020 16:42:30 GMT
Title: Business logic vulnerabilities — Low-level logic flaw
Link: https://medium.com/p/f308a21a945d
Medium
Business logic vulnerabilities — Low-level logic flaw
This is the third of the series of articles for business logic vulnerabilities. This one is more complicated than the previous two.
New Writeup❗️
Date: Sat, 12 Sep 2020 12:30:20 GMT
Title: Business logic vulnerabilities — High-level logic vulnerability
Link: https://medium.com/p/9f89c7ac11b
Date: Sat, 12 Sep 2020 12:30:20 GMT
Title: Business logic vulnerabilities — High-level logic vulnerability
Link: https://medium.com/p/9f89c7ac11b
Medium
Business logic vulnerabilities — High-level logic vulnerability
This is the second in the series of various Business login vulnerabilities. You can find the first one here.
New Writeup❗️
Date: Tue, 08 Sep 2020 08:54:06 GMT
Title: Business Logic Vulnerabilities excessive client-side controls
Link: https://medium.com/p/c6a1f9a2e6ab
Date: Tue, 08 Sep 2020 08:54:06 GMT
Title: Business Logic Vulnerabilities excessive client-side controls
Link: https://medium.com/p/c6a1f9a2e6ab
Medium
Business Logic Vulnerabilities excessive client-side controls
Think of a scenario where you login to an eCommerce website to buy something. Below are the steps you will follow.
New Writeup❗️
Date: Mon, 06 Apr 2020 17:33:23 GMT
Title: $3K Bounty For Elastic-Search Takeover
Link: https://medium.com/p/70c0847d2e40
Date: Mon, 06 Apr 2020 17:33:23 GMT
Title: $3K Bounty For Elastic-Search Takeover
Link: https://medium.com/p/70c0847d2e40
Medium
$3K Bounty For Elastic-Search Takeover
Hello, Everyone
New Writeup❗️
Date: Fri, 25 Oct 2019 11:26:26 GMT
Title: How I Tookover a ldap server.
Link: https://medium.com/p/703209161001
Date: Fri, 25 Oct 2019 11:26:26 GMT
Title: How I Tookover a ldap server.
Link: https://medium.com/p/703209161001
Medium
How I Tookover a ldap server.
Intro