Hy Guy’s this write up is all about my SQL Injection that I found in PRIVATE program running on BugCrowd

Estimated Reading Time: 6 minutes Summary about Centreon Centreon is a free and open source infrastructure monitoring software, Centreon allows the system administrators to monitor their infrastructure from a centralized web application, Centreon has become…

Recently i discovered a semi responded SSRF on Vimeo with code execution possibility. This blog post explains how i found & exploited it…

الSOP/CORS هم حصانة المعلومات الحساسة من هجمات CORS vulnerability !

The attacker was able to send a password reset link to an arbitrary email by sending an array of email addresses instead of a single email address.

POST...

Discover the attack surface and prioritize risk with our "all-in-one" offensive security platform

Get an attacker's view of your organization with our all-in-one offensive security platform

In this blog, Sunil Yadav, our lead trainer for "Advanced Web Hacking " training class, will discuss a case study where a Server-Side Request Forgery (SSRF) vulnerability was identified and exploited

Awesome XSS stuff. Contribute to s0md3v/AwesomeXSS development by creating an account on GitHub.

Repository for hosting my research papers. Contribute to s0md3v/Papers development by creating an account on GitHub.

The Brave Browser is safer & much faster, based on Chrome. Earn crypto while your browse:
https://brave.com/hac463

Notes as I learn basic AWS penetration testing. Contribute to PinkP4nther/aws-testing-notes development by creating an account on GitHub.

This article contains some of common ways to bypass CSRF protection in web applications that you can use as bug bounty hunter

Hackers, with a redesign of the Program Profiles, we’ve also released a new feature: download @Burp_Suite Project files. It enables you to import a Program scope into Burp. No need to manually set up scope in Burp anymore. You can find it at the bottom of…

Penetration Testing notes, resources and scripts. Contribute to AnasAboreeda/Penetration-Testing-Study-Notes development by creating an account on GitHub.

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios - adon90/pentest_compilation

Hello Everyone I’m sil3nt_4unt3r. I am bug hunter on hackerone and bugcrowd. This is my first blog, so forgive my mistakes

Simple websites vulnerable to Server Side Template Injections(SSTI) - DiogoMRSilva/websitesVulnerableToSSTI