New Writeup❗️
Date: Sun, 10 Oct 2021 06:17:26 GMT
Title: DigitalOverDose — CTF
Link: https://medium.com/p/c5c252c0c6e6
Date: Sun, 10 Oct 2021 06:17:26 GMT
Title: DigitalOverDose — CTF
Link: https://medium.com/p/c5c252c0c6e6
Medium
DigitalOverDose — CTF
Hello y’all, this is shellbreak again with another CTF. As I’m working as a web application penetration tester, I focus only on web…
New Writeup❗️
Date: Mon, 20 Sep 2021 07:15:25 GMT
Title: HacktivityconCTF 2021
Link: https://medium.com/p/dd2b03302825
Date: Mon, 20 Sep 2021 07:15:25 GMT
Title: HacktivityconCTF 2021
Link: https://medium.com/p/dd2b03302825
Medium
HacktivityconCTF 2021
Hello all, this is shellbreak, and today I’m going to showcase how I solved some web challenges in the hacktivitycon CTF 2021, so without…
New Writeup❗️
Date: Wed, 26 May 2021 09:44:53 GMT
Title: TryHackMe — Kenobi
Link: https://medium.com/p/bdec4cf6f581
Date: Wed, 26 May 2021 09:44:53 GMT
Title: TryHackMe — Kenobi
Link: https://medium.com/p/bdec4cf6f581
Medium
TryHackMe — Kenobi
TryHackMe — Kenobi What’s going on fellas, this is shellbreak back again with another write up about a room called knobi from TryHackMe, which is an easy room that involves a vulnerable FTP …
New Writeup❗️
Date: Tue, 25 May 2021 02:12:11 GMT
Title: TryHackMe — Vulnversity
Link: https://medium.com/p/a4784c505fe3
Date: Tue, 25 May 2021 02:12:11 GMT
Title: TryHackMe — Vulnversity
Link: https://medium.com/p/a4784c505fe3
Medium
TryHackMe — Vulnversity
TryHackMe — Vulnversity Hello guys, what’s going on, this is shellbreak, and today we’re gonna be doing Vulnversity from TryHackMe which is a pretty simple and straightforward machine that …
New Writeup❗️
Date: Thu, 20 May 2021 00:31:24 GMT
Title: TryHackMe — Blue
Link: https://medium.com/p/a73c11c3577f
Date: Thu, 20 May 2021 00:31:24 GMT
Title: TryHackMe — Blue
Link: https://medium.com/p/a73c11c3577f
Medium
TryHackMe — Blue
Hello guys, what’s going on , this is shellbreak, and today I’ll be doing the Blue room from TryHackMe, which is a pretty easy and fun…
New Writeup❗️
Date: Wed, 19 May 2021 23:45:08 GMT
Title: How I found my first Cross-Site Scripting Vulnerability
Link: https://medium.com/p/fd9ebed2b2a4
Date: Wed, 19 May 2021 23:45:08 GMT
Title: How I found my first Cross-Site Scripting Vulnerability
Link: https://medium.com/p/fd9ebed2b2a4
Medium
How I found my first Cross-Site Scripting Vulnerability
Hello all this is shellbreak, back again with another story of a bug I found apart from CTF challenges.
New Writeup❗️
Date: Sat, 30 Apr 2022 04:46:09 GMT
Title: ATO without any interaction [aws cognito misconfiguration]
Link: https://medium.com/p/d690f4b3da11
Date: Sat, 30 Apr 2022 04:46:09 GMT
Title: ATO without any interaction [aws cognito misconfiguration]
Link: https://medium.com/p/d690f4b3da11
Medium
Account takeover without any interaction [aws cognito misconfiguration]
Hello friends,
New Writeup❗️
Date: Sun, 01 Aug 2021 04:41:26 GMT
Title: How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Link: https://medium.com/p/d5a02b136506
Date: Sun, 01 Aug 2021 04:41:26 GMT
Title: How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Link: https://medium.com/p/d5a02b136506
Medium
How a simple “Hey!” can turn into your worst Nightmare: Stored XSS
Ever thought about what can happen if you read any stranger’s “Hey!” message? Nothing will happen, right?! Let me prove you wrong!!😁
New Writeup❗️
Date: Thu, 20 May 2021 23:19:05 GMT
Title: How I turned 0000 into $600: Phone Verification Bypass
Link: https://medium.com/p/b1c0f6eb568e
Date: Thu, 20 May 2021 23:19:05 GMT
Title: How I turned 0000 into $600: Phone Verification Bypass
Link: https://medium.com/p/b1c0f6eb568e
Medium
How I turned 0000 into $600: Phone Verification Bypass
Hello Hunters, This is a Tale of how I decoded the Verification flow of a well-known web application & bypassed the Phone Verification…
New Writeup❗️
Date: Thu, 25 Mar 2021 00:49:39 GMT
Title: Encrypted Payload -> Decrypted Execution ($600) : Stored XSS
Link: https://medium.com/p/3e517cea8f13
Date: Thu, 25 Mar 2021 00:49:39 GMT
Title: Encrypted Payload -> Decrypted Execution ($600) : Stored XSS
Link: https://medium.com/p/3e517cea8f13
Medium
Encrypted Payload -> Decrypted Execution ($600) : Stored XSS
A Tale of how I used an Application’s feature against itself to give rise to a Stored Cross Site Scripting vulnerability…Relax & Enjoy 😁❤
New Writeup❗️
Date: Wed, 06 Jan 2021 23:03:42 GMT
Title: My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Link: https://medium.com/p/fb171f911df
Date: Wed, 06 Jan 2021 23:03:42 GMT
Title: My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Link: https://medium.com/p/fb171f911df
Medium
My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Hello Hunters, This is my FIRST Medium Article covering the Story of my FIRST 4 Digit bounty which was FIRST marked as a Duplicate but…
New Writeup❗️
Date: Sat, 23 Apr 2022 13:51:19 GMT
Title: How I got Apple Hall Of Fame !
