New Writeup❗️
Date: Thu, 19 Dec 2019 10:17:08 GMT
Title: Account Takeover Through Password Reset Poisoning
Link: https://medium.com/p/72989a8bb8ea
Date: Thu, 19 Dec 2019 10:17:08 GMT
Title: Account Takeover Through Password Reset Poisoning
Link: https://medium.com/p/72989a8bb8ea
Medium
Account Takeover Through Password Reset Poisoning
Introduction :
New Writeup❗️
Date: Sat, 18 Feb 2023 09:17:11 GMT
Title: Found an URL in the android application source code which lead to an IDOR
Link: https://medium.com/p/1b8768708756
Date: Sat, 18 Feb 2023 09:17:11 GMT
Title: Found an URL in the android application source code which lead to an IDOR
Link: https://medium.com/p/1b8768708756
Medium
Found an URL in the android application source code which lead to an IDOR
I was testing the target which had its web application and mobile application in scope. Let’s say the target is example.com
New Writeup❗️
Date: Sat, 16 Jul 2022 14:26:56 GMT
Title: Authorization token leak from verify email endpoint
Link: https://medium.com/p/f28803476680
Date: Sat, 16 Jul 2022 14:26:56 GMT
Title: Authorization token leak from verify email endpoint
Link: https://medium.com/p/f28803476680
Medium
Authorization token leak from verify email endpoint
While testing a website I found that the verify email endpoint was leaking the authorization tokens of any verified users by just passing…
New Writeup❗️
Date: Thu, 17 Jun 2021 17:50:28 GMT
Title: Recon Step/ Methodology
Link: https://medium.com/p/c9664f5ce312
Date: Thu, 17 Jun 2021 17:50:28 GMT
Title: Recon Step/ Methodology
Link: https://medium.com/p/c9664f5ce312
Medium
Recon Step/ Methodology
This is just a self-note on different steps to perform while approaching a target.
New Writeup❗️
Date: Mon, 13 Sep 2021 09:23:40 GMT
Title: Reflected XSS on Byjus(My first bug)
Link: https://medium.com/p/a5bbab098748
Date: Mon, 13 Sep 2021 09:23:40 GMT
Title: Reflected XSS on Byjus(My first bug)
Link: https://medium.com/p/a5bbab098748
Medium
Reflected XSS on Byjus(My first bug)
Around a year back, schools had started to implement an online mode of learning. I had to complete my chemistry assignment and was too lazy…
New Writeup❗️
Date: Sat, 19 Jun 2021 09:14:41 GMT
Title: Tech_Supp0rt: 1 (VulnHub)
Link: https://medium.com/p/16486c93205e
Date: Sat, 19 Jun 2021 09:14:41 GMT
Title: Tech_Supp0rt: 1 (VulnHub)
Link: https://medium.com/p/16486c93205e
Medium
Tech_Supp0rt: 1 (VulnHub)
This is the first CTF machine I built which is now live on VulnHub. The difficulty is Easy and can be solved by anyone with basic…
New Writeup❗️
Date: Sun, 02 May 2021 07:56:48 GMT
Title: Active: Medium(but very very easy)
Link: https://medium.com/p/3a3f0b395fa1
Date: Sun, 02 May 2021 07:56:48 GMT
Title: Active: Medium(but very very easy)
Link: https://medium.com/p/3a3f0b395fa1
Medium
Active: Medium(but very very easy)
Recon
New Writeup❗️
Date: Thu, 14 Jan 2021 05:54:31 GMT
Title: Traverxec HTB
Link: https://medium.com/p/9d37daa1cdc3
Date: Thu, 14 Jan 2021 05:54:31 GMT
Title: Traverxec HTB
Link: https://medium.com/p/9d37daa1cdc3
Medium
Traverxec HTB
This is a just linux server which is hosting a few websites, which we will exploit with the help of a CVE, a config file, ssh keys and a…
New Writeup❗️
Date: Mon, 28 Dec 2020 09:23:55 GMT
Title: Blunder HTB
Link: https://medium.com/p/c254b3f21d02
Date: Mon, 28 Dec 2020 09:23:55 GMT
Title: Blunder HTB
Link: https://medium.com/p/c254b3f21d02
Medium
Blunder HTB
Blunder from Hack The Box is an easy rated machine made by egotisticalSW which is another Linux box hosting a site with an outdated…
New Writeup❗️
Date: Sat, 26 Dec 2020 05:01:35 GMT
Title: OpenAdmin HTB
Link: https://medium.com/p/a42d9b2e09ce
Date: Sat, 26 Dec 2020 05:01:35 GMT
Title: OpenAdmin HTB
Link: https://medium.com/p/a42d9b2e09ce
Medium
OpenAdmin HTB
This is a just linux server which is hosting a few websites, which we will exploit with the help of a CVE, a config file and a hidden…
New Writeup❗️
Date: Sun, 13 Jun 2021 14:07:40 GMT
Title: Bugcrowd and Me: A Story of Not Give Up ( My first bounty on bugcrowd)
Link: https://medium.com/p/1bd841264c7a
Date: Sun, 13 Jun 2021 14:07:40 GMT
Title: Bugcrowd and Me: A Story of Not Give Up ( My first bounty on bugcrowd)
Link: https://medium.com/p/1bd841264c7a
Medium
Bugcrowd and Me: A Story of Not Give Up ( My first bounty on bugcrowd)
Hello amazing hackers, My name is Deepak Dhiman ( also known as @Virdoex_hunter in bug bounty community ). I am a bug bounty hunter I hunt…
