XSS via HTML Injection in Chatbot

Hello Hackers (^人^)Continue reading on Medium »
Read more...

Networking for Pentesting. Please advise me.
https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/

<!-- SC_OFF -->Please advise me on how to start a career in pentesting.
I need to learn networking, but I can't choose the right path.
I tried Network+, but all the videos I watched looked like dry theory.
I found a CCNA videos and liked them. But I don't understand. Do I really need to know Cisco IOS, for example?
Is it a good idea to study networking through CCNA (e.g. Jeremy's IT Lab, etc.), or can I skip some topics that are not necessary? I don't plan to take the CCNA now. <!-- SC_ON --> submitted by /u/Narrow-Tradition208 (https://www.reddit.com/user/Narrow-Tradition208)
[link] (https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/) [comments] (https://www.reddit.com/r/Pentesting/comments/1csgqnd/networking_for_pentesting_please_advise_me/)

5 bugs in one program $$$

Hello everyone, In this article I will explain how I found 5 bugs in a programContinue reading on Medium »
Read more...

Unveiling Order Processing Vulnerabilities Protecting Your Business in the Digital Era

In the digital age, where e-commerce reigns supreme, order processing is the heartbeat of any online business.Continue reading on Medium »
Read more...

Unraveling the Web of Price Manipulation Safeguarding Fairness in Markets

In the intricate ecosystem of commerce, prices serve as the cornerstone of transactions, dictating the allocation of resources and…Continue reading on Medium »
Read more...

5 bugs in one program $$$
https://el-cezeri.medium.com/5-bugs-in-one-program-80b550c06a67?source=rss------bug_bounty-5

Hello everyone, In this article I will explain how I found 5 bugs in a programContinue reading on Medium » (https://el-cezeri.medium.com/5-bugs-in-one-program-80b550c06a67?source=rss------bug_bounty-5)

Unveiling Order Processing Vulnerabilities Protecting Your Business in the Digital Era
https://medium.com/@Land2Cyber/unveiling-order-processing-vulnerabilities-protecting-your-business-in-the-digital-era-efd027aef0a1?source=rss------bug_bounty-5

In the digital age, where e-commerce reigns supreme, order processing is the heartbeat of any online business.Continue reading on Medium » (https://medium.com/@Land2Cyber/unveiling-order-processing-vulnerabilities-protecting-your-business-in-the-digital-era-efd027aef0a1?source=rss------bug_bounty-5)

Unraveling the Web of Price Manipulation Safeguarding Fairness in Markets
https://medium.com/@Land2Cyber/unraveling-the-web-of-price-manipulation-safeguarding-fairness-in-markets-29541623195e?source=rss------bug_bounty-5

In the intricate ecosystem of commerce, prices serve as the cornerstone of transactions, dictating the allocation of resources and…Continue reading on Medium » (https://medium.com/@Land2Cyber/unraveling-the-web-of-price-manipulation-safeguarding-fairness-in-markets-29541623195e?source=rss------bug_bounty-5)

Database/collection of XXS javascript payloads
https://www.reddit.com/r/Pentesting/comments/1csque2/databasecollection_of_xxs_javascript_payloads/

<!-- SC_OFF -->I've been studying up on XSS vulnerablities recently, and most of the material I've come across is mostly about locating attack vectors and filter evasion, but I'm having trouble finding info about payloads to experiment with. Most of what I've seen is cookie-grabbing and a couple of remote command execution scripts that target .war uploading, and using beef to gain browser-access. I'd like to find something a little more comprehensive, instead of crawling through blog/medium posts to collect individual case studies. I feel like seeing a collection of them in one place might help me get a better grasp on whats possible. Is there anything like that, a kind of exploitdb dedicated to js XSS exploits? <!-- SC_ON --> submitted by /u/video_dhara (https://www.reddit.com/user/video_dhara)
[link] (https://www.reddit.com/r/Pentesting/comments/1csque2/databasecollection_of_xxs_javascript_payloads/) [comments] (https://www.reddit.com/r/Pentesting/comments/1csque2/databasecollection_of_xxs_javascript_payloads/)

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware
https://www.reddit.com/r/redteamsec/comments/1csqdxj/threat_actors_misusing_quick_assist_in_social/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/MisusingQuickAssist) [comments] (https://www.reddit.com/r/redteamsec/comments/1csqdxj/threat_actors_misusing_quick_assist_in_social/)

Why I want to become a bug bounty hunter

Instead of choosing the easy path of just finishing uni and then getting some tech job, I am teaching myself bug bounty hunting besides…Continue reading on Medium »
Read more...

Why I want to become a bug bounty hunter
https://medium.com/@riccilovesdogs/why-i-want-to-become-a-bug-bounty-hunter-135e4f584af6?source=rss------bug_bounty-5

Instead of choosing the easy path of just finishing uni and then getting some tech job, I am teaching myself bug bounty hunting besides…Continue reading on Medium » (https://medium.com/@riccilovesdogs/why-i-want-to-become-a-bug-bounty-hunter-135e4f584af6?source=rss------bug_bounty-5)

Breaking Barriers: A Personal Journey Through the World of Bug Bounty Hunting

The Journey BeginsContinue reading on Medium »
Read more...

Breaking Barriers: A Personal Journey Through the World of Bug Bounty Hunting
https://medium.com/@un1tycyb3r/breaking-barriers-a-personal-journey-through-the-world-of-bug-bounty-hunting-a30331db12fa?source=rss------bug_bounty-5