Gaining Control: How Response Manipulation Leads to Higher Privileges

Greetings, readers! I am Maulik Goti, a Security Analyst👨‍💻 and Cyber Security Researcher🕵🏻‍♀️. First, we understand this…Continue reading on Medium »
Read more...

Multiple Business Logic Errors in APPLE music/TV allowing bypass of parental controls

Hi techies, from this side of the screen ! Lets’ start the write-up without wasting the golden time !Continue reading on Medium »
Read more...

Subhunter - A Fast Subdomain Takeover Tool
http://www.kitploit.com/2024/05/subhunter-fast-subdomain-takeover-tool.html

Subdomain (https://www.kitploit.com/search/label/Subdomain) takeover is a common vulnerability (https://www.kitploit.com/search/label/Vulnerability) that allows an attacker to gain control over a subdomain of a target domain and redirect users intended for an organization's domain to a website that performs malicious activities, such as phishing (https://www.kitploit.com/search/label/Phishing) campaigns, stealing (https://www.kitploit.com/search/label/Stealing) user cookies, etc. It occurs when an attacker gains control over a subdomain of a target domain. Typically, this happens when the subdomain has a CNAME in the DNS, but no host is providing content for it. Subhunter takes a given list of Subdomain ( https:=)s" title="Subdomain (https://www.kitploit.com/search/label/Subdomain)s">subdomains and scans them to check this vulnerability (https://www.kitploit.com/search/label/Vulnerability).
Features: Auto update Uses random user agents Built in Go Uses a fork of fingerprint data from well known sources (can-i-take-over-xyz (https://github.com/EdOverflow/can-i-take-over-xyz/blob/master/README.md)) Installation: Option 1: Download (https://github.com/Nemesis0U/Subhunter/releases) from releases Option 2: Build from source: $ git clone https://github.com/Nemesis0U/Subhunter.git
$ go build subhunter.go
Usage: Options: Usage of subhunter:
-l string
File including a list of hosts to scan
-o string
File to save results
-t int
Number of threads for scanning (default 50)
-timeout int
Timeout in seconds (default 20)
Demo (Added fake fingerprint for POC): ./Subhunter -l subdomains.txt -o test.txt

____ _ _ _
/ ___| _ _ | |__ | |__ _ _ _ __ | |_ ___ _ __
\___ \ | | | | | '_ \ | '_ \ | | | | | '_ \ | __| / _ \ | '__|
___) | | |_| | | |_) | | | | | | |_| | | | | | | |_ | __/ | |
|____/ \__,_| |_.__/ |_| |_| \__,_| |_| |_| \__| \___| |_|


A fast subdomain takeover tool

Created by Nemesis

Loaded 88 fingerprints for current scan

-----------------------------------------------------------------------------

[+] Nothing found at www.ubereats.com: Not Vulnerable
[+] Nothing found at testauth.ubereats.com: Not Vulnerable
[+] Nothing found at apple-maps-app-clip.ubereats.com: Not Vulnerable
[+] Nothing found at about.ubereats.com: Not Vulnerable
[+] Nothing found at beta.ubereats.com: Not Vulnerable
[+] Nothing found at ewp.ubereats.com: Not Vulnerable
[+] Nothi ng found at edgetest.ubereats.com: Not Vulnerable
[+] Nothing found at guest.ubereats.com: Not Vulnerable
[+] Google Cloud: Possible takeover found at testauth.ubereats.com: Vulnerable
[+] Nothing found at info.ubereats.com: Not Vulnerable
[+] Nothing found at learn.ubereats.com: Not Vulnerable
[+] Nothing found at merchants.ubereats.com: Not Vulnerable
[+] Nothing found at guest-beta.ubereats.com: Not Vulnerable
[+] Nothing found at merchant-help.ubereats.com: Not Vulnerable
[+] Nothing found at merchants-beta.ubereats.com: Not Vulnerable
[+] Nothing found at merchants-staging.ubereats.com: Not Vulnerable
[+] Nothing found at messages.ubereats.com: Not Vulnerable
[+] Nothing found at order.ubereats.com: Not Vulnerable
[+] Nothing found at restaurants.ubereats.com: Not Vulnerable
[+] Nothing found at payments.ubereats.com: Not Vulnerable
[+] Nothing found at static.ubereats.com: Not Vulnerable

Subhunter exiting...
Results written to test.txt




Download Subhunter (https://github.com/umutcamliyurt/Subhunter)

A Arte de Explorar SQL Injection: Uma abordagem profunda
https://medium.com/@davidkarpinski1/sql-injection-masterclass-d68f65cd71ae?source=rss------bug_bounty-5

Hoje é dia de dominar a falha de SQL Injection. Iremos cobrir vários tópicos, então já prepare o seu café e vamos nessa!Continue reading on Medium » (https://medium.com/@davidkarpinski1/sql-injection-masterclass-d68f65cd71ae?source=rss------bug_bounty-5)

Gaining Control: How Response Manipulation Leads to Higher Privileges (PoC)
https://medium.com/@mrmaulik191/gaining-control-how-response-manipulation-leads-to-higher-privileges-394bdf5f552b?source=rss------bug_bounty-5

Greetings, readers! I am Maulik Goti, a Security Analyst👨‍💻 and Cyber Security Researcher🕵🏻‍♀️.
First, we understand this…Continue reading on Medium » (https://medium.com/@mrmaulik191/gaining-control-how-response-manipulation-leads-to-higher-privileges-394bdf5f552b?source=rss------bug_bounty-5)

Multiple Business Logic Errors in APPLE music/TV allowing bypass of parental controls
https://medium.com/@sam0-0/multiple-business-logic-errors-in-apple-music-tv-allowing-bypass-of-parental-controls-0d870d4870c5?source=rss------bug_bounty-5

Hi techies, from this side of the screen ! Lets’ start the write-up without wasting the golden time !Continue reading on Medium » (https://medium.com/@sam0-0/multiple-business-logic-errors-in-apple-music-tv-allowing-bypass-of-parental-controls-0d870d4870c5?source=rss------bug_bounty-5)

XSS via HTML Injection in Chatbot
https://medium.com/@nidishms1999/xss-via-html-injection-in-chatbot-a24c4f25dc92?source=rss------bug_bounty-5

Hello Hackers (^人^)Continue reading on Medium » (https://medium.com/@nidishms1999/xss-via-html-injection-in-chatbot-a24c4f25dc92?source=rss------bug_bounty-5)

XSS via HTML Injection in Chatbot

Hello Hackers (^人^)Continue reading on Medium »
Read more...

Networking for Pentesting. Please advise me.
https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/

<!-- SC_OFF -->Please advise me on how to start a career in pentesting.
I need to learn networking, but I can't choose the right path.
I tried Network+, but all the videos I watched looked like dry theory.
I found a CCNA videos and liked them. But I don't understand. Do I really need to know Cisco IOS, for example?
Is it a good idea to study networking through CCNA (e.g. Jeremy's IT Lab, etc.), or can I skip some topics that are not necessary? I don't plan to take the CCNA now. <!-- SC_ON --> submitted by /u/Narrow-Tradition208 (https://www.reddit.com/user/Narrow-Tradition208)
[link] (https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/) [comments] (https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/)

5 bugs in one program $$$

Hello everyone, In this article I will explain how I found 5 bugs in a programContinue reading on Medium »
Read more...

Unveiling Order Processing Vulnerabilities Protecting Your Business in the Digital Era

In the digital age, where e-commerce reigns supreme, order processing is the heartbeat of any online business.Continue reading on Medium »
Read more...