Mastering Web Application Security: Defending Against Injections and Broken Access Control
https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5
Web Application Security encompasses a diverse array of security measures aimed at ensuring the proper functioning of a web application…Continue reading on Medium » (https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5)
https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5
Web Application Security encompasses a diverse array of security measures aimed at ensuring the proper functioning of a web application…Continue reading on Medium » (https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5)
Welcome Back Psychomong PeopleContinue reading on Medium » (https://medium.com/@psychomong/go-witness-install-guide-a62d96be30b0?source=rss------bug_bounty-5)
ParagonsDAO’s Bug Bounty Program
https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5
https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5
At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.Continue reading on ParagonsDAO » (https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5)
This Tool Helps Me To Find The Origin IP Address
https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5
https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5
Hi, Ajak Amico! Welcome back to another blog. Today I will show you how to find the origin IP address using An automated tool.Continue reading on Medium » (https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5)
ParagonsDAO’s Bug Bounty Program
At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.Continue reading on ParagonsDAO »
Read more...
At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.Continue reading on ParagonsDAO »
Read more...
Medium
ParagonsDAO’s Bug Bounty Program
At ParagonsDAO, we constantly strive for excellence and industry standardswhen it comes to ensuring protocol security.
This Tool Helps Me To Find The Origin IP Address
Hi, Ajak Amico! Welcome back to another blog. Today I will show you how to find the origin IP address using An automated tool.Continue reading on Medium »
Read more...
Hi, Ajak Amico! Welcome back to another blog. Today I will show you how to find the origin IP address using An automated tool.Continue reading on Medium »
Read more...
CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts
Navigating the Complex World of Cybersecurity:Continue reading on Medium »
Read more...
Navigating the Complex World of Cybersecurity:Continue reading on Medium »
Read more...
Medium
CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts
Navigating the Complex World of Cybersecurity:
CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts
https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5
https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5
Navigating the Complex World of Cybersecurity:Continue reading on Medium » (https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5)
My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes
Explore how I discover a role-changing vulnerability at Private program that allowed users to switch roles without admin privileges and get me paid 750$.This write-up provides the steps to reproduce this surprising bug and its potential impact.Understanding Examlent.com(a pseudonym for the actual platform) Examlent.com is an online job search and career information platform that connects job seekers with employers. It’s designed to help individuals find jobs, gain insights into salaries, and access valuable company information. Talent.com’s mission is to make the job search experience efficient and effective. As part of its services, Talent.com allows users to create accounts with specific roles and privileges, a crucial aspect of maintaining a secure and organized platform. Among these roles, administrators hold a special status, as they have the authority to manage user roles and permissions within the platform.The Bug Discovery: My journey began with an account on Examlet.com, one with standard user privileges, and another with admin privileges. As a responsible bug hunter, I decided to explore the platform, meticulously examining different functionalities. As i found an functionality which allow admin to change the users roles so i think about it what if a low level user can change their permission by themselves. Thats how, stumbled upon a Privilege Escalation bug, a vulnerability that could potentially lead to unauthorized role changes, compromising the platform’s security.Steps to Reproduce: Here’s how I found and reproduced the bug:Create Two Accounts: I created two accounts — one with admin privileges and the other with standard user privileges.Capture the Admin Request: I captured the request made when the admin changed a user’s role.User Privilege Change: I used the standard user account’s cookie or request to change its privilege to admin.The request i used is look like this below request:-POST /employers/settings/ajax/action-update-user.php?country=us&language=en HTTP/1.1Host: in.examlent.comCookie:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9,hi;q=0.8,pt;q=0.7Connection: closefirstName=user&lastName=user&email=busermail@gmail.com&user=FDRsoKzZEYJjdWUYxETG1iFf-bgI*&privilege=admin 5. I sent the request, and like magic, the standard user became an admin.The Impact: This bug could have significant consequences, including:Unauthorized role changes, leading to unauthorized access.Bypassing security measures designed to ensure only administrators can change user roles.Potential unauthorized takeovers of administrative privileges.The Bounty After responsibly disclosing this vulnerability to Examlet.com, the bug bounty program awarded me a well-deserved $750 bounty. The platform’s security team recognized the severity of the issue and acted swiftly to fix it.Takeaway Always explore the admin-level features and permissions with low-level user accounts. You might uncover critical security flaws that can benefit both you and the platform’s security.Leave some clap if you enjoyed this read, leave your feedback in comment and consider following me for more exciting findings.Find me on Twitter: @a13h1_Thank you everyone Keep Supporting, Keep Clapping, Keep Commenting. My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