New Writeup❗️
Date: Fri, 15 Jan 2021 05:20:31 GMT
Title: How I get swag from a RDP by just creating a sitemap via wayback and ffuf that sitemap
Link: https://medium.com/p/9a67b039558
Date: Fri, 15 Jan 2021 05:20:31 GMT
Title: How I get swag from a RDP by just creating a sitemap via wayback and ffuf that sitemap
Link: https://medium.com/p/9a67b039558
Medium
How I get swag from a RDP by just creating a sitemap via wayback and ffuf that sitemap
Hello hackers this is Deepak Dhiman from India and I hope you all are doing good. So this writeup is about how I found the an interesting…
New Writeup❗️
Date: Fri, 18 Dec 2020 11:54:35 GMT
Title: Misconfigured s3 bucket leads to Sensitive Data exposure(No super controls )
Link: https://medium.com/p/f47e26b586c6
Date: Fri, 18 Dec 2020 11:54:35 GMT
Title: Misconfigured s3 bucket leads to Sensitive Data exposure(No super controls )
Link: https://medium.com/p/f47e26b586c6
Medium
Misconfigured s3 bucket leads to Sensitive Data exposure(No super controls )
Amazon S3 (Simple Storage Service) is one of the popular and widely used storage services. Many companies are using S3 buckets to store…
New Writeup❗️
Date: Tue, 14 Jul 2020 07:26:30 GMT
Title: Labs or resources to become a hacker or bug bounty hunter
Link: https://medium.com/p/d30b055682be
Date: Tue, 14 Jul 2020 07:26:30 GMT
Title: Labs or resources to become a hacker or bug bounty hunter
Link: https://medium.com/p/d30b055682be
Medium
Labs or resources to become a hacker or bug bounty hunter
Hello, I am Deepak Dhiman. So this post is about for new comers or who know about hacking. So I don’t waste your time by talking about…
New Writeup❗️
Date: Wed, 20 Jul 2022 10:43:13 GMT
Title: Complete Account Takeover without User Interaction
Link: https://medium.com/p/2cc831f0b55a
Date: Wed, 20 Jul 2022 10:43:13 GMT
Title: Complete Account Takeover without User Interaction
Link: https://medium.com/p/2cc831f0b55a
Medium
Complete Account Takeover without User Interaction
Hello friends, This is Prasanth Elangovan (aka Virtuvil) , a security researcher & an ethical hacker from India.
New Writeup❗️
Date: Mon, 18 Jul 2022 16:23:06 GMT
Title: Hey Google Lets submit bug from Victim Account !
Link: https://medium.com/p/af6a25d390e1
Date: Mon, 18 Jul 2022 16:23:06 GMT
Title: Hey Google Lets submit bug from Victim Account !
Link: https://medium.com/p/af6a25d390e1
Medium
Hey Google Lets submit bug from Victim Account !
IntroductionThis is the story of how my bug bounty journey helped me to pay for my college fees.
New Writeup❗️
Date: Sat, 09 Jan 2021 08:18:18 GMT
Title: Debian Server OS Installation and Configuration
Link: https://medium.com/p/f7f524573c86
Date: Sat, 09 Jan 2021 08:18:18 GMT
Title: Debian Server OS Installation and Configuration
Link: https://medium.com/p/f7f524573c86
Medium
Debian Server OS Installation and Configuration
Unlike Windows and macOS, Linux comes in many alternative forms, called distributions. And the difference between distributions can be…
New Writeup❗️
Date: Mon, 21 Mar 2022 12:42:10 GMT
Title: ($$$) Broken Authentication and IDOR at [REDACTED]
Link: https://medium.com/p/646de8d508e6
Date: Mon, 21 Mar 2022 12:42:10 GMT
Title: ($$$) Broken Authentication and IDOR at [REDACTED]
Link: https://medium.com/p/646de8d508e6
Medium
($$$) Broken Authentication and IDOR at [REDACTED]
Hello infosec community hope you guys are good, I want to share my finding in bug bounty about Broken Authentication and Insecure Direct…
New Writeup❗️
Date: Thu, 25 Nov 2021 03:07:03 GMT
Title: Unauthenticated Sensitive Information Disclosure at [REDACTED]
Link: https://medium.com/p/2702224098c
Date: Thu, 25 Nov 2021 03:07:03 GMT
Title: Unauthenticated Sensitive Information Disclosure at [REDACTED]
Link: https://medium.com/p/2702224098c
Medium
Unauthenticated Sensitive Information Disclosure at [REDACTED]
Hello InfoSec Community, I want to share my submission about this vulnerability, sorry for bad writing, still learning ✌
New Writeup❗️
Date: Tue, 24 Aug 2021 08:21:59 GMT
Title: Quals HackToday 2021 — Web
Link: https://medium.com/p/f568fc8de6d
Date: Tue, 24 Aug 2021 08:21:59 GMT
Title: Quals HackToday 2021 — Web
Link: https://medium.com/p/f568fc8de6d
Medium
Quals HackToday 2021 — Web
HackToday 2021 adalah kompetisi CTF yang di selenggarakan oleh IPB setiap tahunnya, berikut untuk write up soal kategori web. Langsung aja…