Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
SMShell - Send Commands And Receive Responses Over SMS From Mobile Broadband Capable Computers
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEUP2kJiHpHSz8be_u-LNqVXu1RRbGJRLtKGpYI-wG-X7DizrCzsSpJIIkx4rn1bTz0Vp86FiFywTSXu2JB5-TjXl2lsMmq3eeieOY9QLCDm0Q3Hy3i_gyl59yDID1eJJy-eQi1IO5A8XLvSDOl5WKtc7dsCGvCc4fwgbQRhxPc27rZssY2awnp0xnKfWY/w640-h338/SMShell_1.gif
PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers.
This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023
Disclaimer
This is not a complete C2 but rather a simple Proof of Concept for executing commands remotely over SMS.
Requirements
For the shell to work you need to devices capable of sending SMS. The victim's computer should be equiped with WWAN module with either a physical SIM or eSIM deployed.
On the operator's end, two tools are provided:
* .NET binary which uses an embedded WWAN module
* Python script which uses an external Huaweu MiFi thourgh its API
Of course, you could in theory use any online SMS provider on the operator's end via their API.
Usage
On the victim simply execute the
The operator must specify the victim's phone number as a parameter:
Whereas if you use the python script you must additionally specify the MiFi details:
A demo as presented by Markus at Offensive is shown below. On the left is the operator's VM with a MiFi attached, whereas on the right window is client agent.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEUP2kJiHpHSz8be_u-LNqVXu1RRbGJRLtKGpYI-wG-X7DizrCzsSpJIIkx4rn1bTz0Vp86FiFywTSXu2JB5-TjXl2lsMmq3eeieOY9QLCDm0Q3Hy3i_gyl59yDID1eJJy-eQi1IO5A8XLvSDOl5WKtc7dsCGvCc4fwgbQRhxPc27rZssY2awnp0xnKfWY/w640-h338/SMShell_1.gif
Download SMShell
SMShell - Send Commands And Receive Responses Over SMS From Mobile Broadband Capable Computers
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEUP2kJiHpHSz8be_u-LNqVXu1RRbGJRLtKGpYI-wG-X7DizrCzsSpJIIkx4rn1bTz0Vp86FiFywTSXu2JB5-TjXl2lsMmq3eeieOY9QLCDm0Q3Hy3i_gyl59yDID1eJJy-eQi1IO5A8XLvSDOl5WKtc7dsCGvCc4fwgbQRhxPc27rZssY2awnp0xnKfWY/w640-h338/SMShell_1.gif
PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers.
This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023
Disclaimer
This is not a complete C2 but rather a simple Proof of Concept for executing commands remotely over SMS.
Requirements
For the shell to work you need to devices capable of sending SMS. The victim's computer should be equiped with WWAN module with either a physical SIM or eSIM deployed.
On the operator's end, two tools are provided:
* .NET binary which uses an embedded WWAN module
* Python script which uses an external Huaweu MiFi thourgh its API
Of course, you could in theory use any online SMS provider on the operator's end via their API.
Usage
On the victim simply execute the
client-agent.exe binary. If the agent is compiled as a Console Application you should see some verbose messages. If it's compiled as a Windows Application (best for real engagements), there will be no GUI.The operator must specify the victim's phone number as a parameter:
server-console.exe +306912345678
Whereas if you use the python script you must additionally specify the MiFi details:
python3 server-console.py --mifi-ip 192.168.0.1 --mifi-username admin --mifi-password 12345678 --number +306912345678 -v
A demo as presented by Markus at Offensive is shown below. On the left is the operator's VM with a MiFi attached, whereas on the right window is client agent.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEUP2kJiHpHSz8be_u-LNqVXu1RRbGJRLtKGpYI-wG-X7DizrCzsSpJIIkx4rn1bTz0Vp86FiFywTSXu2JB5-TjXl2lsMmq3eeieOY9QLCDm0Q3Hy3i_gyl59yDID1eJJy-eQi1IO5A8XLvSDOl5WKtc7dsCGvCc4fwgbQRhxPc27rZssY2awnp0xnKfWY/w640-h338/SMShell_1.gif
Download SMShell
SMShell - Send Commands And Receive Responses Over SMS From Mobile Broadband Capable Computers
http://www.kitploit.com/2023/09/smshell-send-commands-and-receive.html
http://www.kitploit.com/2023/09/smshell-send-commands-and-receive.html
PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research (https://www.kitploit.com/search/label/Research) on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 (https://www.offensivecon.org/speakers/2023/markus-vervier.html)
