ExploitHub – Telegram

ExploitHub

6.3K subscribers

18 photos

1 video

15 files

349 links

Download Telegram

About

Blog

Apps

Platform

6.3K subscribers

http://c0d3g33k.blogspot.com/2017/11/story-of-json-xss.html

Story of a JSON XSS

Hi folks, This post is about of one of my recent my finding in a bug bounty program. I started checking the applicati...

2.86K views15:38

External XML Entity via File Upload (SVG)
https://0xatul.github.io/posts/2020/02/external-xml-entity-via-file-upload-svg/

3.45K views15:40

https://link.medium.com/qVWXqS9QW3

NMAP CHEAT-SHEET (Nmap Scanning Types, Scanning Commands , NSE Scripts)

Hello Readers,Hope you are doing well.

3.47K views14:51

Setup your Terminal and CMD for AWS testing
https://medium.com/sourav-sahana/setup-your-terminal-for-aws-testing-b65f8d5fc36a

Setup your Terminal and CMD for AWS testing

Hi Hunters!! Hope you all are good and hunting well. In this write up you will see how I configured my terminal for AWS testing. If you…

3.26K views18:09

“A Simple IDOR to Account Takeover” by Swapmaurya https://link.medium.com/v5uhRZEy53

A Simple IDOR to Account Takeover

Getting Started with IDOR, What is IDOR?

2.79K views03:42

https://blog.truesec.com/2020/02/12/from-s3-bucket-to-laravel-unserialize-rce/

2.77K views06:55

https://devhints.io/

Devhints.io cheatsheets

https://assets.devhints.io/previews/index.jpg

A ridiculous collection of web development cheatsheets

2.81K views18:54

“Serious back door Vulnerabilities spotted in Tik Tok” by Faisal Khan https://link.medium.com/HwdfDmBPZ3

Serious back door Vulnerabilities spotted in TikTok

The security flaws were identified by a cybersecurity firm Check Point, which the company claims to have fixed

2.46K views16:48

Blind IDOR in LinkedIn iOS application
https://hailstorm1422.com/linkedin-blind-idor/

2.27K views17:06

XSS on Sony subdomain
https://medium.com/@gguzelkokar.mdbf15/xss-on-sony-subdomain-feddaea8f5ac

XSS on Sony subdomain

Hi guys. This is my first bug bounty writeup. I started to bug bounty on july 22, 2019. I want to share with community all the…

2.15K views17:10

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3
https://medium.com/@prasanthc41m/cve-2020-5842-stored-xss-vulnerability-in-codoforum-4-8-3-b2e1133c6a91

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3

Happy New Year 2020!!!

2.07K views17:12

Hunting Good Bugs with only <HTML>
https://medium.com/@know.0nix/hunting-good-bugs-with-only-html-d8fd40d17b38

Hunting Good Bugs with only <HTML>

Hey hunters! being a while of my last post! so let’s get deep on this right now!

2.03K views17:12

https://medium.com/@black_b/yahoo-idor-elimination-of-any-comment-e898f4f955f1

YAHOO IDOR -elimination of any comment

Hello everyone, my name is Bernardo and I’m from Chile, this time I bring you a bug (IDOR) that I found in Yahoo that allows you to remove…

2.05K views17:12

https://medium.com/@0xHyde/yahoo-two-xssi-vulnerabilities-chained-to-steal-user-information-750-bounty-e9bc6a41a40a

Yahoo — Two XSSi vulnerabilities chained to steal user information. ($750 Bounty)

While intercepting requests using Burp Suite I noticed the following request:

2.08K views17:12

https://medium.com/@ozil.hakim/stored-xss-in-yahoo-and-all-subdomains-bbcaa7c3b8d

Stored XSS in Yahoo and all subdomains!

This is Hakim Bencella (H4kst3r) , and im from ALGERIA.

2.07K views17:12

https://medium.com/@kedrisec/how-i-found-2-9-rce-at-yahoo-bug-bounty-program-20ab50dbfac7

How I found 2.9 RCE at Yahoo! Bug Bounty program

Hi. I’m kedrisec and I want to describe 3 vulnerabilities that I found as part of the security research at Yahoo Bug Bounty program. So…

2.04K views17:12

https://medium.com/@TheShahzada/stored-xss-in-yahoo-b0878ecc97e2

Stored XSS in Yahoo!

Sharing is Caring :) When we share, we open doors to a new beginning…../

2.24K views17:12

https://medium.com/@saamux/spoof-a-user-to-create-a-description-of-a-group-in-flickr-72b6b8432404

Spoof an user to create a description of a group in Flickr

Hi guys, I’m now at San Francisco and I’m very happy because I met with a lot of Hackers at HackerOne h1–415. I am very grateful to have…

2.29K views17:12

Adding a malicious notebook to be treated like a trusted notebook in Google Colab — 1337$
https://medium.com/@raushanraj_65039/adding-a-malicious-notebook-to-be-treated-like-a-trusted-notebook-in-google-colab-1337-b84353a9f77

Adding a malicious notebook to be treated like a trusted notebook in Google Colab — 1337$

2.23K views17:12

Unauthorized Google Maps API Key Usage Cases, and Why You Need to Care https://medium.com/@ozguralp/unauthorized-google-maps-api-key-usage-cases-and-why-you-need-to-care-1ccb28bf21e

Unauthorized Google Maps API Key Usage Cases, and Why You Need to Care

For the ones who do not have any information about this service and its API Key’s, Google Maps API is a paid service which allows…

2.06K views17:12

Vimeo Livestream Bug Bounty WriteUp
https://medium.com/@m.slamat_25204/vimeo-livestream-bug-bounty-writeup-13fd208b5f4f

Vimeo Livestream Bug Bounty WriteUp

Phishing Using Signup at Livestream API

1.96K views17:12