In the midst of a busy schedule, the little time I dedicate to bug hunting brings immense joy, especially when I stumble upon something…Continue reading on Medium » (https://medium.com/@hbenja47/my-first-idor-hiding-in-the-header-request-8a03dddc23b5?source=rss------bug_bounty-5)
Crafting XSS (Cross-Site Scripting) payloads
Crafting XSS (Cross-Site Scripting) payloads is a significant aspect of learning about web application security, particularly for…Continue reading on InfoSec Write-ups »
Read more...
Crafting XSS (Cross-Site Scripting) payloads is a significant aspect of learning about web application security, particularly for…Continue reading on InfoSec Write-ups »
Read more...
Medium
Crafting XSS (Cross-Site Scripting) payloads
Crafting XSS (Cross-Site Scripting) payloads is a significant aspect of learning about web application security, particularly for…
CVE-2023–36025: An In-Depth Analysis of Circumventing Windows SmartScreen Security
In the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This…Continue reading on InfoSec Write-ups »
Read more...
In the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This…Continue reading on InfoSec Write-ups »
Read more...
Medium
CVE-2023–36025: An In-Depth Analysis of Circumventing Windows SmartScreen Security
In the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This…
Budget Change: IDOR 1000$ Bug
Discover how an IDOR vulnerability allowed unauthorized budget changes in Private Program. Learn the steps to reproduce this security flaw and its potential impact on user privacy. IDOR vulnerabilities can potentially expose user data or allow unauthorized access to sensitive features. In this blog post, I’ll walk you through a recent discovery I made while testing Examlent.com(virtual name of privat program domain), a platform where individuals seek job opportunities and employers find potential candidates. This IDOR flaw had the potential to compromise user privacy by letting an attacker manipulate a user’s budget without their consent.The IDOR Bug As a bug bounty hunter, my mission was to explore Examlent.com for any potential security vulnerabilities. During my testing, I discover an intriguing IDOR (Insecure Direct Object Reference) bug that allowed any user to change another user’s budget without taking over their account. The endpoint responsible for this flaw was /employers/posts/ajax/action-crud-job.php?country=us&language=en&hid=------.Steps to ReproducePrepare Two Accounts: You’ll need two different accounts for this test — one as the attacker and the other as the victim.Capture the Edit Budget Request: Use your attacker account to capture the “Edit Budget” request made by the victim.Identify the hid= Value: Now, you may be wondering how the attacker can obtain the `hid=` value. Well, in this scenario, the attacker is conducting a random attack because here the hid has only 8 char long. They can attempt to brute force random id values.Send the Request: With the “Edit Budget” request and the hid= value in hand, the attacker can now send the request.Observe the Change: As a result, you’ll notice that the budget of the victim’s account has been altered without their consent.The Impact The unauthorized budget change not only compromises user privacy but also potentially results in financial losses, creating significant repercussions for both the victims and the platform’s integrity.The Bounty This critical IDOR vulnerability raised awareness about the need for enhanced security measures. Recognizing the significance of this discovery, Examlet.com promptly awarded a bounty of $1000 to me.Takeaway This IDOR bug underscores the importance of continuously examining web applications for potential vulnerabilities. Security researchers should consider testing the boundaries of permissions within applications to see if they can make changes without gaining full access to another user’s account.Leave some clap if you enjoyed this read, leave your feedback in comment and consider following me for more exciting findings.Find me on Twitter: @a13h1_Thank you everyone Keep Supporting, Keep Clapping, Keep Commenting. Budget Change: IDOR 1000$ Bug was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
Discover how an IDOR vulnerability allowed unauthorized budget changes in Private Program. Learn the steps to reproduce this security flaw and its potential impact on user privacy. IDOR vulnerabilities can potentially expose user data or allow unauthorized access to sensitive features. In this blog post, I’ll walk you through a recent discovery I made while testing Examlent.com(virtual name of privat program domain), a platform where individuals seek job opportunities and employers find potential candidates. This IDOR flaw had the potential to compromise user privacy by letting an attacker manipulate a user’s budget without their consent.The IDOR Bug As a bug bounty hunter, my mission was to explore Examlent.com for any potential security vulnerabilities. During my testing, I discover an intriguing IDOR (Insecure Direct Object Reference) bug that allowed any user to change another user’s budget without taking over their account. The endpoint responsible for this flaw was /employers/posts/ajax/action-crud-job.php?country=us&language=en&hid=------.Steps to ReproducePrepare Two Accounts: You’ll need two different accounts for this test — one as the attacker and the other as the victim.Capture the Edit Budget Request: Use your attacker account to capture the “Edit Budget” request made by the victim.Identify the hid= Value: Now, you may be wondering how the attacker can obtain the `hid=` value. Well, in this scenario, the attacker is conducting a random attack because here the hid has only 8 char long. They can attempt to brute force random id values.Send the Request: With the “Edit Budget” request and the hid= value in hand, the attacker can now send the request.Observe the Change: As a result, you’ll notice that the budget of the victim’s account has been altered without their consent.The Impact The unauthorized budget change not only compromises user privacy but also potentially results in financial losses, creating significant repercussions for both the victims and the platform’s integrity.The Bounty This critical IDOR vulnerability raised awareness about the need for enhanced security measures. Recognizing the significance of this discovery, Examlet.com promptly awarded a bounty of $1000 to me.Takeaway This IDOR bug underscores the importance of continuously examining web applications for potential vulnerabilities. Security researchers should consider testing the boundaries of permissions within applications to see if they can make changes without gaining full access to another user’s account.Leave some clap if you enjoyed this read, leave your feedback in comment and consider following me for more exciting findings.Find me on Twitter: @a13h1_Thank you everyone Keep Supporting, Keep Clapping, Keep Commenting. Budget Change: IDOR 1000$ Bug was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
Medium
Budget Change: IDOR 1000$ Bug
Discover how an IDOR vulnerability allowed unauthorized budget changes in Private Program. Learn the steps to reproduce this security flaw…
Chaining CORS by Reflected XSS to Steal Sensitive Data
https://infosecwriteups.com/chaining-cors-by-reflected-xss-to-steal-sensitive-data-c456e133c10d?source=rss------bug_bounty-5
https://infosecwriteups.com/chaining-cors-by-reflected-xss-to-steal-sensitive-data-c456e133c10d?source=rss------bug_bounty-5
My name is Mohammad Reza Omrani and in this post, I will describe a vulnerability I recently discovered.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/chaining-cors-by-reflected-xss-to-steal-sensitive-data-c456e133c10d?source=rss------bug_bounty-5)
Chaining CORS by Reflected XSS to Steal Sensitive Data
My name is Mohammad Reza Omrani and in this post, I will describe a vulnerability I recently discovered.Continue reading on InfoSec Write-ups »
Read more...
