Determining the target operating system (OS) through passive footprinting involves collecting information about a system without actively…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/determine-target-os-through-passive-footprinting-935ff7dfe45a?source=rss------bug_bounty-5)
Pro membership Bug through source code.
Hey there, folks! I hope everyone’s doing well. Let’s dive into the adventure I embarked on.Continue reading on Medium »
Read more...
Hey there, folks! I hope everyone’s doing well. Let’s dive into the adventure I embarked on.Continue reading on Medium »
Read more...
Medium
Pro membership Bug through source code.👾
Hey there, folks! I hope everyone’s doing well. Let’s dive into the adventure I embarked on.
Pro membership Bug through source code.
https://draculaa.medium.com/pro-membership-bug-through-source-code-9371a04e5d52?source=rss------bug_bounty-5
Hey there, folks! I hope everyone’s doing well. Let’s dive into the adventure I embarked on.Continue reading on Medium » (https://draculaa.medium.com/pro-membership-bug-through-source-code-9371a04e5d52?source=rss------bug_bounty-5)
https://draculaa.medium.com/pro-membership-bug-through-source-code-9371a04e5d52?source=rss------bug_bounty-5
Hey there, folks! I hope everyone’s doing well. Let’s dive into the adventure I embarked on.Continue reading on Medium » (https://draculaa.medium.com/pro-membership-bug-through-source-code-9371a04e5d52?source=rss------bug_bounty-5)
Gather Information about a Target Website using Photon
https://medium.com/@pentesterclubpvtltd/gather-information-about-a-target-website-using-photon-6cf216f3333c?source=rss------bug_bounty-5
https://medium.com/@pentesterclubpvtltd/gather-information-about-a-target-website-using-photon-6cf216f3333c?source=rss------bug_bounty-5
Photon is an open-source web-based tool for website and domain reconnaissance, and it’s designed to help gather information about a target…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/gather-information-about-a-target-website-using-photon-6cf216f3333c?source=rss------bug_bounty-5)
Cve-Collector - Simple Latest CVE Collector
http://www.kitploit.com/2023/11/cve-collector-simple-latest-cve.html
http://www.kitploit.com/2023/11/cve-collector-simple-latest-cve.html
*2023-10-10 11:05:33.370262*
1. CVE-2023-44832 / CVSS: 7.5 (HIGH)
- Published: 2023-10-05 16:15:12
- Updated: 2023-10-07 03:15:47
- CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow (https://www.kitploit.com/search/label/Buffer%20Overflow) via the MacAddress parameter in the SetWanSettings function. Th...
>> https://www.cve.org/CVERecord?id=CVE-2023-44832
- Ref.
(1) https://www.dlink.com/en/security-bulletin/
(2) https://github.com/bugfinder0/public_bug/tree/main/dlink/dir823g/SetWanSettings_MacAddress
2. CVE-2023-44831 / CVSS: 7.5 (HIGH)
- Published: 2023-10-05 16:15:12
- Updated: 2023-10-07 03:16:56
- CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
D-Lin k DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. Th...
>> https://www.cve.org/CVERecord?id=CVE-2023-44831
- Ref.
(1) https://www.dlink.com/en/security-bulletin/
(2) https://github.com/bugfinder0/public_bug/tree/main/dlink/dir823g/SetWLanRadioSettings_Type
(delimiter-based file database) # vim feeds.db
1|2023-10-10 09:24:21.496744|0d239fa87be656389c035db1c3f5ec6ca3ec7448|CVE-2023-45613|2023-10-09 11:15:11|6.8|MEDIUM|CWE-295 Improper Certificate Validation
2|2023-10-10 09:24:27.073851|30ebff007cca946a16e5140adef5a9d5db11eee8|CVE-2023-45612|2023-10-09 11:15:11|8.6|HIGH|CWE-611 Improper Restriction of XML External Entity Reference
3|2023-10-10 09:24:32.650234|815b51259333ed88193fb3beb62c9176e07e4bd8|CVE-2023-45303|2023-10-06 19:15:13|8.4|HIGH|Not found CWE ids for CVE-2023-45303
4|2023-10-10 09:24:38.369632|39f98184087b8998547bba41c0ccf2f3ad61f527|CVE-2023-45248|2023-10-09 12:15:10|6.6|MEDIUM|CWE-427 Uncontrolled Search Path Element
5|2023-10-10 09:24:43.936863|60083d8626b0b1a59ef6fa16caec2b4fd1f7a6d7|CVE-2023-45247|2023-10-09 12:15:10|7.1|HIGH|CWE-862 Missing Authorization
6|2023-10-10 09:24:49.472179|82611add9de44e5807b8f8324bdfb065f6d4177a|CVE-2023-45246|2023-10-06 11:15:11|7.1|HIGH|CWE-287 Improper Authentication
7|20 23-10-10 09:24:55.049191|b78014cd7ca54988265b19d51d90ef935d2362cf|CVE-2023-45244|2023-10-06 10:15:18|7.1|HIGH|CWE-862 Missing Authorization