Link: https://medium.com/p/3d86f858c05f
Date: Sat, 23 Apr 2022 13:51:19 GMT
Title: How I got Apple Hall Of Fame !
Link: https://medium.com/p/3d86f858c05f
Medium
How I got Apple Hall Of Fame !
How I got Apple Hall Of Fame ! Introduction : When a web application does not properly handle user-supplied data, an attacker can supply content to a web application, typically via a parameter value …
New Writeup❗️
Date: Fri, 28 Jan 2022 01:54:59 GMT
Title: Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Link: https://medium.com/p/bf99a3599462
Date: Fri, 28 Jan 2022 01:54:59 GMT
Title: Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Link: https://medium.com/p/bf99a3599462
Medium
Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Introduction:
New Writeup❗️
Date: Mon, 17 May 2021 17:16:56 GMT
Title: Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Link: https://medium.com/p/f5329a974530
Date: Mon, 17 May 2021 17:16:56 GMT
Title: Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Link: https://medium.com/p/f5329a974530
Medium
Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Part 1: Recon
New Writeup❗️
Date: Tue, 28 Feb 2023 19:01:03 GMT
Title: Good one
Link: https://medium.com/p/7a64f9f5277
Date: Tue, 28 Feb 2023 19:01:03 GMT
Title: Good one
Link: https://medium.com/p/7a64f9f5277
Medium
Good one
Good one
New Writeup❗️
Date: Mon, 30 Jan 2023 08:32:29 GMT
Title: ⚡Audit-365 | Weekly Roundup #04
Link: https://medium.com/p/8c4ef82cce6
Date: Mon, 30 Jan 2023 08:32:29 GMT
Title: ⚡Audit-365 | Weekly Roundup #04
Link: https://medium.com/p/8c4ef82cce6
Medium
⚡Audit-365 | Weekly Roundup #04
This week we will be covering ZK Series with Port Adams, Vulnerabilities of Tomorrow, Move Language Security, Novel Griefing Attack, etc.
New Writeup❗️
Date: Wed, 01 Apr 2020 14:10:07 GMT
Title: Apache Struts-2 Remote Code Execution CVE-2018–11776
Link: https://medium.com/p/d01ee58a1cd7
Date: Wed, 01 Apr 2020 14:10:07 GMT
Title: Apache Struts-2 Remote Code Execution CVE-2018–11776
Link: https://medium.com/p/d01ee58a1cd7
Medium
Apache Struts-2 Remote Code Execution CVE-2018–11776
Hello Guys,
Today I am going to tell you about my finding on a web based application and it is a very well known vulnerability found on…
Today I am going to tell you about my finding on a web based application and it is a very well known vulnerability found on…
New Writeup❗️
Date: Thu, 01 Jul 2021 04:45:31 GMT
Title: API Security Misconfiguration Leads to tons of PII data Leakage
Link: https://medium.com/p/fc57f1b9228
Date: Thu, 01 Jul 2021 04:45:31 GMT
Title: API Security Misconfiguration Leads to tons of PII data Leakage
Link: https://medium.com/p/fc57f1b9228
Medium
API Security Misconfiguration Leads to tons of PII data Leakage
Introduction
New Writeup❗️
Date: Wed, 09 Jun 2021 08:07:09 GMT
Title: Insecure Deserialization
Link: https://medium.com/p/c2f0ae4a50f
Date: Wed, 09 Jun 2021 08:07:09 GMT
Title: Insecure Deserialization
Link: https://medium.com/p/c2f0ae4a50f
Medium
Insecure Deserialization
A pentester’s guide to insecure deserialization
New Writeup❗️
Date: Wed, 19 May 2021 10:50:54 GMT
Title: Time-Based SQL Injection to Dumping the Database
Link: https://medium.com/p/da0e5bcaa9df
Date: Wed, 19 May 2021 10:50:54 GMT
Title: Time-Based SQL Injection to Dumping the Database
Link: https://medium.com/p/da0e5bcaa9df
Medium
Time-Based SQL Injection to Dumping the Database
Dumping the whole database
👍1