Disclaimer This is not a complete C2 but rather a simple Proof of Concept for executing commands remotely over SMS. Requirements For the shell to work you need to devices capable of sending SMS. The victim's computer should be equiped with WWAN module with either a physical SIM or eSIM deployed. On the operator's end, two tools are provided: .NET binary (https://www.kitploit.com/search/label/Binary) which uses an embedded (https://www.kitploit.com/search/label/Embedded) WWAN module Python script which uses an external Huaweu MiFi thourgh its API Of course, you could in theory use any online SMS provider on the operator's end via their API. Usage On the victim simply execute the client-agent.exe binary. If the agent is compiled as a Console Application you should see some verbose messages. If it's compiled as a Windows Application (best for real engagements), there will be no GUI. The operator must specify the victim's phone number (https://www.kitploit.com/search/label/Phone%20Number) as a parameter: server-console.exe +306912345678
Whereas if you use the python script you must additionally specify the MiFi details: python3 server-console.py --mifi-ip 192.168.0.1 --mifi-username admin --mifi-password 12345678 --number +306912345678 -v
A demo as presented by Markus at Offensive is shown below. On the left is the operator's VM with a MiFi attached, whereas on the right window is client agent.
Disclaimer This is not a complete C2 but rather a simple Proof of Concept for executing commands remotely over SMS. Requirements For the shell to work you need to devices capable of sending SMS. The victim's computer should be equiped with WWAN module with either a physical SIM or eSIM deployed. On the operator's end, two tools are provided: .NET binary (https://www.kitploit.com/search/label/Binary) which uses an embedded (https://www.kitploit.com/search/label/Embedded) WWAN module Python script which uses an external Huaweu MiFi thourgh its API Of course, you could in theory use any online SMS provider on the operator's end via their API. Usage On the victim simply execute the client-agent.exe binary. If the agent is compiled as a Console Application you should see some verbose messages. If it's compiled as a Windows Application (best for real engagements), there will be no GUI. The operator must specify the victim's phone number (https://www.kitploit.com/search/label/Phone%20Number) as a parameter: server-console.exe +306912345678
Whereas if you use the python script you must additionally specify the MiFi details: python3 server-console.py --mifi-ip 192.168.0.1 --mifi-username admin --mifi-password 12345678 --number +306912345678 -v
A demo as presented by Markus at Offensive is shown below. On the left is the operator's VM with a MiFi attached, whereas on the right window is client agent.
Download SMShell (https://github.com/persistent-security/SMShell)
Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw
12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw
Post Views: 35 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
An estimated 12,000 Juniper SRX firewalls and EX switches are facing a severe vulnerability that could lead to remote code execution without authentication.
In August, Juniper disclosed a series of vulnerabilities, including ‘PHP environment variant manipulation’ (CVE-2023-36844/CVE-2023-36845) and ‘Missing Authentication for Critical Function’ (CVE-2023-36846/CVE-2023-36847). On their own, these vulnerabilities had a ‘medium’ severity rating of 5.3.
However, when these vulnerabilities are chained together, they result in a critical remote code execution flaw with a rating of 9.8.
WatchTowr Labs released a proof of concept (PoC) that exploited the CVE-2023-36845 and CVE-2023-36846 vulnerabilities. This PoC allowed researchers to execute code remotely by uploading two files to a vulnerable device.
Recently, VulnCheck vulnerability researcher Jacob Baines presented another PoC exploit that only utilizes CVE-2023-36845. This bypasses the need to upload files while still achieving remote code execution.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
As part of Baines’ report, he shared a free scanner on GitHub designed to identify vulnerable deployments. The scanner revealed thousands of vulnerable devices exposed on the internet.
“In this blog, we demonstrated how CVE-2023-36845, a vulnerability flagged as ‘Medium’ severity by Juniper, can be used to remotely execute arbitrary code without authentication,” explains VulnCheck’s report.
“We’ve turned a multi-step (but very good) exploit into an exploit that can be written using a single curl command and appears to affect more (older) systems.” Exploit
Baines conducted tests using an old Juniper SRX210 firewall but found that his device lacked the do_fileUpload() functionality necessary to upload files to the device. This disrupted watchTowr’s exploit chain, prompting Baines to explore alternative methods for achieving remote code execution.
