ExploitHub
@exploithub
6.3K subscribers
18 photos
1 video
15 files
349 links
Download Telegram
About
Blog
Apps
Platform
Join
ExploitHub
6.3K subscribers
ExploitHub
“Password Reset Vulnerability — Full Account takeover (Insecure Direct Object Reference)” by Muhammad Asim Shahzad https://link.medium.com/d6BPOQZ2I3
2.17K views
ExploitHub
https://thezerohack.com/hack-instagram-again
The Zero Hack
How I Hacked Instagram Again - The Zero Hack
This article is about an account takeover vulnerability I found on Instagram that allows anyone to hack Instagram accounts without consent permission. Facebook and Instagram security team fixed the issue and rewarded me $10000 as a part of their bounty program. …
2.19K views
ExploitHub
https://ninadmathpati.com/how-i-was-able-to-earn-1000-with-just-10-minutes-of-bug-bounty/
Ninad Mathpati
How I was able to earn 1000$ with just 10 minutes of bug bounty? - Ninad Mathpati
All about Password reset configurations
2.32K views
ExploitHub
“Top 25 RCE Bug Bounty Reports” by Cristian Cornea


https://link.medium.com/IUdLa32KH3
Medium
Top 25 RCE Bug Bounty Reports
In this article, we will discuss Remote Code Execution (RCE) vulnerability, how to find one and present 25 disclosed reports based on this
2.74K views
ExploitHub
2.62K views
ExploitHub
https://hazana.xyz/posts/escalating-reflected-xss-with-http-smuggling/?fbclid=IwAR32L1AF5Tm9ExAbcDfZJ9fswKSgj-vMCQPMU75ZcOJ88nsvJyLGGATDhiw
2.45K views
ExploitHub
Actual XSS in 2020



https://netsec.expert/2020/02/01/xss-in-2020.html
3.24K viewsedited  
ExploitHub
https://victoni.github.io/bug-hunting-xss-on-cookie-popup-warning/
2.61K views
ExploitHub
“Two-factor authentication security testing and possible bypasses” by Max https://link.medium.com/vWnWo4H6A3
Medium
Two-factor authentication security testing and possible bypasses
Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…
2.32K views
ExploitHub
https://github.com/w181496/Web-CTF-Cheatsheet
GitHub
GitHub - w181496/Web-CTF-Cheatsheet: Web CTF CheatSheet 🐈
Web CTF CheatSheet 🐈. Contribute to w181496/Web-CTF-Cheatsheet development by creating an account on GitHub.
2.23K views
ExploitHub
Dropbox bug bounty program has paid out over $1,000,000
https://blogs.dropbox.com/tech/2020/02/dropbox-bug-bounty-program-has-paid-out-over-1000000/
1.99K views
ExploitHub
A Not-So-Blind RCE with SQL Injection
https://medium.com/@notsoshant/a-not-so-blind-rce-with-sql-injection-13838026331e
Medium
A Not-So-Blind RCE with SQL Injection
This is a story of a typical xp_cmdshell giving a RCE which is blind due to some restrictions and how I bypassed those restrictions.
1.92K views
ExploitHub
Forwarded from h1disclosebot
GitHub Security Lab disclosed a bug submitted by calderpwn: https://t.co/kJySKZdV0Z - Bounty: $1,000 #hackerone… https://t.co/x9GJt0F42A
HackerOne
GitHub Security Lab disclosed on HackerOne: CodeQL query to detect...
Report created by importer
1.83K views
ExploitHub
https://medium.com/comm-it/binary-exploitation-ret2libc-e812074bb45b?source=search_post
Medium
Binary Exploitation — ret2libc
In this post, I would like to share a binary exploitation example from PicoCTF-2018 called got-2-learn-libc.
1.89K views
ExploitHub
https://medium.com/bugbountywriteup/binary-exploitation-5fe810db3ed4?source=search_post
Medium
Modern Binary Exploitation Writeups 0x01
This is the writeup of Modern Binary Exploitation course by RIPSEC.
1.8K views
ExploitHub
https://medium.com/swlh/binary-exploitation-format-string-vulnerabilities-70edd501c5be
Medium
Binary Exploitation: Format String Vulnerabilities
And how printing a string led to code execution?!!
1.74K views
ExploitHub
https://medium.com/bugbountywriteup/binary-exploitation-5fe810db3ed4
Medium
Modern Binary Exploitation Writeups 0x01
This is the writeup of Modern Binary Exploitation course by RIPSEC.
1.82K views
ExploitHub
WebSocket attacks

1. https://t.co/1V2XJnYsrc
2. https://t.co/jbIZKoIflw
3. https://t.co/Fg7uUwd7YB
4. https://t.co/jOVTIFWUEk
5. https://t.co/iiVV2uzm0J
6. https://t.co/iiVV2uzm0J
7. https://t.co/iiVV2uzm0J
8. https://t.co/nRqwcFe4zX

#bugbounty #bugbountytips
footstep.ninja
cat ~/footstep.ninja/blog.txt
The HTML5 Herald
1.88K views
ExploitHub
OK Google: bypass the authentication! https://techblog.mediaservice.net/2020/01/ok-google-bypass-the-authentication/
1.78K views
ExploitHub
https://medium.com/@04sabsas/xss-will-never-die-eb3584081a5f
Medium
XSS will never die
Stories about 5 very different XSS
1.75K views