ExploitHub
@exploithub
6.38K subscribers
18 photos
1 video
15 files
348 links
Download Telegram
About
Blog
Apps
Platform
Join
ExploitHub
6.38K subscribers
ExploitHub
“How I found the most critical bug in live bug bounty event?” by Lakshay https://link.medium.com/CwfZBZO2I3
Medium
How I found the most critical bug in live bug bounty event?
Hey Folks! Hope you guys are doing great.
2.2K views
ExploitHub
“Password Reset Vulnerability — Full Account takeover (Insecure Direct Object Reference)” by Muhammad Asim Shahzad https://link.medium.com/d6BPOQZ2I3
2.2K views
ExploitHub
https://thezerohack.com/hack-instagram-again
The Zero Hack
How I Hacked Instagram Again - The Zero Hack
This article is about an account takeover vulnerability I found on Instagram that allows anyone to hack Instagram accounts without consent permission. Facebook and Instagram security team fixed the issue and rewarded me $10000 as a part of their bounty program. …
2.2K views
ExploitHub
https://ninadmathpati.com/how-i-was-able-to-earn-1000-with-just-10-minutes-of-bug-bounty/
Ninad Mathpati
How I was able to earn 1000$ with just 10 minutes of bug bounty? - Ninad Mathpati
All about Password reset configurations
2.3K views
ExploitHub
“Top 25 RCE Bug Bounty Reports” by Cristian Cornea


https://link.medium.com/IUdLa32KH3
Medium
Top 25 RCE Bug Bounty Reports
In this article, we will discuss Remote Code Execution (RCE) vulnerability, how to find one and present 25 disclosed reports based on this
2.7K views
ExploitHub
2.6K views
ExploitHub
https://hazana.xyz/posts/escalating-reflected-xss-with-http-smuggling/?fbclid=IwAR32L1AF5Tm9ExAbcDfZJ9fswKSgj-vMCQPMU75ZcOJ88nsvJyLGGATDhiw
2.5K views
ExploitHub
Actual XSS in 2020



https://netsec.expert/2020/02/01/xss-in-2020.html
3.2K viewsedited  
ExploitHub
https://victoni.github.io/bug-hunting-xss-on-cookie-popup-warning/
2.6K views
ExploitHub
“Two-factor authentication security testing and possible bypasses” by Max https://link.medium.com/vWnWo4H6A3
Medium
Two-factor authentication security testing and possible bypasses
Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…
2.3K views
ExploitHub
https://github.com/w181496/Web-CTF-Cheatsheet
GitHub
GitHub - w181496/Web-CTF-Cheatsheet: Web CTF CheatSheet 🐈
Web CTF CheatSheet 🐈. Contribute to w181496/Web-CTF-Cheatsheet development by creating an account on GitHub.
2.2K views
ExploitHub
Dropbox bug bounty program has paid out over $1,000,000
https://blogs.dropbox.com/tech/2020/02/dropbox-bug-bounty-program-has-paid-out-over-1000000/
2.0K views
ExploitHub
A Not-So-Blind RCE with SQL Injection
https://medium.com/@notsoshant/a-not-so-blind-rce-with-sql-injection-13838026331e
Medium
A Not-So-Blind RCE with SQL Injection
This is a story of a typical xp_cmdshell giving a RCE which is blind due to some restrictions and how I bypassed those restrictions.
1.9K views
ExploitHub
Forwarded from h1disclosebot
GitHub Security Lab disclosed a bug submitted by calderpwn: https://t.co/kJySKZdV0Z - Bounty: $1,000 #hackerone… https://t.co/x9GJt0F42A
HackerOne
GitHub Security Lab disclosed on HackerOne: CodeQL query to detect...
Report created by importer
1.8K views
ExploitHub
https://medium.com/comm-it/binary-exploitation-ret2libc-e812074bb45b?source=search_post
Medium
Binary Exploitation — ret2libc
In this post, I would like to share a binary exploitation example from PicoCTF-2018 called got-2-learn-libc.
1.9K views
ExploitHub
https://medium.com/bugbountywriteup/binary-exploitation-5fe810db3ed4?source=search_post
Medium
Modern Binary Exploitation Writeups 0x01
This is the writeup of Modern Binary Exploitation course by RIPSEC.
1.8K views
ExploitHub
https://medium.com/swlh/binary-exploitation-format-string-vulnerabilities-70edd501c5be
Medium
Binary Exploitation: Format String Vulnerabilities
And how printing a string led to code execution?!!
1.7K views
ExploitHub
https://medium.com/bugbountywriteup/binary-exploitation-5fe810db3ed4
Medium
Modern Binary Exploitation Writeups 0x01
This is the writeup of Modern Binary Exploitation course by RIPSEC.
1.8K views
ExploitHub
WebSocket attacks

1. https://t.co/1V2XJnYsrc
2. https://t.co/jbIZKoIflw
3. https://t.co/Fg7uUwd7YB
4. https://t.co/jOVTIFWUEk
5. https://t.co/iiVV2uzm0J
6. https://t.co/iiVV2uzm0J
7. https://t.co/iiVV2uzm0J
8. https://t.co/nRqwcFe4zX

#bugbounty #bugbountytips
footstep.ninja
cat ~/footstep.ninja/blog.txt
The HTML5 Herald
1.9K views
ExploitHub
OK Google: bypass the authentication! https://techblog.mediaservice.net/2020/01/ok-google-bypass-the-authentication/
1.8K views
ExploitHub
https://medium.com/@04sabsas/xss-will-never-die-eb3584081a5f
Medium
XSS will never die
Stories about 5 very different XSS
1.7K views