Baines discovered that it was possible to bypass the need to upload files to the target servers by manipulating environment variables.
The Juniper firewall’s Appweb web server processes user HTTP requests via stdin when running a CGI script. Attackers can manipulate this process to recognize a pseudo “file,”/dev/fd/0, and adjust environment variables and HTTP requests to display sensitive data.
VulnCheck leveraged PHP’s ‘auto_prepend_file’ and ‘allow_url_include’ features to execute arbitrary PHP code using the data:// protocol without the need to upload any files.
The severity rating of CVE-2023-36845, originally 5.4, should now be re-evaluated as it has demonstrated the ability to achieve remote code execution without relying on other vulnerabilities.
https://www.bleepstatic.com/images/news/u/1220909/2023/APTs/46/PoC.jpg Proof of concept curl command (VulnCheck)
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Headerpwn
The impact of this security issue is more extensive and severe than its “medium” CVSS rating indicates. Administrators should take immediate action to address this vulnerability.
CVE-2023-36845 affects the following versions of Junos OS on EX Series and SRX Series:
* All versions before 20.4R3-S8
* 21.1 version 21.1R1 and later versions
* 21.2 versions before 21.2R3-S6
* 21.3 versions before 21.3R3-S5
* 21.4 versions before 21.4R3-S5
* 22.1 versions b[...]
12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw
12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw
Post Views: 35 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes
An estimated 12,000 Juniper SRX firewalls and EX switches are facing a severe vulnerability that could lead to remote code execution without authentication.
In August, Juniper disclosed a series of vulnerabilities, including ‘PHP environment variant manipulation’ (CVE-2023-36844/CVE-2023-36845) and ‘Missing Authentication for Critical Function’ (CVE-2023-36846/CVE-2023-36847). On their own, these vulnerabilities had a ‘medium’ severity rating of 5.3.
However, when these vulnerabilities are chained together, they result in a critical remote code execution flaw with a rating of 9.8.
WatchTowr Labs released a proof of concept (PoC) that exploited the CVE-2023-36845 and CVE-2023-36846 vulnerabilities. This PoC allowed researchers to execute code remotely by uploading two files to a vulnerable device.
Recently, VulnCheck vulnerability researcher Jacob Baines presented another PoC exploit that only utilizes CVE-2023-36845. This bypasses the need to upload files while still achieving remote code execution.
See Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses
As part of Baines’ report, he shared a free scanner on GitHub designed to identify vulnerable deployments. The scanner revealed thousands of vulnerable devices exposed on the internet.
“In this blog, we demonstrated how CVE-2023-36845, a vulnerability flagged as ‘Medium’ severity by Juniper, can be used to remotely execute arbitrary code without authentication,” explains VulnCheck’s report.
“We’ve turned a multi-step (but very good) exploit into an exploit that can be written using a single curl command and appears to affect more (older) systems.” Exploit
Baines conducted tests using an old Juniper SRX210 firewall but found that his device lacked the do_fileUpload() functionality necessary to upload files to the device. This disrupted watchTowr’s exploit chain, prompting Baines to explore alternative methods for achieving remote code execution.
Baines discovered that it was possible to bypass the need to upload files to the target servers by manipulating environment variables.
The Juniper firewall’s Appweb web server processes user HTTP requests via stdin when running a CGI script. Attackers can manipulate this process to recognize a pseudo “file,”/dev/fd/0, and adjust environment variables and HTTP requests to display sensitive data.
VulnCheck leveraged PHP’s ‘auto_prepend_file’ and ‘allow_url_include’ features to execute arbitrary PHP code using the data:// protocol without the need to upload any files.
The severity rating of CVE-2023-36845, originally 5.4, should now be re-evaluated as it has demonstrated the ability to achieve remote code execution without relying on other vulnerabilities.
https://www.bleepstatic.com/images/news/u/1220909/2023/APTs/46/PoC.jpg Proof of concept curl command (VulnCheck)
Trending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Headerpwn
The impact of this security issue is more extensive and severe than its “medium” CVSS rating indicates. Administrators should take immediate action to address this vulnerability.
