Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability

My recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of…Continue reading on Medium »
Read more...

Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability
https://lohigowda.medium.com/unveiling-cve-2024-0953-firefox-ios-open-redirect-vulnerability-57533efb4cf4?source=rss------bug_bounty-5

My recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of…Continue reading on Medium » (https://lohigowda.medium.com/unveiling-cve-2024-0953-firefox-ios-open-redirect-vulnerability-57533efb4cf4?source=rss------bug_bounty-5)

Symlink Sabotage: ZIPping Through Web Security. (LFI Lab)
https://medium.com/@josh.beck2006/symlink-sabotage-zipping-through-web-security-lfi-lab-ca20e2d30c8d?source=rss------bug_bounty-5

Objective: Learn how to exploit web applications that accept file uploads using symlinks within ZIP files.Continue reading on Medium » (https://medium.com/@josh.beck2006/symlink-sabotage-zipping-through-web-security-lfi-lab-ca20e2d30c8d?source=rss------bug_bounty-5)

CVE-2024-23222: Apple WebKit’s Zero-Day Vulnerability
https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5

Explore CVE-2024-23222, the zero-day vulnerability in WebKit affecting Apple devices, its implications, and the urgent call for updates.Continue reading on Medium » (https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5)

Symlink Sabotage: ZIPping Through Web Security. (LFI Lab)

Objective: Learn how to exploit web applications that accept file uploads using symlinks within ZIP files.Continue reading on Medium »
Read more...

CVE-2024-23222: Apple WebKit’s Zero-Day Vulnerability

Explore CVE-2024-23222, the zero-day vulnerability in WebKit affecting Apple devices, its implications, and the urgent call for updates.Continue reading on Medium »
Read more...

NTLM Relay Gat: Automating Mass Exploitation of ntlmrelayx Authenticated Sessions
https://www.reddit.com/r/redteamsec/comments/1akiy9s/ntlm_relay_gat_automating_mass_exploitation_of/

submitted by /u/ad0nis (https://www.reddit.com/user/ad0nis)
[link] (https://github.com/ad0nis/ntlm_relay_gat) [comments] (https://www.reddit.com/r/redteamsec/comments/1akiy9s/ntlm_relay_gat_automating_mass_exploitation_of/)

Physical security bypasses
https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/

<!-- SC_OFF -->I’m thinking things like metal detectors, RF scanners, IR, things you have to get past before you get to the tech. What methods have you found useful for overcoming physical security, and what’s still perplexing you? <!-- SC_ON --> submitted by /u/Gloomy-Substance6309 (https://www.reddit.com/user/Gloomy-Substance6309)
[link] (https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/) [comments] (https://www.reddit.com/r/Pentesting/comments/1akjnev/physical_security_bypasses/)

TLP-CLEAR+MIVD+AIVD+Advisory+COATHANGER
https://www.reddit.com/r/redteamsec/comments/1akmocq/tlpclearmivdaivdadvisorycoathanger/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.ncsc.nl/binaries/ncsc/documenten/publicaties/2024/februari/6/mivd-aivd-advisory-coathanger-tlp-clear/TLP-CLEAR+MIVD+AIVD+Advisory+COATHANGER.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/1akmocq/tlpclearmivdaivdadvisorycoathanger/)

“The Power of Recon A Deep Dive into Bug Bounty Reconnaissance Techniques”

In the world of cybersecurity, bug bounty programs have become indispensable for organizations seeking to fortify their defenses against…Continue reading on Medium »
Read more...

“Fuzzing Fundamentals A Practical Approach to Automated Vulnerability Discovery”

In the realm of cybersecurity, staying ahead of potential threats requires proactive measures to identify and mitigate vulnerabilities…Continue reading on Medium »
Read more...

“The Power of Recon A Deep Dive into Bug Bounty Reconnaissance Techniques”
https://medium.com/@Land2Cyber/the-power-of-recon-a-deep-dive-into-bug-bounty-reconnaissance-techniques-9bfea7a1d993?source=rss------bug_bounty-5

In the world of cybersecurity, bug bounty programs have become indispensable for organizations seeking to fortify their defenses against…Continue reading on Medium » (https://medium.com/@Land2Cyber/the-power-of-recon-a-deep-dive-into-bug-bounty-reconnaissance-techniques-9bfea7a1d993?source=rss------bug_bounty-5)

“Fuzzing Fundamentals A Practical Approach to Automated Vulnerability Discovery”
https://medium.com/@Land2Cyber/fuzzing-fundamentals-a-practical-approach-to-automated-vulnerability-discovery-1262f8206c55?source=rss------bug_bounty-5