The documentations I use in web penetration testingContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-hack-web-applications-part-1-0833c002cc9a?source=rss------bug_bounty-5)

18.2 Lab: Exploiting Java deserialization with Apache Commons | 2024
https://cyberw1ng.medium.com/18-2-lab-exploiting-java-deserialization-with-apache-commons-2024-7ba379e97b52?source=rss------bug_bounty-5

This lab uses a serialization-based session mechanism and loads the Apache Commons Collections library.Continue reading on Medium » (https://cyberw1ng.medium.com/18-2-lab-exploiting-java-deserialization-with-apache-commons-2024-7ba379e97b52?source=rss------bug_bounty-5)

From S3 bucket to internal network operation
https://www.reddit.com/r/redteamsec/comments/1c3wgpo/from_s3_bucket_to_internal_network_operation/

submitted by /u/Specific_Energy_3895 (https://www.reddit.com/user/Specific_Energy_3895)
[link] (https://medium.com/@red.whisperer/from-s3-bucket-to-internal-network-operation-8073954932b4) [comments] (https://www.reddit.com/r/redteamsec/comments/1c3wgpo/from_s3_bucket_to_internal_network_operation/)

Hacking Notes: Acquire a collection of RedTeam tools notes
https://www.reddit.com/r/redteamsec/comments/1c3x2o2/hacking_notes_acquire_a_collection_of_redteam/

submitted by /u/CtrlAltHack (https://www.reddit.com/user/CtrlAltHack)
[link] (https://github.com/Hacking-Notes/RedTeam) [comments] (https://www.reddit.com/r/redteamsec/comments/1c3x2o2/hacking_notes_acquire_a_collection_of_redteam/)

18.2 Lab: Exploiting Java deserialization with Apache Commons | 2024

This lab uses a serialization-based session mechanism and loads the Apache Commons Collections library.Continue reading on Medium »
Read more...

A click can cause 1600$ | Auth0 misconfig .

In the world of online security, even a small oversight can lead to significant vulnerabilities.Continue reading on Medium »
Read more...

A click can cause 1600$ | Auth0 misconfig .
https://naumankh4n.medium.com/a-click-can-cause-1600-auth0-misconfig-9234aedad55c?source=rss------bug_bounty-5

In the world of online security, even a small oversight can lead to significant vulnerabilities.Continue reading on Medium » (https://naumankh4n.medium.com/a-click-can-cause-1600-auth0-misconfig-9234aedad55c?source=rss------bug_bounty-5)

A unique SSRF hunt ( Invite user functionality vulnerable to blind SSRF attack )
https://medium.com/@abhishek8602314652/a-unique-ssrf-hunt-invite-user-functionality-vulnerable-to-blind-ssrf-attack-c6804b2b398b?source=rss------bug_bounty-5

What is SSRF ?Continue reading on Medium » (https://medium.com/@abhishek8602314652/a-unique-ssrf-hunt-invite-user-functionality-vulnerable-to-blind-ssrf-attack-c6804b2b398b?source=rss------bug_bounty-5)

A unique SSRF hunt ( Invite user functionality vulnerable to blind SSRF attack )

What is SSRF ?Continue reading on Medium »
Read more...

Access to transparent security testing — Why we made HackGATE™ available to everyone
https://medium.com/@levente.b.molnar/access-to-transparent-security-testing-why-we-made-hackgate-available-to-everyone-11c3e0efe44c?source=rss------bug_bounty-5

Ensuring transparency during pentests is a challenge. HackGATE is a vendor-agnostic solution to provide a clear overview of pentest…Continue reading on Medium » (https://medium.com/@levente.b.molnar/access-to-transparent-security-testing-why-we-made-hackgate-available-to-everyone-11c3e0efe44c?source=rss------bug_bounty-5)

Access to transparent security testing — Why we made HackGATE™ available to everyone

Ensuring transparency during pentests is a challenge. HackGATE is a vendor-agnostic solution to provide a clear overview of pentest…Continue reading on Medium »
Read more...

Toolkit - The Essential Toolkit For Reversing, Malware Analysis, And Cracking
http://www.kitploit.com/2024/04/toolkit-essential-toolkit-for-reversing.html