The methods for collecting CVE (Common Vulnerabilities and Exposures) information are divided into different stages. They are primarily categorized into two (1) Method for retrieving CVE information after vulnerability analysis (https://www.kitploit.com/search/label/Vulnerability%20Analysis) and risk assessment (https://www.kitploit.com/search/label/Assessment) have been completed. This method involves collecting CVE information after all the processes have been completed. Naturally, there is a time lag of several days (it is slower). (2) Method for retrieving CVE information at the stage when it is included as a vulnerability. This refers to the stage immediately after a CVE ID has been assigned and the vulnerability (https://www.kitploit.com/search/label/Vulnerability) has been publicly disclosed. At this stage, there may only be basic information about the vulnerability, or the CVSS score may not have been evaluated, and there may be a lack of necessary content such as reference documents. This code is designed to parse HTML elements from cvedetails.com, so it may not function correctly if the HTML page structure changes. In case of errors during parsing, exception handling has been included, so if it doesn't work as expected, please inspect the HTML source for any changes. Get free latest infomation. If useful to someone, Free for all to the last. (absolutely no paid) ID 2 is the channel created using this repository source code.If you find this helpful, please the "star" to support further improvements.
1. CVE-2023-44832 / CVSS: 7.5 (HIGH)
- Published: 2023-10-05 16:15:12
- Updated: 2023-10-07 03:15:47
- CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow (https://www.kitploit.com/search/label/Buffer%20Overflow) via the MacAddress parameter in the SetWanSettings function. Th...
>> https://www.cve.org/CVERecord?id=CVE-2023-44832
- Ref.
(1) https://www.dlink.com/en/security-bulletin/
(2) https://github.com/bugfinder0/public_bug/tree/main/dlink/dir823g/SetWanSettings_MacAddress
2. CVE-2023-44831 / CVSS: 7.5 (HIGH)
- Published: 2023-10-05 16:15:12
- Updated: 2023-10-07 03:16:56
- CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
D-Lin k DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. Th...
>> https://www.cve.org/CVERecord?id=CVE-2023-44831
- Ref.
(1) https://www.dlink.com/en/security-bulletin/
(2) https://github.com/bugfinder0/public_bug/tree/main/dlink/dir823g/SetWLanRadioSettings_Type
(delimiter-based file database) # vim feeds.db
1|2023-10-10 09:24:21.496744|0d239fa87be656389c035db1c3f5ec6ca3ec7448|CVE-2023-45613|2023-10-09 11:15:11|6.8|MEDIUM|CWE-295 Improper Certificate Validation
2|2023-10-10 09:24:27.073851|30ebff007cca946a16e5140adef5a9d5db11eee8|CVE-2023-45612|2023-10-09 11:15:11|8.6|HIGH|CWE-611 Improper Restriction of XML External Entity Reference
3|2023-10-10 09:24:32.650234|815b51259333ed88193fb3beb62c9176e07e4bd8|CVE-2023-45303|2023-10-06 19:15:13|8.4|HIGH|Not found CWE ids for CVE-2023-45303
4|2023-10-10 09:24:38.369632|39f98184087b8998547bba41c0ccf2f3ad61f527|CVE-2023-45248|2023-10-09 12:15:10|6.6|MEDIUM|CWE-427 Uncontrolled Search Path Element
5|2023-10-10 09:24:43.936863|60083d8626b0b1a59ef6fa16caec2b4fd1f7a6d7|CVE-2023-45247|2023-10-09 12:15:10|7.1|HIGH|CWE-862 Missing Authorization
6|2023-10-10 09:24:49.472179|82611add9de44e5807b8f8324bdfb065f6d4177a|CVE-2023-45246|2023-10-06 11:15:11|7.1|HIGH|CWE-287 Improper Authentication
7|20 23-10-10 09:24:55.049191|b78014cd7ca54988265b19d51d90ef935d2362cf|CVE-2023-45244|2023-10-06 10:15:18|7.1|HIGH|CWE-862 Missing Authorization
The methods for collecting CVE (Common Vulnerabilities and Exposures) information are divided into different stages. They are primarily categorized into two (1) Method for retrieving CVE information after vulnerability analysis (https://www.kitploit.com/search/label/Vulnerability%20Analysis) and risk assessment (https://www.kitploit.com/search/label/Assessment) have been completed. This method involves collecting CVE information after all the processes have been completed. Naturally, there is a time lag of several days (it is slower). (2) Method for retrieving CVE information at the stage when it is included as a vulnerability. This refers to the stage immediately after a CVE ID has been assigned and the vulnerability (https://www.kitploit.com/search/label/Vulnerability) has been publicly disclosed. At this stage, there may only be basic information about the vulnerability, or the CVSS score may not have been evaluated, and there may be a lack of necessary content such as reference documents. This code is designed to parse HTML elements from cvedetails.com, so it may not function correctly if the HTML page structure changes. In case of errors during parsing, exception handling has been included, so if it doesn't work as expected, please inspect the HTML source for any changes. Get free latest infomation. If useful to someone, Free for all to the last. (absolutely no paid) ID 2 is the channel created using this repository source code.If you find this helpful, please the "star" to support further improvements.