My name is Mohammad Reza Omrani and in this post, I will describe a vulnerability I recently discovered.Continue reading on InfoSec Write-ups »
Read more...
Medium
Chaining CORS by Reflected XSS to Steal Sensitive Data
My name is Mohammad Reza Omrani and in this post, I will describe a vulnerability I recently discovered.
Top Recon Tools for Bug Bounty Hunters
https://securitycipher.medium.com/top-recon-tools-for-bug-bounty-hunters-fa655b8caf2e?source=rss------bug_bounty-5
https://securitycipher.medium.com/top-recon-tools-for-bug-bounty-hunters-fa655b8caf2e?source=rss------bug_bounty-5
In this blog, we explore top-tier reconnaissance tools that empower bug bounty hunters. From Shodan’s IoT device insights to Waymore’s web…Continue reading on Medium » (https://securitycipher.medium.com/top-recon-tools-for-bug-bounty-hunters-fa655b8caf2e?source=rss------bug_bounty-5)
What is Next-Generation Antivirus (NGAV) ?
https://medium.com/@paritoshblogs/what-is-next-generation-antivirus-ngav-f05267dd2613?source=rss------bug_bounty-5
https://medium.com/@paritoshblogs/what-is-next-generation-antivirus-ngav-f05267dd2613?source=rss------bug_bounty-5
As cybercriminals continue to develop more advanced and elusive techniques, a new approach to endpoint security has emerged —…Continue reading on Medium » (https://medium.com/@paritoshblogs/what-is-next-generation-antivirus-ngav-f05267dd2613?source=rss------bug_bounty-5)
Top Recon Tools for Bug Bounty Hunters
In this blog, we explore top-tier reconnaissance tools that empower bug bounty hunters. From Shodan’s IoT device insights to Waymore’s web…Continue reading on Medium »
Read more...
In this blog, we explore top-tier reconnaissance tools that empower bug bounty hunters. From Shodan’s IoT device insights to Waymore’s web…Continue reading on Medium »
Read more...
Medium
Top Recon Tools for Bug Bounty Hunters
In this blog, we explore top-tier reconnaissance tools that empower bug bounty hunters. From Shodan’s IoT device insights to Waymore’s web…
What is Next-Generation Antivirus (NGAV) ?
As cybercriminals continue to develop more advanced and elusive techniques, a new approach to endpoint security has emerged —…Continue reading on Medium »
Read more...
As cybercriminals continue to develop more advanced and elusive techniques, a new approach to endpoint security has emerged —…Continue reading on Medium »
Read more...
Medium
What is Next-Generation Antivirus (NGAV) ?
As cybercriminals continue to develop more advanced and elusive techniques, a new approach to endpoint security has emerged —…
The Crossroads of Code Crafting: A Personal Journey Between Rewriting and Quick Fixes
https://blursdaywtf.medium.com/the-crossroads-of-code-crafting-a-personal-journey-between-rewriting-and-quick-fixes-8ab18e5a9a60?source=rss------bug_bounty-5
https://blursdaywtf.medium.com/the-crossroads-of-code-crafting-a-personal-journey-between-rewriting-and-quick-fixes-8ab18e5a9a60?source=rss------bug_bounty-5
Introduction:Continue reading on Medium » (https://blursdaywtf.medium.com/the-crossroads-of-code-crafting-a-personal-journey-between-rewriting-and-quick-fixes-8ab18e5a9a60?source=rss------bug_bounty-5)
Epic Bug Hunting Failures-2
https://infosecwriteups.com/epic-bug-hunting-failures-2-ba80f6eaca4f?source=rss------bug_bounty-5
https://infosecwriteups.com/epic-bug-hunting-failures-2-ba80f6eaca4f?source=rss------bug_bounty-5