Hack the Box - Writeup (Shoppy)
This box consists of searching for the credentials on the webapp, and then find our way up to escalate our priviledges for root access to the machine.
Read more…
#happy_hacking
This box consists of searching for the credentials on the webapp, and then find our way up to escalate our priviledges for root access to the machine.
Read more…
#happy_hacking
❤5😎4🔥1
Sherlock 🔍
Hunt down social media accounts by username.
This OSINT tool will help you find any username across more than 400 social media platforms.
Website 👾 GitHub
#happy_hacking #osint
Hunt down social media accounts by username.
This OSINT tool will help you find any username across more than 400 social media platforms.
Website 👾 GitHub
#happy_hacking #osint
4❤3⚡2😎2🔥1
🔍 Recon Methodology in Bug Bounty Hunting 🔍
1. Target Identification: Start by defining your target's scope. Use tools like Sublist3r or Amass to discover subdomains.
2. Information Gathering: Utilize WHOIS, DNS records, and Google Dorking to gather intel on the target. Tools like Shodan can reveal exposed services.
3. Asset Mapping: Use Nmap for port scanning to identify open ports and services running on the target.
4. Vulnerability Assessment: Employ tools like Burp Suite or OWASP ZAP to scan for common vulnerabilities (XSS, SQLi, etc.).
5. Documentation: Keep detailed notes of findings for reporting and future reference.
#BugBounty #Recon #Cybersecurity #EthicalHacking
1. Target Identification: Start by defining your target's scope. Use tools like Sublist3r or Amass to discover subdomains.
2. Information Gathering: Utilize WHOIS, DNS records, and Google Dorking to gather intel on the target. Tools like Shodan can reveal exposed services.
3. Asset Mapping: Use Nmap for port scanning to identify open ports and services running on the target.
4. Vulnerability Assessment: Employ tools like Burp Suite or OWASP ZAP to scan for common vulnerabilities (XSS, SQLi, etc.).
5. Documentation: Keep detailed notes of findings for reporting and future reference.
#BugBounty #Recon #Cybersecurity #EthicalHacking
🔥5👍1
https://t.me/alien_rood
Check this channel out.
A good channel with live recon content for bug bounty hunters.
The content is in Arabic.
Check this channel out.
A good channel with live recon content for bug bounty hunters.
The content is in Arabic.
👍5
🎉 Happy New Year 2026! 🥳
May it sparkle with joy, laughter, and dreams come true! ✨
Wishing you love ❤️, peace ☮️, and endless good vibes 💫
Cheers to new beginnings! 🥂🎇
#HappyNewYear2026 🎊🐉
May it sparkle with joy, laughter, and dreams come true! ✨
Wishing you love ❤️, peace ☮️, and endless good vibes 💫
Cheers to new beginnings! 🥂🎇
#HappyNewYear2026 🎊🐉
❤5
Release v3.6.2 · projectdiscovery/nuclei
https://github.com/projectdiscovery/nuclei/releases/tag/v3.6.2
https://github.com/projectdiscovery/nuclei/releases/tag/v3.6.2
GitHub
Release v3.6.2 · projectdiscovery/nuclei
What's Changed
✨ New Features
Enabled TLS session caching in the client pool to improve connection reuse and reduce handshake overhead (internal) by @dwisiswant0 in #6713
Added support for pro...
✨ New Features
Enabled TLS session caching in the client pool to improve connection reuse and reduce handshake overhead (internal) by @dwisiswant0 in #6713
Added support for pro...
❤5
The Trust Wallet browser extension has been compromised, leading to significant losses. Security investigator ZachXBT reports roughly $6M stolen from hundreds of users. If you use this extension, move your funds to a secure wallet immediately.
Be safe!!
Please open Telegram to view this post
VIEW IN TELEGRAM
👍4❤1
Multiple users have claimed to have lost around $2K collectively, with some even alleging that Spamir is involved in ratting incidents (though these claims are unverified). If you’re currently dealing with Spamir, it's strongly advised to stop all interactions and take extra caution moving forward.
Stay safe!!
Please open Telegram to view this post
VIEW IN TELEGRAM
👍5
MongoBleed: CVE-2025-14847 Memory Corruption in MongoDB. Your Database Talks Back
https://phoenix.security/mongobleed-vulnerability-cve-2025-14847/
https://phoenix.security/mongobleed-vulnerability-cve-2025-14847/
Phoenix Security
MongoBleed: CVE-2025-14847 Memory Corruption in MongoDB. Your Database Talks Back
MongoBleed vulnerability (CVE-2025-14847) leaks MongoDB heap memory without auth via zlib. See affected versions, exposure, and fixes.
Predator iOS Malware: Building a Surveillance Framework - Part 1 | Reverse Society
https://blog.reversesociety.co/blog/2025/predator-ios-malware-surveillance-framework-part-1
https://blog.reversesociety.co/blog/2025/predator-ios-malware-surveillance-framework-part-1
blog.reversesociety.co
Predator iOS Malware: Building a Surveillance Framework - Part 1 | Reverse Society
How does Predator spyware transform from running code into active surveillance? This technical deep-dive reverse-engineers the internal factory architecture that dynamically creates camera monitoring, VoIP interception, and keylogging modules through Unix…
https://discord.gg/FJcbRQ7SsD
My new discord server, it’s focused mainly on getting ready for bug bounty, finding new friends and people willing to start everything from scratch.
My new discord server, it’s focused mainly on getting ready for bug bounty, finding new friends and people willing to start everything from scratch.
Discord
Join the Bug Seekers Discord Server!
Bug Seekers: For bug bounty hunters, researchers, learners and cybersecurity specialists. | 12 members
❤3