Explore how I discover a role-changing vulnerability at Private program that allowed users to switch roles without admin privileges and get me paid 750$.This write-up provides the steps to reproduce this surprising bug and its potential impact.Understanding Examlent.com(a pseudonym for the actual platform) Examlent.com is an online job search and career information platform that connects job seekers with employers. It’s designed to help individuals find jobs, gain insights into salaries, and access valuable company information. Talent.com’s mission is to make the job search experience efficient and effective. As part of its services, Talent.com allows users to create accounts with specific roles and privileges, a crucial aspect of maintaining a secure and organized platform. Among these roles, administrators hold a special status, as they have the authority to manage user roles and permissions within the platform.The Bug Discovery: My journey began with an account on Examlet.com, one with standard user privileges, and another with admin privileges. As a responsible bug hunter, I decided to explore the platform, meticulously examining different functionalities. As i found an functionality which allow admin to change the users roles so i think about it what if a low level user can change their permission by themselves. Thats how, stumbled upon a Privilege Escalation bug, a vulnerability that could potentially lead to unauthorized role changes, compromising the platform’s security.Steps to Reproduce: Here’s how I found and reproduced the bug:Create Two Accounts: I created two accounts — one with admin privileges and the other with standard user privileges.Capture the Admin Request: I captured the request made when the admin changed a user’s role.User Privilege Change: I used the standard user account’s cookie or request to change its privilege to admin.The request i used is look like this below request:-POST /employers/settings/ajax/action-update-user.php?country=us&language=en HTTP/1.1Host: in.examlent.comCookie:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9,hi;q=0.8,pt;q=0.7Connection: closefirstName=user&lastName=user&email=busermail@gmail.com&user=FDRsoKzZEYJjdWUYxETG1iFf-bgI*&privilege=admin 5. I sent the request, and like magic, the standard user became an admin.The Impact: This bug could have significant consequences, including:Unauthorized role changes, leading to unauthorized access.Bypassing security measures designed to ensure only administrators can change user roles.Potential unauthorized takeovers of administrative privileges.The Bounty After responsibly disclosing this vulnerability to Examlet.com, the bug bounty program awarded me a well-deserved $750 bounty. The platform’s security team recognized the severity of the issue and acted swiftly to fix it.Takeaway Always explore the admin-level features and permissions with low-level user accounts. You might uncover critical security flaws that can benefit both you and the platform’s security.Leave some clap if you enjoyed this read, leave your feedback in comment and consider following me for more exciting findings.Find me on Twitter: @a13h1_Thank you everyone Keep Supporting, Keep Clapping, Keep Commenting. My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
Medium
My $750 Privilege Escalation Bug: How I Prevented Unauthorized Role Changes
Explore how I discover a role-changing vulnerability at Private program that allowed users to switch roles without admin privileges and get…
Horizon Protocol V2 — Hacken Bug Bounty Program Now Live On Testnet
We are excited to announce the launch of our bug bounty program for Horizon Protocol V2 on testnet (including the new Horizon Futures)…Continue reading on Medium »
Read more...
We are excited to announce the launch of our bug bounty program for Horizon Protocol V2 on testnet (including the new Horizon Futures)…Continue reading on Medium »
Read more...
Medium
Horizon Protocol V2 — Hacken Bug Bounty Program Now Live On Testnet
We are excited to announce the launch of our bug bounty program for Horizon Protocol V2 on testnet (including the new Horizon Futures)…
How I Could Leak Phone Numbers and Emails of Indian Voters and Applicants
Vulnerable APIs Leaking Personal Identifiable Information (PII) of voters and applicantsContinue reading on Medium »
Read more...
Vulnerable APIs Leaking Personal Identifiable Information (PII) of voters and applicantsContinue reading on Medium »
Read more...
Medium
How I Could Leak Phone Numbers and Emails of Indian Voters and Applicants
Vulnerable APIs Leaking Personally Identifiable Information (PII) of voters and applicants
Getting Started with Recon Automation using ReNgine on Windows (WSL): Installation Guide
Reconnaissance plays a crucial role in bug hunting and pentesting, serving as a vital step to ensure comprehensive coverage of all assetsContinue reading on Medium »
Read more...
Reconnaissance plays a crucial role in bug hunting and pentesting, serving as a vital step to ensure comprehensive coverage of all assetsContinue reading on Medium »
Read more...
Medium
Getting Started with Recon Automation using ReNgine on Windows (WSL): Installation Guide
Reconnaissance plays a crucial role in bug hunting and pentesting, serving as a vital step to ensure coverage of all assets