آسیب پذیری RCE در یاهو !
@digmemore
https://medium.com/@kedrisec/how-i-found-2-9-rce-at-yahoo-bug-bounty-program-20ab50dbfac7
@digmemore
https://medium.com/@kedrisec/how-i-found-2-9-rce-at-yahoo-bug-bounty-program-20ab50dbfac7
Medium
How I found 2.9 RCE at Yahoo! Bug Bounty program
Hi. I’m kedrisec and I want to describe 3 vulnerabilities that I found as part of the security research at Yahoo Bug Bounty program. So…
نحوه کشف آسیب پذیری XSS در Uber
https://zhchbin.github.io/2017/08/30/Uber-XSS-via-Cookie/
https://zhchbin.github.io/2017/08/30/Uber-XSS-via-Cookie/
zhchbin
[BBP系列二] Uber XSS via Cookie
This write up is about part of my latest XSS report to Uber@hackerone. Sorry for my poor English first of all, I will try my best to explain this XSS problem throughly. JSONP RequestSeveral months ago
آسیب پذیری RCE درGitBucket 4.23.1، چرا لستفاده از توکن چهار رقمی خوب نیست؟ ویدئو به همراه توصیحات در لینک های زیر:
@digmemore
https://t.co/qKNkgS185o
https://t.co/NGiyjIN2D0
@digmemore
https://t.co/qKNkgS185o
https://t.co/NGiyjIN2D0
آسیب پذیری rce در گیت !
@digmemore
https://staaldraad.github.io/post/2018-06-03-cve-2018-11235-git-rce/
@digmemore
https://staaldraad.github.io/post/2018-06-03-cve-2018-11235-git-rce/
ابزاری برای تست توکن های JWT
@digmemore
https://securityonline.info/jwt_tool-toolkit-testing-tweaking-cracking-json-web-tokens/
@digmemore
https://securityonline.info/jwt_tool-toolkit-testing-tweaking-cracking-json-web-tokens/
securityonline.info
jwt_tool v2.2.6 releases: A toolkit for testing, tweaking and cracking JSON Web Tokens
The JSON Web Token Toolkit - jwt_tool.py is a toolkit for validating, forging and cracking JWTs (JSON Web Tokens).
چیزای جالبی از shodan در میاد
@digmemore
https://95.0.186.165
https://80.151.69.142:8080
https://92.110.122.229:8080
@digmemore
https://95.0.186.165
https://80.151.69.142:8080
https://92.110.122.229:8080
آسیب پذیری XSRF/CSRF در نسخهphpMyAdmin 4.7.x
@digmemore
https://blog.vulnspy.com/2018/06/12/phpMyAdmin-4-7-x-XSRF-CSRF-vulnerability-PMASA-2017-9-exploit/
@digmemore
https://blog.vulnspy.com/2018/06/12/phpMyAdmin-4-7-x-XSRF-CSRF-vulnerability-PMASA-2017-9-exploit/
Vulnspy Blog
phpMyAdmin 4.7.x XSRF/CSRF Vulnerability (PMASA-2017-9) Exploit
Author: @Ambulong phpMyAdmin is a well-known MySQL/MariaDB online management tool, phpMyAdmin team released the version 4.7.7 that addresses the CSRF vulnerability found by Barot. (PMASA-2017-9). The
لیستی از رایت آپ های باگ بانتی سرویس های مختلف توی چند سال اخیر
@digmemore
https://pentester.land/list-of-bug-bounty-writeups.html
@digmemore
https://pentester.land/list-of-bug-bounty-writeups.html