Forwarded from ᯤ CONTENT ZONE ᯤ (Без вождя) (𝐓𝐡𝐞 𝐀𝐥𝐩𝐡𝐚𝐒𝐞𝐜)
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥4
wsuup fam😊
I just found a high-severity CORS bug on VDP program. The vulnerability exists in their API endpoint, and it allows requests from hosts that have this domain as a suffix.and it leads to Session Hijacking, account takeover and API Data Exfiltration.🤔🤔
Now, I'm exploring whether I can chain this with other vulnerabilities like idor or smth before submitting my report.
@AfroSec
I just found a high-severity CORS bug on VDP program. The vulnerability exists in their API endpoint, and it allows requests from hosts that have this domain as a suffix.and it leads to Session Hijacking, account takeover and API Data Exfiltration.🤔🤔
Now, I'm exploring whether I can chain this with other vulnerabilities like idor or smth before submitting my report.
@AfroSec
❤3⚡1
AfroSec
The Weeknd & Playboi Carti – Timeless
This media is not supported in your browser
VIEW IN TELEGRAM
Forwarded from 𝙇𝙤𝙨𝙩𝙨𝙚𝙘
you can use this template for wordpress setup config disclosure that contains so senstive info that count as p1 just run this template on all bbp subdomains..
echo 'https://speedtest.textrapp.com/' | nuclei -t prsnl/wp-setup-config.yaml
subfinder -d example.com -all | httpx-toolkit | nuclei -t prsnl/wp-setup-config.yaml
https://github.com/coffinxp/nuclei-templates/blob/main/wp-setup-config.yaml
https://speedtest.textrapp.com//wp-admin/setup-config.php?step=1
echo 'https://speedtest.textrapp.com/' | nuclei -t prsnl/wp-setup-config.yaml
subfinder -d example.com -all | httpx-toolkit | nuclei -t prsnl/wp-setup-config.yaml
https://github.com/coffinxp/nuclei-templates/blob/main/wp-setup-config.yaml
https://speedtest.textrapp.com//wp-admin/setup-config.php?step=1
👍3
AfroSec
☕️ Sticker
This is me every night trying to stay awake the whole night, acting sleepy all day, and then getting roasted by our lecturer 😂
@AfroSec
@AfroSec
🤣2
As we all know, reading Proof-of-Concepts (PoCs) and writeups is highly recommended for improving at bug hunting. I came across this awesome GitHub repository filled with top-notch bug bounty reports:
👉 Awesome Bug_writeups
Check it out and start learning from the best! 🚀
@AfroSec
👉 Awesome Bug_writeups
Check it out and start learning from the best! 🚀
@AfroSec
👍5
This media is not supported in your browser
VIEW IN TELEGRAM
what a Christmas song huh 😂😂
@AfroSec
@AfroSec
🤣6