⤷ Title: SessionProbe: assist in evaluating user privileges in web applications
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:40:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Web AppSec #authorization #session token #sessionprobe
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:40:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Web AppSec #authorization #session token #sessionprobe
Penetration Testing Tools
SessionProbe: assist in evaluating user privileges in web applications
It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues.
⤷ Title: Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 02:32:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Datadog Labs #Microsoft 365 #Okta #phishing #Salary Review #Session Token Hijack #SSO Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 02:32:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Datadog Labs #Microsoft 365 #Okta #phishing #Salary Review #Session Token Hijack #SSO Bypass
Daily CyberSecurity
Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures
A sophisticated phishing campaign uses salary review lures to target M365/Okta SSO. Attackers proxy the login page to preserve customization and hijack critical session tokens via dynamic redirection.
⤷ Title: If We Have MFA, How Are Accounts Still Getting Hacked?
════════════════════════
𐀪 Author: Diya Lebon
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 17:51:17 GMT
════════════════════════
⌗ Tags: #hacking #session_token #mfa #cybersecurity #cyber_security_awareness
════════════════════════
𐀪 Author: Diya Lebon
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 17:51:17 GMT
════════════════════════
⌗ Tags: #hacking #session_token #mfa #cybersecurity #cyber_security_awareness
Medium
If We Have MFA, How Are Accounts Still Getting Hacked?
You’ve probably been told some version of the same cybersecurity advice for years: use a strong password, don’t reuse it, and turn on…