New Writeup❗️
Date: Wed, 06 Jan 2021 23:03:42 GMT
Title: My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Link: https://medium.com/p/fb171f911df
Date: Wed, 06 Jan 2021 23:03:42 GMT
Title: My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Link: https://medium.com/p/fb171f911df
Medium
My First 4 Digit Bounty Tragedy ($1125) : Stored XSS
Hello Hunters, This is my FIRST Medium Article covering the Story of my FIRST 4 Digit bounty which was FIRST marked as a Duplicate but…
New Writeup❗️
Date: Sat, 23 Apr 2022 13:51:19 GMT
Title: How I got Apple Hall Of Fame !
Link: https://medium.com/p/3d86f858c05f
Date: Sat, 23 Apr 2022 13:51:19 GMT
Title: How I got Apple Hall Of Fame !
Link: https://medium.com/p/3d86f858c05f
Medium
How I got Apple Hall Of Fame !
How I got Apple Hall Of Fame ! Introduction : When a web application does not properly handle user-supplied data, an attacker can supply content to a web application, typically via a parameter value …
New Writeup❗️
Date: Fri, 28 Jan 2022 01:54:59 GMT
Title: Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Link: https://medium.com/p/bf99a3599462
Date: Fri, 28 Jan 2022 01:54:59 GMT
Title: Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Link: https://medium.com/p/bf99a3599462
Medium
Bypassing SSRF Protection to Exfiltrate AWS Metadata from LarkSuite
Introduction:
New Writeup❗️
Date: Mon, 17 May 2021 17:16:56 GMT
Title: Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Link: https://medium.com/p/f5329a974530
Date: Mon, 17 May 2021 17:16:56 GMT
Title: Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Link: https://medium.com/p/f5329a974530
Medium
Just Gopher It: Escalating a Blind SSRF to RCE for $15k — Yahoo Mail
Part 1: Recon
New Writeup❗️
Date: Tue, 28 Feb 2023 19:01:03 GMT
Title: Good one
Link: https://medium.com/p/7a64f9f5277
Date: Tue, 28 Feb 2023 19:01:03 GMT
Title: Good one
Link: https://medium.com/p/7a64f9f5277
Medium
Good one
Good one
New Writeup❗️
Date: Mon, 30 Jan 2023 08:32:29 GMT
Title: ⚡Audit-365 | Weekly Roundup #04
Link: https://medium.com/p/8c4ef82cce6
Date: Mon, 30 Jan 2023 08:32:29 GMT
Title: ⚡Audit-365 | Weekly Roundup #04
Link: https://medium.com/p/8c4ef82cce6
Medium
⚡Audit-365 | Weekly Roundup #04
This week we will be covering ZK Series with Port Adams, Vulnerabilities of Tomorrow, Move Language Security, Novel Griefing Attack, etc.
New Writeup❗️
Date: Wed, 01 Apr 2020 14:10:07 GMT
Title: Apache Struts-2 Remote Code Execution CVE-2018–11776
Link: https://medium.com/p/d01ee58a1cd7
Date: Wed, 01 Apr 2020 14:10:07 GMT
Title: Apache Struts-2 Remote Code Execution CVE-2018–11776
Link: https://medium.com/p/d01ee58a1cd7
Medium
Apache Struts-2 Remote Code Execution CVE-2018–11776
Hello Guys,
Today I am going to tell you about my finding on a web based application and it is a very well known vulnerability found on…
Today I am going to tell you about my finding on a web based application and it is a very well known vulnerability found on…
New Writeup❗️
Date: Thu, 01 Jul 2021 04:45:31 GMT
Title: API Security Misconfiguration Leads to tons of PII data Leakage
Link: https://medium.com/p/fc57f1b9228
Date: Thu, 01 Jul 2021 04:45:31 GMT
Title: API Security Misconfiguration Leads to tons of PII data Leakage
Link: https://medium.com/p/fc57f1b9228
Medium
API Security Misconfiguration Leads to tons of PII data Leakage
Introduction
New Writeup❗️
Date: Wed, 09 Jun 2021 08:07:09 GMT
Title: Insecure Deserialization
Link: https://medium.com/p/c2f0ae4a50f
Date: Wed, 09 Jun 2021 08:07:09 GMT
Title: Insecure Deserialization
Link: https://medium.com/p/c2f0ae4a50f
Medium
Insecure Deserialization
A pentester’s guide to insecure deserialization
New Writeup❗️
Date: Wed, 19 May 2021 10:50:54 GMT
Title: Time-Based SQL Injection to Dumping the Database
Link: https://medium.com/p/da0e5bcaa9df
Date: Wed, 19 May 2021 10:50:54 GMT
Title: Time-Based SQL Injection to Dumping the Database
Link: https://medium.com/p/da0e5bcaa9df
Medium
Time-Based SQL Injection to Dumping the Database
Dumping the whole database
👍1
New Writeup❗️
Date: Sat, 08 May 2021 05:46:06 GMT
