HackerOne

[LaForge] and [Holger] have been hacking around on cell phones for quite a while now, and this led to them working on the open cellphone at OpenMoko and developing the OsmocomBB GSM SDR software. N…

2.03K viewsAmir Kiani, 21:29

HackerOne

SecHub.io - Educational Platform for Web Sec

2.31K viewsAmir Kiani, 18:15

HackerOne

https://amp.cnn.com/cnn/2019/03/21/tech/facebook-password-database/index.html?__twitter_impression=true

#good_news

CNN

Facebook staff had access to hundreds of millions of people's passwords

Facebook is back with another mea culpa.

1.87K viewsAmir Kiani, 23:31

HackerOne

#Fake_Buyer

1.56K viewsAmir Kiani, 01:03

HackerOne

Group :
https://t.me/joinchat/EnMw_kGyaHh7_2UbzgtEdg

Security Researchers

@HackerOne
Dont Spam
English Only

1.7K viewsAmir Kiani, 01:36

HackerOne

https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability

Zero Day Initiative

Zero Day Initiative — CVE-2019-0604: Details of a Microsoft SharePoint RCE Vulnerability

Last month, Microsoft released patches to address two remote code execution (RCE) vulnerabilities in SharePoint. In both Critical-rated cases, an attacker could send a specially crafted request to execute their code in the context of the SharePoint application…

1.64K viewsAmir Kiani, 14:21

HackerOne

2.49K viewsMmD, 14:23

HackerOne

https://dantheiotman.com/2017/09/15/p4wnp1-the-pi-zero-based-usb-attack-platform

Dan The IOT Man

P4wnP1 – The Pi Zero based USB attack Platform

The P4wnP1 is an exciting and feature rich USB attack platform that runs on a Raspberry Pi Zero. The P4wnP1 turns your Pi Zero/Zero W into a physical security Ethical Hacking pentest tool. In this …

1.97K viewsMmD, 21:27

HackerOne

https://blog.scrt.ch/2018/08/24/remote-code-execution-on-a-facebook-server/

2.11K viewsAmir Kiani, 23:55

HackerOne

https://medium.com/@princechaddha/an-unusal-bug-on-braintree-paypal-b8d3ec662414

Medium

An Unusal Bug 🐛 on Braintree [PayPal]

This is my first post about one of my finding on PayPal Bug Bounty program.

2.17K viewsAmir Kiani, 16:29

HackerOne

2.15K viewsMmD, 19:31

HackerOne

https://blog.redforce.io/sql-injection-in-insert-update-query-without-comma/

Redforce

Comma is forbidden! No worries!! Inject in insert/update queries without it

A writeup regarding exploiting SQL injection issue in an insert query while it wasn't possible to use a comma at my payload at all.

2.41K viewsAmir Kiani, 06:24

HackerOne

Apache Root Privilege Escalation
https://cfreal.github.io/carpe-diem-cve-2019-0211-apache-local-root.html

cfreal.github.io

cfreal's blog

Hacker.

Maintainer of <a href=

2.43K viewsAmir Kiani, 10:24

HackerOne

https://github.com/seemoo-lab/nexmon

GitHub

GitHub - seemoo-lab/nexmon: The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode,…

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more - seemoo-lab/nexmon

2.17K viewsMmD, 02:35

HackerOne

https://papers.mathyvanhoef.com/dragonblood.pdf

A Security Analysis of WPA3’s SAE Handshake

2.19K viewsAmir Kiani, edited 04:50

HackerOne

Forwarded from Mir Saman Tajbakhsh

A simple description about VPN through TOR and TOR through VPN.

https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/

105 viewsMir Saman Tajbakhsh, 08:15

HackerOne

https://github.com/zerosum0x0/smbdoor

2.14K viewsAmir Kiani, 09:02

HackerOne

Forwarded from UCTF

Join @uutctf at http://ctf.uut.ac.ir

103 viewsMir Saman Tajbakhsh, 16:21

HackerOne

https://portswigger.net/blog/xss-without-html-client-side-template-injection-with-angularjs

PortSwigger Research

XSS without HTML: Client-Side Template Injection with AngularJS

Abstract Naive use of the extremely popular JavaScript framework AngularJS is exposing numerous websites to Angular Template Injection. This relatively low profile sibling of server-side template inje

1.59K viewsAmir Kiani, 05:20

About

Blog

Apps

Platform