Download Cve-Collector (https://github.com/password123456/cve-collector)
Gather Information about a Target Website using Photon
Photon is an open-source web-based tool for website and domain reconnaissance, and it’s designed to help gather information about a target…Continue reading on Medium »
Read more...
Photon is an open-source web-based tool for website and domain reconnaissance, and it’s designed to help gather information about a target…Continue reading on Medium »
Read more...
Medium
Gather Information about a Target Website using Photon
Photon is an open-source web-based tool for website and domain reconnaissance, and it’s designed to help gather information about a target…
Gather DNS Information using nslookup Command Line Utility and Online Tool
You can gather DNS (Domain Name System) information using both the nslookup command line utility and online DNS lookup tools.Continue reading on Medium »
Read more...
You can gather DNS (Domain Name System) information using both the nslookup command line utility and online DNS lookup tools.Continue reading on Medium »
Read more...
Medium
Gather DNS Information using nslookup Command Line Utility and Online Tool
You can gather DNS (Domain Name System) information using both the nslookup command line utility and online DNS lookup tools. Here's how to…
Security Vulnerabilities — Appspot.com — Owned by Google
Exposing Critical Security Flaws and Urging ActionContinue reading on Medium »
Read more...
Exposing Critical Security Flaws and Urging ActionContinue reading on Medium »
Read more...
Medium
Security Vulnerabilities — Appspot.com — Owned by Google
Exposing Critical Security Flaws and Urging Action
Recon-ng — Complete Scan — Emails, Sub Domains & Hidden Files
Recon-ng is a popular open-source reconnaissance and information-gathering tool. You can use Recon-ng to perform a variety of scans to…Continue reading on Medium »
Read more...
Recon-ng is a popular open-source reconnaissance and information-gathering tool. You can use Recon-ng to perform a variety of scans to…Continue reading on Medium »
Read more...
Medium
Recon-ng — Complete Scan — Emails, Sub Domains & Hidden Files
Recon-ng is a popular open-source reconnaissance and information-gathering tool. You can use Recon-ng to perform a variety of scans to…
Maltego — The Automated OSINT Tool for Ethical Hackers
Maltego is a powerful and widely-used open-source intelligence (OSINT) tool that is invaluable for ethical hackers, cybersecurity…Continue reading on Medium »
Read more...
Maltego is a powerful and widely-used open-source intelligence (OSINT) tool that is invaluable for ethical hackers, cybersecurity…Continue reading on Medium »
Read more...
Medium
Maltego — The Automated OSINT Tool for Ethical Hackers
Maltego is a powerful and widely-used open-source intelligence (OSINT) tool that is invaluable for ethical hackers, cybersecurity…
Gather DNS Information using nslookup Command Line Utility and Online Tool
https://medium.com/@pentesterclubpvtltd/gather-dns-information-using-nslookup-command-line-utility-and-online-tool-32551bb8b111?source=rss------bug_bounty-5
https://medium.com/@pentesterclubpvtltd/gather-dns-information-using-nslookup-command-line-utility-and-online-tool-32551bb8b111?source=rss------bug_bounty-5
You can gather DNS (Domain Name System) information using both the nslookup command line utility and online DNS lookup tools.Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/gather-dns-information-using-nslookup-command-line-utility-and-online-tool-32551bb8b111?source=rss------bug_bounty-5)
Security Vulnerabilities — Appspot.com — Owned by Google
https://medium.com/@24bkdoor/security-vulnerabilities-appspot-com-owned-by-google-3e6d4f0e9ee3?source=rss------bug_bounty-5
https://medium.com/@24bkdoor/security-vulnerabilities-appspot-com-owned-by-google-3e6d4f0e9ee3?source=rss------bug_bounty-5
Exposing Critical Security Flaws and Urging ActionContinue reading on Medium » (https://medium.com/@24bkdoor/security-vulnerabilities-appspot-com-owned-by-google-3e6d4f0e9ee3?source=rss------bug_bounty-5)