New Writeup❗️
Date: Fri, 01 May 2020 22:20:16 GMT
Title: Why We Don’t Have UIs Like the ones in Neon Genesis
Link: https://medium.com/p/9b6631dc3714
Date: Fri, 01 May 2020 22:20:16 GMT
Title: Why We Don’t Have UIs Like the ones in Neon Genesis
Link: https://medium.com/p/9b6631dc3714
Medium
Why We Don’t Have UIs Like the ones in Neon Genesis
Every now and then, the incredible aesthetic quality of the UIs in Neon Genesis comes up. And for good reason. They’re incredibly cool.
New Writeup❗️
Date: Fri, 02 Aug 2019 15:54:36 GMT
Title: If CORS is just a header, why don’t attackers just ignore it?
Link: https://medium.com/p/63e57c323cef
Date: Fri, 02 Aug 2019 15:54:36 GMT
Title: If CORS is just a header, why don’t attackers just ignore it?
Link: https://medium.com/p/63e57c323cef
Medium
If CORS is just a header, why don’t attackers just ignore it?
Here’s a question form a co-worker I get quite often:
New Writeup❗️
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Medium
Übersicht Remote Code Execution, Spotify takeover
some words on the security implications of locally hosted web services
New Writeup❗️
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Medium
Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
When a malicious actor gets access or changes is done to user account. A disavow email will be sent to the original email of the user. That…
New Writeup❗️
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Medium
Page Admin Disclosure when Posting a Reel
Hello , I’m Syd from the Philippines. Today I would like to share one of my findings in Meta Bug Bounty Program. The bug that I found is…
New Writeup❗️
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Medium
Spoof as another Facebook user to report an impostor account
When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…
New Writeup❗️
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Medium
This is how I can Turn Off Your Post Notification
Description/Impact: In m.facebook user can turn on post notification on a post. By turning it on user will be notified if someone reacted…
New Writeup❗️
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Medium
Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Description: Two Factor Authentication (2FA) is a security feature that helps Facebook users protect their account in addition to their…
New Writeup❗️
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Medium
The Joy of Building a Community through Patreon: My Journey with Cyberlix
As a cybersecurity professional, I have always been interested in finding ways to improve the security of organizations and individuals…
New Writeup❗️
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Medium
How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Breaking path normalisation has been my biggest interest in the past couple of years. Let me explain exactly why I have chosen to invest…
New Writeup❗️
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Medium
Tips For Developing A Hacker Mindset
Hey hackers, I hope you are all doing well. This write-up will be about the do’s and don’ts in bug bounty hunting and the pros & cons.
New Writeup❗️
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Medium
Breaking Parser Logic: Gain Access To NGINX Plus API — Read/Write Upstreams.
Hi hackers, in this talk I will explain how I could direct traffic from an internal server to my own by breaking the way their reverse…
New Writeup❗️
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Medium
What VPS to choose?
There are tons of cloud providers that offer different types of servers with a lot of different options. I will talk about the ones I…
New Writeup❗️
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Medium
SSRF to fetch AWS credentials with full access to multiple services
This is a post about how I found a simple yet really critical vulnerability in a bug bounty program. It was the most critical bug I have…
New Writeup❗️
Date: Fri, 30 Sep 2022 23:20:37 GMT
Title: Distributed Bruteforcing of DNS records
Link: https://medium.com/p/7ca481a2f501
Date: Fri, 30 Sep 2022 23:20:37 GMT
Title: Distributed Bruteforcing of DNS records
Link: https://medium.com/p/7ca481a2f501
Medium
Distributed Bruteforcing of DNS records
Using shuffleDNS/pureDNS + BBRF + Axiom
New Writeup❗️
Date: Tue, 20 Sep 2022 09:23:46 GMT
Title: Problem installing Nuclei
Link: https://medium.com/p/76cc3fbc3104
Date: Tue, 20 Sep 2022 09:23:46 GMT
Title: Problem installing Nuclei
Link: https://medium.com/p/76cc3fbc3104
Medium
Problem installing Nuclei
I recently had to reinstall Nuclei from scratch on a testing machine.
New Writeup❗️
Date: Mon, 16 Aug 2021 04:23:20 GMT
Title: How I took over several Stanford subdomains. Also, let me explain you the pain to report it!
Link: https://medium.com/p/d84b08704be8
Date: Mon, 16 Aug 2021 04:23:20 GMT
Title: How I took over several Stanford subdomains. Also, let me explain you the pain to report it!
Link: https://medium.com/p/d84b08704be8
Medium
How I took over several Stanford subdomains. Also, let me explain you the pain to report them!
While using nuclei and the template detect-all-takeovers.yaml, I found several (over 20) subdomains of Stanford (stanford.edu) what were…
New Writeup❗️
Date: Mon, 16 Aug 2021 04:22:31 GMT
Title: How to properly install Nuclei
Link: https://medium.com/p/2619989a5109
Date: Mon, 16 Aug 2021 04:22:31 GMT
Title: How to properly install Nuclei
Link: https://medium.com/p/2619989a5109
Medium
How to properly install Nuclei
Installation step by step avoiding pitfalls
New Writeup❗️
Date: Mon, 16 Aug 2021 04:19:52 GMT
Title: How to run Axiom and waybackurls against all your targets
Link: https://medium.com/p/bfc124fed918
Date: Mon, 16 Aug 2021 04:19:52 GMT
Title: How to run Axiom and waybackurls against all your targets
Link: https://medium.com/p/bfc124fed918
Medium
How to run Axiom and waybackurls against all your targets
This is a short and simple guide how to extract all the waybackurls (♥ tomnomnom) results from all your programs in a fast and simple way.
New Writeup❗️
Date: Tue, 27 Jul 2021 04:00:50 GMT
Title: Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Link: https://medium.com/p/908bea5f5802
Date: Tue, 27 Jul 2021 04:00:50 GMT
Title: Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Link: https://medium.com/p/908bea5f5802
Medium
Telegram Report: SSRF leads to DOS attack [Reports that didn't make it]
Summary