digMeMore

روش های بایپس CSP

https://www.slideshare.net/Hacken_Ecosystem/ebrahem-hegazy-bug-hunters-manual-for-bypassing-contentsecuritypolicy

#CSP
#Bypass

@digmemore

SlideShare

Ebrahem Hegazy - Bug hunters manual for bypassing Content-Security-Policy

HackIT is an annual cybersecurity conference that gathers the best technical researchers and top players in the cybersecurity industry to explore cutting-edge technologies together. In 2018, HackIT focused on the use of blockchain technology.

Join our…

1.46K viewsr00t98, 09:22

digMeMore

اگه هنوز فکر میکنید که غول ترینWAF های دنیا میتونن جلوی پیلود ریزی و اکسپلویت شدن رو بگیرن سخت در اشتباه هستید ، چرا که برای بایپس WAF روش های بسیار متفاوت و بسته به خلاقیت وجود دارد که این یکیشه:

https://github.com/devploit/XORpass

#WAF
#Bypass

@digmemore

1.86K viewsr00t98, 10:00

digMeMore

سه روش برای بهتر اکسپلویت شدنه self XSS

https://www.hahwul.com/2019/11/upgrade-self-xss-to-exploitable-xss.html

#XSS

@digmemore

HAHWUL

Upgrade self XSS to Exploitable XSS an 3 Ways Technic

오늘은 Self-XSS를 유효한 XSS로 업그레이드 하는 방법 3가지에 대해 이야기 할까 합니다.

1.65K viewsr00t98, edited 10:27

digMeMore

25 ریپورت از آسیب پذیری RCE در باگ بانتی های مختلف در لینک زیر ارائه شده :

https://medium.com/@corneacristian/top-25-rce-bug-bounty-reports-bc9555cca7bc
#Bugbounty #RCE @digmemore

Medium

Top 25 RCE Bug Bounty Reports

In this article, we will discuss Remote Code Execution (RCE) vulnerability, how to find one and present 25 disclosed reports based on this

1.38K viewsپدرخوانده, 17:56

digMeMore

بعد از اینکه اسنپ اومده به اسم رادیو اپلیکیشن خودش رو در اپل استور ثبت کرده . هموطنان غیور رفتن گزارش دادن و گفتن اپلیکیشن سپاه هست حذفش کنید :/
#نمیرید_هکران
@digmemore

1.39K viewsپدرخوانده, 08:39

digMeMore

API Security Testing

Part 1:
https://smartbear.com/blog/test-and-monitor/api-security-testing-how-to-hack-an-api-part-1/

Part 2:
https://smartbear.com/blog/test-and-monitor/api-security-testing-how-to-hack-an-api-part-2/

Part 3:
https://smartbear.com/blog/test-and-monitor/api-security-testing-how-to-hack-an-api-part-3/

#API

@digmemore

SmartBear.com

API Security Testing – How to Hack an API and Get Away with It (Part 1 of 3)

In this 3-part blog series, I’ll provide deep dive instructions and specific examples on how you can avoid common security threats by hacking your own API. This first post will highlight 3 key aspects you will need to understand when hacking an API: API technologies…

2K viewsr00t98, 20:02

digMeMore

Forwarded from CTF Community | Hints

Reverse engineering and modifying an Android game (.apk) — CTF

Recently it has been solved a CTF style challenge where the user was given an .apk file with the goal to find the flag. if you are interested in Android follow this Tutorial
#Android @ctfplay

343 viewsپدرخوانده, 10:19

digMeMore

Hacking WebSocket

https://medium.com/swlh/hacking-websocket-25d3cba6a4b9

#WebSocket
#CSWSH

@digmemore

Medium

Hacking WebSocket

With Cross-Site WebSocket Hijacking attacks

1.51K viewsr00t98, 17:13

digMeMore

در این رایت اپ میبینیم که چطور آسیب پذیری IDOR از طریق WebSocket اکسپلویت میشه.

https://footstep.ninja/posts/idor-via-websockets/

#WebSocket
#IDOR

@digmemore

footstep.ninja

cat ~/footstep.ninja/blog.txt

The HTML5 Herald

1.72K viewsr00t98, edited 07:47

digMeMore

Android Mobile Application Pentesting

#Android
#Book

@digmemore

1.43K viewsr00t98, edited 19:27

digMeMore

Android Mobile Application Pentesting.pdf

3.5 MB

@digmemore

1.58K viewsr00t98, 19:27