XSS on TikTok
https://19whoami19.medium.com/xss-on-tiktok-d2aa209c746d?source=rss------bug_bounty-5

Hi folks ,Continue reading on Medium » (https://19whoami19.medium.com/xss-on-tiktok-d2aa209c746d?source=rss------bug_bounty-5)

An Email Authentication Bypass, But Marked as N/A in NASA domain
https://medium.com/@Ajakcybersecurity/an-email-authentication-bypass-but-marked-as-n-a-in-nasa-domain-a47977aed8bd?source=rss------bug_bounty-5

Thank you for 2K Followers, keep showing love :) Hi, Ajak Amico’s welcome back to another blog. Today I will explain, How I found an Email…Continue reading on Medium » (https://medium.com/@Ajakcybersecurity/an-email-authentication-bypass-but-marked-as-n-a-in-nasa-domain-a47977aed8bd?source=rss------bug_bounty-5)

An Email Authentication Bypass, But Marked as N/A in NASA domain

Thank you for 2K Followers, keep showing love :) Hi, Ajak Amico’s welcome back to another blog. Today I will explain, How I found an Email…Continue reading on Medium »
Read more...

Completed TCM's PEH mid course capstone and Jr. Pentesting learning path completely and still struggling in easy boxes.
https://www.reddit.com/r/Pentesting/comments/1crnuvp/completed_tcms_peh_mid_course_capstone_and_jr/

<!-- SC_OFF -->Invested in TCM and Try Hack Me premium model. Recently completed Jr. Pentester learning path and struggled with the final CTF challenge. Started PEH by TCM simultaneously and reached mid course capstone challenge which contains boxes like Eternal Blue, Academy, Butler etc. But I am struggling hard to complete these on my own and have to look at walkthrough. Is it normal or I am lacking work ethics or it's part of learning, cause it is really frustrating. PLEASE HELP <!-- SC_ON --> submitted by /u/Master-Ad-6677 (https://www.reddit.com/user/Master-Ad-6677)
[link] (https://www.reddit.com/r/Pentesting/comments/1crnuvp/completed_tcms_peh_mid_course_capstone_and_jr/) [comments] (https://www.reddit.com/r/Pentesting/comments/1crnuvp/completed_tcms_peh_mid_course_capstone_and_jr/)

An easy way to find bugs: Enter wrong data

If you’re looking to find something, don’t follow the path that’s already been prepared, try a strange pathContinue reading on Medium »
Read more...

An easy way to find bugs: Enter wrong data
https://systemweakness.com/an-easy-way-to-find-bugs-enter-wrong-data-0765ed4e9afd?source=rss------bug_bounty-5

If you’re looking to find something, don’t follow the path that’s already been prepared, try a strange pathContinue reading on System Weakness » (https://systemweakness.com/an-easy-way-to-find-bugs-enter-wrong-data-0765ed4e9afd?source=rss------bug_bounty-5)

21.3 Lab: SSRF via OpenID dynamic client registration | 2024
https://cyberw1ng.medium.com/21-3-lab-ssrf-via-openid-dynamic-client-registration-2024-c9ffd445e438?source=rss------bug_bounty-5

This lab allows client applications to dynamically register themselves with the OAuth service via a registration endpoint. Some…Continue reading on Medium » (https://cyberw1ng.medium.com/21-3-lab-ssrf-via-openid-dynamic-client-registration-2024-c9ffd445e438?source=rss------bug_bounty-5)

21.3 Lab: SSRF via OpenID dynamic client registration | 2024

This lab allows client applications to dynamically register themselves with the OAuth service via a registration endpoint. Some…Continue reading on Medium »
Read more...

JNDI Injection — The Complete Story
https://infosecwriteups.com/jndi-injection-the-complete-story-4c5bfbb3f6e1?source=rss------bug_bounty-5

This blog investigates the security implications of JNDI Injection, a vulnerability that arises when malicious actors manipulate JNDI…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/jndi-injection-the-complete-story-4c5bfbb3f6e1?source=rss------bug_bounty-5)

JNDI Injection — The Complete Story

This blog investigates the security implications of JNDI Injection, a vulnerability that arises when malicious actors manipulate JNDI…Continue reading on InfoSec Write-ups »
Read more...

Broken Access Control (IDOR) & Credential Leak at Legacy API Video Transcode
https://medium.com/@blackarazi/broken-access-control-idor-credential-leak-at-legacy-api-video-transcode-9b5d729fb2d6?source=rss------bug_bounty-5