HackerOne

6.26K viewsAmir Kiani, 17:25

UUTCTF 2020

UUTCTF is a student CTF organized by Urmia University of Technology. It is the CTF contest of P0SCon Cyber-Security C...

3.31K viewsMir Saman Tajbakhsh, 09:55

HackerOne

https://medium.com/@social_62682/from-fuzzing-to-remote-code-execution-in-samsung-android-56cbdebcfeca

4.03K viewsMmD, 06:04

HackerOne

https://gitlab.com/gitlab-com/gl-security/gl-redteam/red-team-tech-notes/-/tree/master/RT-011%20-%20Phishing%20Campaign

GitLab

RT-011 - Phishing Campaign · master · GitLab.com / GitLab Security Division / Security Operations Department / Red Team / Red Team…

As we come across interesting things that we want to share with the community we will document them here as a tech note.

3.47K viewsAmir Kiani, 13:57

HackerOne

github.com/redballoonshenanigans/monitordarkly

GitHub

GitHub - RedBalloonShenanigans/MonitorDarkly: Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality.

Poc, Presentation of Monitor OSD Exploitation, and shenanigans of high quality. - RedBalloonShenanigans/MonitorDarkly

3.45K viewsAmir Kiani, 21:15

HackerOne

https://cube01.io/blog/Moodle-DOM-Stored-XSS-to-RCE.html

3.45K viewsAmir Kiani, 16:04

HackerOne

https://www.blackhat.com/docs/eu-16/materials/eu-16-Jurczyk-Effective-File-Format-Fuzzing-Thoughts-Techniques-And-Results.pdf

2.65K viewsAmir Kiani, 13:54

HackerOne

https://uae-i.blogspot.com/2020/06/xssopen-redirect-in-paypal.html

Blogspot

XSS+Open Redirect in PAYPAL

Hi everyone, I will tell bug I found. This bug is out of scope. I think that this bug may give you idea. Then, I decided to tell.

3.03K viewsAmir Kiani, 13:57

HackerOne

#Tips

2.64K viewsAmir Kiani, edited 14:00

HackerOne

https://medium.com/@sansatart/malware-traffic-analysis-25f4674ddc03

Medium

Malware Traffic Analysis

I’ve been meaning to get around to doing one of these in a public blog for a bit, so I figured I would pick one of the more involved…

2.87K viewsAmir Kiani, 14:01

HackerOne

Forwarded from Valeriy Shevchenko

https://medium.com/@valeriyshevchenko/from-crlf-to-account-takeover-a94d7aa0d74e?sk=54abf996cacadfe53113700a03181bb8

Medium

From CRLF to Account Takeover

At the beginning of March,while researching one site I discovered the new functionality. The functionality allowed the user to login via…

3.89K viewsAmir Kiani, 15:13

HackerOne

Forwarded from Bug Bounty (Amir Kiani)

https://medium.com/@imayankraheja/tampering-encrypted-parameter-to-account-takeover-a5fec7dde360

Medium

Tampering Encrypted Parameter to Account Takeover

Hola Infosec! Thanks for showing so much love to my previous story. Just like my last writup, today also I am going to share an…

661 viewsAmir Kiani, 22:16

HackerOne

callstranger.com

3.54K viewsAmir Kiani, 08:21

HackerOne

https://securitylab.github.com/research/apache-struts-CVE-2018-11776

GitHub Security Lab

CVE-2018-11776: How to find 5 RCEs in Apache Struts with CodeQL

Semmle security researcher Man Yue Mo explains how he used CodeQL’s Data Flow library to discover multiple RCE vulnerabilities (CVE-2018-11776) in Apache Struts.

3.19K viewsAmir Kiani, 11:00

HackerOne

https://medium.com/@muztahidultanim/how-i-was-able-to-buy-t-shirt-for-1-payment-price-manipulation-36b4d6a30034

Medium

How I was able to buy t-shirt for €1 — Payment Price Manipulation

Today I am gonna share a simple but critical vulnerability with you guys. This vulnerability called payment price manipulation, by using…

5.63K viewsAmir Kiani, 22:55

HackerOne

https://blog.zecops.com/vulnerabilities/smbleedingghost-writeup-part-ii-unauthenticated-memory-read-preparing-the-ground-for-an-rce/

Jamf

Jamf Threat Labs | Blog

3.5K viewsAmir Kiani, 09:35

HackerOne

3.56K viewsAmir Kiani, 18:36

HackerOne

https://blog.it-securityguard.com/how-i-made-more-than-30k-with-jolokia-cves/

3.01K viewsAmir Kiani, 15:19

HackerOne

https://palant.info/2020/06/22/exploiting-bitdefender-antivirus-rce-from-any-website/

Almost Secure

Exploiting Bitdefender Antivirus: RCE from any website

A vulnerability in Bitdefender Antivirus allowed any website to run arbitrary code with user's privileges. This was caused by issues very similar to ones found in other antivirus products before.

6.15K viewsAmir Kiani, 16:31

HackerOne

https://ahussam.me/Medium-full-account-takeover/

ahussam.me

Medium Full Account Takeover By One Click • Abdullah Hussam

Two days ago, I found a simple, limited XSS, so, I developed it to be a One-click full account takeover.

4.03K viewsAmir Kiani, 18:26

About

Blog

Apps

Platform