Hacking on Medium
June 2023 CTF

https://cdn-images-1.medium.com/max/1024/1*VPgf1iiAkaR8TXwUh4MJVw.jpeg
Recently, I participated in another CTF competition to continue to build my offensive security skills. The challenges contained four…

Continue reading on Medium »

Hacking on Medium
XML External Entity Injection

https://cdn-images-1.medium.com/max/1024/0*BpFF1qKOdV43hyVN.jpg
Introduction

Continue reading on Medium »

Hacking on Medium
car_park_oto malware analizi

https://cdn-images-1.medium.com/max/944/1*QuBLHY_wUg92Gv5JIBRmLg.png
Bu malware, önceki incelediklerimizden biraz farklı çalışmaktadır. Öncekilerde herhangi bir şifreleme bulunmuyordu. Bu malware’da ise…

Continue reading on Medium »

Hacking on Medium
Everything You Need To Know About Instagram Activity History

https://cdn-images-1.medium.com/max/808/1*yWx6oZ2rwHFtGNLmRwAcfw.png
Instagram is a highly popular and ever-evolving platform for sharing photos and videos. In fact, according to a recent Hootsuite report…

Continue reading on Medium »

Hacking on Medium
Decoding USEA Token’s $1.1 Million Rug Pull | QuillAudits

https://cdn-images-1.medium.com/max/1200/1*2ymKRbUPcdhL4-sgG9Ne1Q.png
Summary: On June 6, 2023, the deployer of USEA token executed an exit scam (rug pull) and stole around $1.1 million in user funds.

Continue reading on Medium »

Find XSS Easily in 3 steps
https://medium.com/@in4inci3le001/find-xss-easily-in-3-steps-e1112bb91fe4?source=rss------bug_bounty-5

Hello everyone and welcome back to the new write-up in this blog. I’m going to share with you some tips to easily find the reflective XSS…Continue reading on Medium » (https://medium.com/@in4inci3le001/find-xss-easily-in-3-steps-e1112bb91fe4?source=rss------bug_bounty-5)

Kerentanan CVE-2021–21985
https://medium.com/@seribuakal101/kerentanan-cve-2021-21985-836c27c247af?source=rss------bug_bounty-5

kerentanan remote code execution (RCE) yang ditemukan pada VMware vCenter Server dan VMware Cloud Foundation. Kerentanan ini memungkinkan…Continue reading on Medium » (https://medium.com/@seribuakal101/kerentanan-cve-2021-21985-836c27c247af?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Third MOVEit Transfer Vulnerability Disclosed by Progress Software

MOVEit has created a patch to fix the issue and urges customers to take action to protect their environments, as Cl0p attacks on the service continue to mount.

Dark Reading: Attacks/Breaches
Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps

Mobile users in the Middle East and Africa often download moneylending apps that ask for excessive permissions — an all too common issue in an area where mobile-only is the norm and cyber awareness is low.

Dark Reading: Attacks/Breaches
Attackers Create Synthetic Security Researchers to Steal IP

Threat groups created a fake security company, "High Sierra," with faux exploits and fake profiles for security researchers on GitHub and elsewhere, aiming to get targets to install their malware.

Best approach to Error-Based SQL injection
https://medium.com/@anekantsinghai/best-approach-to-error-based-sql-injection-30c73fd8fa41?source=rss------bug_bounty-5