CVE-2023-36845 affects the following versions of Junos OS on EX Series and SRX Series:
* All versions before 20.4R3-S8
* 21.1 version 21.1R1 and later versions
* 21.2 versions before 21.2R3-S6
* 21.3 versions before 21.3R3-S5
* 21.4 versions before 21.4R3-S5
* 22.1 versions b[...]
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking 12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw 12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw Post Views: 35 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png…
efore 22.1R3-S3
* 22.2 versions before 22.2R3-S2
* 22.3 versions before 22.3R2-S2, 22.3R3
* 22.4 versions before 22.4R2-S1, 22.4R3
Juniper released security updates to address the vulnerability on August 17, 2023. However, due to its low initial severity rating, many affected users might have postponed applying the updates.
VulnCheck’s network scans identified 14,951 Juniper devices with internet-exposed web interfaces. From a sample size of 3,000 devices, Baines found that 79% were vulnerable to this remote code execution flaw.
https://www.bleepstatic.com/images/news/u/1220909/2023/APTs/46/shodan-scan.png Shodan scan result (VulnCheck)
Since hackers are already exploring the opportunity to leverage CVE-2023-36845 in attacks, Juniper admins must apply these updates as soon as possible, as they could be used to gain initial access to corporate networks.
Trending: New Phishing Campaign Exploits Microsoft Teams to Deliver DarkGate Loader Malware Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-5-300x150.png Facebook Business Accounts Under Attack: NodeStealer Variant Harvests Credentials
September 18, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-4-300x150.png MGM Resorts Hit by BlackCat Ransomware Affiliate: Data Stolen, Operations Halted
September 15, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-3-300x150.png Critical Kubernetes Flaws Expose Windows Endpoints to Remote Code Execution
September 14, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-2-300x150.png MetaStealer: New macOS Malware Targeting Intel-Based Computers Emerges
September 13, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course
Begin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions
Find out how Pentesting Services can help you.
The post 12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw first appeared on Black Hat Ethical Hacking.
* 22.2 versions before 22.2R3-S2
* 22.3 versions before 22.3R2-S2, 22.3R3
* 22.4 versions before 22.4R2-S1, 22.4R3
Juniper released security updates to address the vulnerability on August 17, 2023. However, due to its low initial severity rating, many affected users might have postponed applying the updates.
VulnCheck’s network scans identified 14,951 Juniper devices with internet-exposed web interfaces. From a sample size of 3,000 devices, Baines found that 79% were vulnerable to this remote code execution flaw.
https://www.bleepstatic.com/images/news/u/1220909/2023/APTs/46/shodan-scan.png Shodan scan result (VulnCheck)
Since hackers are already exploring the opportunity to leverage CVE-2023-36845 in attacks, Juniper admins must apply these updates as soon as possible, as they could be used to gain initial access to corporate networks.
Trending: New Phishing Campaign Exploits Microsoft Teams to Deliver DarkGate Loader Malware Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-5-300x150.png Facebook Business Accounts Under Attack: NodeStealer Variant Harvests Credentials
September 18, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-4-300x150.png MGM Resorts Hit by BlackCat Ransomware Affiliate: Data Stolen, Operations Halted
September 15, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-3-300x150.png Critical Kubernetes Flaws Expose Windows Endpoints to Remote Code Execution
September 14, 2023
* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/09/Images-for-the-News-posts-2-300x150.png MetaStealer: New macOS Malware Targeting Intel-Based Computers Emerges
September 13, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course
Begin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions
Find out how Pentesting Services can help you.
The post 12,000 Juniper Firewalls and Switches Vulnerable to Critical Flaw first appeared on Black Hat Ethical Hacking.
Unlocking Premium CV Features: My Journey to Downloading CVs for Free
So, there I was, just your average person looking to create a snazzy CV. But here’s the twist — I’m also a Pentester, which means I can’t…Continue reading on Medium »
Read more...
So, there I was, just your average person looking to create a snazzy CV. But here’s the twist — I’m also a Pentester, which means I can’t…Continue reading on Medium »
Read more...
Medium
Unlocking Premium CV Features: My Journey to Downloading CVs for Free
So, there I was, just your average person looking to create a snazzy CV. But here’s the twist — I’m also a Pentester, which means I can’t…
Bug Bounty Competition 2023 Attracts Students Interest
Since June 2023, the Center for Data and Information Technology (CfDIT/Pusdatin), the Ministry of Culture Education, Research, and…Continue reading on Medium »
Read more...
