HackerOne

2.68K viewsMmD, 12:11

HackerOne

https://corb3nik.github.io/blog/insomnihack-teaser-2019/l33t-hoster

corb3nik.github.io

l33t-hoster

Corb3nik's personal blog - Infosec, CTFs and tools

1.94K viewsAmir Kiani, 21:36

HackerOne

https://hackerone.com/reports/489146

HackerOne

HackerOne disclosed on HackerOne: Confidential data of users and...

On January 31st, 2019 at 7:16pm PST, HackerOne confirmed that two reporters were able to query confidential data through a GraphQL endpoint. This vulnerability was introduced on December 17th, 2018...

2.17K viewsAmir Kiani, 13:26

HackerOne

Forwarded from امن افزار گستر آپادانا

✔️Application Enforcement
✔️Protected Folders
✔️Temporary Protection
✔️File and Folder Honeypot
✔️DLL protection
✔️System Restore Management
✔️VSS protection

portal.kaipod.ir
@pishgaman_kaipod

123 viewsAmir Kiani, 16:35

HackerOne

https://shenaniganslabs.io/2019/02/13/Dirty-Sock.html

Shenanigans Labs

Privilege Escalation in Ubuntu Linux (dirty_sock exploit)

In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux. This was due to a bug in the snapd API, a default service. Any local user could exploit this vulnerability to obtain immediate root access to the…

2.05K viewsAmir Kiani, 20:32

HackerOne

https://google.github.io/clusterfuzz/

2.15K viewsAmir Kiani, 00:05

HackerOne

Forwarded from Bug Bounty (Amir Kiani)

https://ysamm.com/?p=185

113 viewsAmir Kiani, 11:33

HackerOne

https://github.com/swisskyrepo/PayloadsAllTheThings

GitHub

GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings

2.06K viewsMir Saman Tajbakhsh, 21:17

HackerOne

2.46K viewsMmD, 21:22

HackerOne

Forwarded from Mir Saman Tajbakhsh

OSINT: Email Mining

Email mining: Tasks, common techniques, and tools. Email is one of the most popular forms of communication nowadays, mainly due to its efficiency, low cost, and compatibility of diversified types of information.

https://www.cs.sfu.ca/~jpei/publications/EmailMining-KAIS.pdf

114 viewsMir Saman Tajbakhsh, 21:41

HackerOne

https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/

Auth0 - Blog

Critical vulnerabilities in JSON Web Token libraries

Which libraries are vulnerable to attacks and how to prevent them.

2.75K viewsAmir Kiani, 09:20

HackerOne

2.62K viewsAmir Kiani, 20:43

HackerOne

https://github.com/christophetd/CloudFlair

GitHub