Title: Bulk Subdomains Take Over
Link: https://medium.com/p/25bd5b96aeb0
Date: Sat, 08 May 2021 05:46:06 GMT
Title: Bulk Subdomains Take Over
Link: https://medium.com/p/25bd5b96aeb0
Medium
Massive Subdomains Take Over
Taking Over more than 20+ subdomains
New Writeup❗️
Date: Wed, 07 Apr 2021 11:59:27 GMT
Title: Remote Code Execution due to unrestricted file upload
Link: https://medium.com/p/c31d9d7b81a0
Date: Wed, 07 Apr 2021 11:59:27 GMT
Title: Remote Code Execution due to unrestricted file upload
Link: https://medium.com/p/c31d9d7b81a0
Medium
Remote Code Execution Due to Unrestricted File Upload
Remote Code Execution
New Writeup❗️
Date: Wed, 10 Mar 2021 06:34:52 GMT
Title: Jailbreaking iPhone and Dynamic Analysis Lab Setup
Link: https://medium.com/p/66057ff9f192
Date: Wed, 10 Mar 2021 06:34:52 GMT
Title: Jailbreaking iPhone and Dynamic Analysis Lab Setup
Link: https://medium.com/p/66057ff9f192
Medium
Jailbreaking iPhone and Dynamic Analysis Lab Setup
Jailbreaking iPhone 6 with software version 12.5.1 and setting up the tools…
New Writeup❗️
Date: Fri, 05 Mar 2021 05:40:54 GMT
Title: Remote Code Execution due to unrestricted file upload
Link: https://medium.com/p/153be0009934
Date: Fri, 05 Mar 2021 05:40:54 GMT
Title: Remote Code Execution due to unrestricted file upload
Link: https://medium.com/p/153be0009934
Medium
Remote Code Execution due to unrestricted file upload
Remote Code Execution
New Writeup❗️
Date: Wed, 17 Feb 2021 13:34:06 GMT
Title: Account Take Over by Response Manipulation
Link: https://medium.com/p/e1293ee51e9a
Date: Wed, 17 Feb 2021 13:34:06 GMT
Title: Account Take Over by Response Manipulation
Link: https://medium.com/p/e1293ee51e9a
Medium
Account Take Over by Response Manipulation
Hi all I hope everyone is doing well. This writeup is all about account take Over vulnerability by manipulating the login response.
New Writeup❗️
Date: Sun, 14 Feb 2021 10:03:47 GMT
Title: Remote Code Execution due to Unrestricted File upload
Link: https://medium.com/p/2a9cf0ac3a54
Date: Sun, 14 Feb 2021 10:03:47 GMT
Title: Remote Code Execution due to Unrestricted File upload
Link: https://medium.com/p/2a9cf0ac3a54
Medium
Remote Code Execution due to Unrestricted File upload
Remote Code Execution
New Writeup❗️
Date: Thu, 11 Feb 2021 03:53:47 GMT
Title: Account Take Over due to No rate limiting
Link: https://medium.com/p/433bd7449aca
Date: Thu, 11 Feb 2021 03:53:47 GMT
Title: Account Take Over due to No rate limiting
Link: https://medium.com/p/433bd7449aca
Medium
Account Take Over due to No Rate Limiting
The Story of Taking over tons of users Accounts
New Writeup❗️
Date: Thu, 23 Feb 2023 11:51:10 GMT
Title: Timeline: Transitioning From Programmer To Pentester
Link: https://medium.com/p/8ed303f99794
Date: Thu, 23 Feb 2023 11:51:10 GMT
Title: Timeline: Transitioning From Programmer To Pentester
Link: https://medium.com/p/8ed303f99794
Medium
Timeline: Transitioning From Programmer To Pentester
Transitioning from an IT job in programming to a pentesting job requires the acquisition of specific skills and certifications, as well as…
New Writeup❗️
Date: Mon, 20 Feb 2023 12:19:44 GMT
Title: Resources to Help You Crush the OSCP Exam
Link: https://medium.com/p/24a73127c359
Date: Mon, 20 Feb 2023 12:19:44 GMT
Title: Resources to Help You Crush the OSCP Exam
Link: https://medium.com/p/24a73127c359
Medium
Resources to Help You Crush the OSCP Exam
The Offensive Security Certified Professional (OSCP) is a highly respected certification in the information security field, recognized for…
New Writeup❗️
Date: Sun, 19 Feb 2023 18:46:06 GMT
Title: What We Can Learn from Mr. Robot: Cybersecurity Lessons from a TV Show
Link: https://medium.com/p/461213e07cc7
Date: Sun, 19 Feb 2023 18:46:06 GMT
Title: What We Can Learn from Mr. Robot: Cybersecurity Lessons from a TV Show
Link: https://medium.com/p/461213e07cc7
Medium
What We Can Learn from Mr. Robot: Cybersecurity Lessons from a TV Show
Mr. Robot is a popular TV show that explores the world of cybersecurity and hacking. The show’s protagonist, Elliot Alderson, is a…