Since June 2023, the Center for Data and Information Technology (CfDIT/Pusdatin), the Ministry of Culture Education, Research, and…Continue reading on Medium »
Read more...
Medium
Bug Bounty Competition 2023 Attracts Students Interest
Since June 2023, the Center for Data and Information Technology (CfDIT/Pusdatin), the Ministry of Culture Education, Research, and…
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
FBI chief: China has bigger hacking program than all the competition combined
* FBI Director Chris Wray revealed that China has a cyberespionage program that surpasses all of its major competitors combined.
*
Wray emphasized that even if the FBI focused solely on China, Chinese hackers would still outnumber their cyber personnel by at least 50 to 1.
*
China has repeatedly denied using hackers to spy on the United States.
*
Recent high-profile hacks, including the theft of hundreds of thousands of emails from senior U.S. government officials, have been attributed to China.
*
According to Mandiant Chief Executive Kevin Mandia, Chinese hackers are among the best spies in the world.
Source : https://www.reuters.com/world/fbi-chief-says-china-has-bigger-hacking-program-than-competition-combined-2023-09-18/
submitted by /u/NuseAI
[link] [comments]
FBI chief: China has bigger hacking program than all the competition combined
* FBI Director Chris Wray revealed that China has a cyberespionage program that surpasses all of its major competitors combined.
*
Wray emphasized that even if the FBI focused solely on China, Chinese hackers would still outnumber their cyber personnel by at least 50 to 1.
*
China has repeatedly denied using hackers to spy on the United States.
*
Recent high-profile hacks, including the theft of hundreds of thousands of emails from senior U.S. government officials, have been attributed to China.
*
According to Mandiant Chief Executive Kevin Mandia, Chinese hackers are among the best spies in the world.
Source : https://www.reuters.com/world/fbi-chief-says-china-has-bigger-hacking-program-than-competition-combined-2023-09-18/
submitted by /u/NuseAI
[link] [comments]
Reddit
From the hacking community on Reddit: FBI chief: China has bigger hacking program than all the competition combined
Explore this post and more from the hacking community
hacking: security in practice
An appeal to the Mods
I'm going to have to stick my neck out here and ask the mods to reconsider removing the post that discussed a member's mental health.
[URL REMOVED TO AVOID INSTABLOCK - Hat]
Yes, it's far off topic, Yes, it may breach the rules, but consider its importance: a member in distress reached out, they were brave enough to be honest, and I guarantee, that this is not unique to those who share the interest. It's a subject that needs to be seen to be discussed.
I'll leave it there.
Hat
submitted by /u/mrhatstand
[link] [comments]
An appeal to the Mods
I'm going to have to stick my neck out here and ask the mods to reconsider removing the post that discussed a member's mental health.
[URL REMOVED TO AVOID INSTABLOCK - Hat]
Yes, it's far off topic, Yes, it may breach the rules, but consider its importance: a member in distress reached out, they were brave enough to be honest, and I guarantee, that this is not unique to those who share the interest. It's a subject that needs to be seen to be discussed.
I'll leave it there.
Hat
submitted by /u/mrhatstand
[link] [comments]
Reddit
From the hacking community on Reddit
Explore this post and more from the hacking community
Unlocking Premium CV Features: My Journey to Downloading CVs for Free
https://medium.com/@ishfaqfariq.infosec/unlocking-premium-cv-features-my-journey-to-downloading-cvs-for-free-461147e6ae63?source=rss------bug_bounty-5
https://medium.com/@ishfaqfariq.infosec/unlocking-premium-cv-features-my-journey-to-downloading-cvs-for-free-461147e6ae63?source=rss------bug_bounty-5
So, there I was, just your average person looking to create a snazzy CV. But here’s the twist — I’m also a Pentester, which means I can’t…Continue reading on Medium » (https://medium.com/@ishfaqfariq.infosec/unlocking-premium-cv-features-my-journey-to-downloading-cvs-for-free-461147e6ae63?source=rss------bug_bounty-5)
Bug Bounty Competition 2023 Attracts Students Interest
https://medium.com/@romeo78.adelaide/bug-bounty-competition-2023-attracts-students-interest-e805953fc6f2?source=rss------bug_bounty-5
https://medium.com/@romeo78.adelaide/bug-bounty-competition-2023-attracts-students-interest-e805953fc6f2?source=rss------bug_bounty-5