Discovery Worth $$$ in KYC Verification Feature : Bug Bounty
https://medium.com/@srishavinkumar/unveiling-a-surprising-bug-in-kyc-verification-the-discovery-worth-a82f3282b033?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@srishavinkumar/unveiling-a-surprising-bug-in-kyc-verification-the-discovery-worth-a82f3282b033?source=rss------bug_bounty-5)

Is this an open redirect vulnerability?
https://www.reddit.com/r/Pentesting/comments/1ct8anf/is_this_an_open_redirect_vulnerability/

<!-- SC_OFF -->Hey does this count as open redirect? If so how do I fix it? goodexample.com.badexample.com (http://goodexample.com.badexample.com/) <!-- SC_ON --> submitted by /u/Dev_null34 (https://www.reddit.com/user/Dev_null34)
[link] (https://www.reddit.com/r/Pentesting/comments/1ct8anf/is_this_an_open_redirect_vulnerability/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ct8anf/is_this_an_open_redirect_vulnerability/)

I found a new type of web vulnerability
https://www.reddit.com/r/Pentesting/comments/1ct94jj/i_found_a_new_type_of_web_vulnerability/

<!-- SC_OFF -->Checkout my blog post about it. it's a sibling to relative path overwrite but instead of css payload, it's file injection. Not many looking for this yet, but I'm spreading the word. https://www.linkedin.com/posts/iahickey_relative-path-file-injection-the-next-evolution-activity-7193955660420591616-MnJi?utm_source=share&utm_medium=member_android <!-- SC_ON --> submitted by /u/ihickey (https://www.reddit.com/user/ihickey)
[link] (https://www.reddit.com/r/Pentesting/comments/1ct94jj/i_found_a_new_type_of_web_vulnerability/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ct94jj/i_found_a_new_type_of_web_vulnerability/)

Security architecture price
https://www.reddit.com/r/Pentesting/comments/1ct9thh/security_architecture_price/

<!-- SC_OFF -->Good morning, We are two cyber security engineers with a MSc degree in cybersecurity and 2 years of experience in the field. Following a ramsomware attack, we were contacted by a friend’s company to try to restore encrypted data. We finished the task and restored all possibile data without any payment as a favour to our friend. His company decided to rely on us as security architects to rebuild the entire network architecture. This architecture is briefly composed of 10 machines, a NAS and it is mandatory for the company having the possibility to access the NAS data everywhere. We are newbies in this specific field but at the same time we think we have the capabilities to do a great job. We would like to receive from this fantastic community suggestions on a possible fair price to offer for this project. To sum up, the service that we are going to offer is composed of: - Security design - Implementation of the designed solution - Creation of the documentation for maintenance - Security awareness of employees (e.g. phishing campaigns prevention) <!-- SC_ON --> submitted by /u/Damzap (https://www.reddit.com/user/Damzap)
[link] (https://www.reddit.com/r/Pentesting/comments/1ct9thh/security_architecture_price/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ct9thh/security_architecture_price/)

Earning from pentesting
https://www.reddit.com/r/Pentesting/comments/1cta76y/earning_from_pentesting/

<!-- SC_OFF -->I have been looking to do pentests projects to earn from there. Does anyone has some experience related to that. I would like to know how to do it and do it well. I have completed few courses and have my eyes on a certification after that. Also is there any discord group for pentesters? <!-- SC_ON --> submitted by /u/thededucer43 (https://www.reddit.com/user/thededucer43)
[link] (https://www.reddit.com/r/Pentesting/comments/1cta76y/earning_from_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/1cta76y/earning_from_pentesting/)

Vulnerable WordPress April 2024 (Arasbaran)

Github Repo: https://github.com/onhexgroup/Vulnerable-WordPressContinue reading on Medium »
Read more...

Vulnerable WordPress April 2024 (Arasbaran)
https://medium.com/@onhexgroup/vulnerable-wordpress-april-2024-arasbaran-e9ae2acb8898?source=rss------bug_bounty-5

Github Repo: https://github.com/onhexgroup/Vulnerable-WordPressContinue reading on Medium » (https://medium.com/@onhexgroup/vulnerable-wordpress-april-2024-arasbaran-e9ae2acb8898?source=rss------bug_bounty-5)

Account takeover with a sad ending
https://imwaiting18.medium.com/account-takeover-with-a-sad-ending-31ab82f09a5b?source=rss------bug_bounty-5

it’s a long oneContinue reading on Medium » (https://imwaiting18.medium.com/account-takeover-with-a-sad-ending-31ab82f09a5b?source=rss------bug_bounty-5)

Invoke-SessionHunter - Retrieve And Display Information About Active User Sessions On Remote Computers (No Admin Privileges Required)
http://www.kitploit.com/2024/05/invoke-sessionhunter-retrieve-and.html

Retrieve and display information about active (https://www.kitploit.com/search/label/Active) user sessions on remote computers (https://www.kitploit.com/search/label/Computers). No admin privileges required. The tool leverages the remote registry (https://www.kitploit.com/search/label/Registry) service to query the HKEY_USERS registry (https://www.kitploit.com/search/label/Registry) hive on the remote computers. It identifies and extracts Security Identifiers (SIDs) associated with active user sessions, and translates these into corresponding usernames, offering insights into who is currently logged in. If the -CheckAdminAccess switch is provided, it will gather sessions by authenticating to targets where you have local admin access using Invoke-WMIRemoting (https://github.com/Leo4j/Invoke-WMIRemoting) (which most likely will retrieve more results) It's important to note that the remote registry service needs to be running on the remote computer for the tool to work effectively. In my tests, if the service is stopped but its Startup type is configured to "Automatic" or "Manual", the service will start automatically on the target computer once queried (this is native behavior), and sessions information will be retrieved. If set to "Disabled" no session information can be retrieved from the target.
Usage: iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/Leo4j/Invoke-SessionHunter/main/Invoke-SessionHunter.ps1')
If run without parameters or switches it will retrieve active sessions for all computers in the current domain by querying the registry Invoke-SessionHunter
Gather sessions by authenticating to targets where you have local admin access Invoke-SessionHunter -CheckAsAdmin
You can optionally provide credentials (https://www.kitploit.com/search/label/Credentials) in the following format Invoke-SessionHunter -CheckAsAdmin -UserName "ferrari\Administrator" -Password "P@ssw0rd!"
You can also use the -FailSafe switch, which will direct the tool to proceed if the target remote registry becomes unresponsive. This works in cobination with -Timeout | Default = 2, increase for slower networks. Invoke-SessionHunter -FailSafe
Invoke-SessionHunter -FailSafe -Timeout 5
Use the -Match switch to show only targets where you have admin access and a privileged user is logged in Invoke-SessionHunter -Match
All switches can be combined Invoke-SessionHunter -CheckAsAdmin -UserName "ferrari\Administrator" -Password "P@ssw0rd!" -FailSafe -Timeout 5 -Match

Specify the target domain Invoke-SessionHunter -Domain contoso.local
Specify a comma-separated list of targets or the full path to a file containing a list of targets - one per line Invoke-SessionHunter -Targets "DC01,Workstation01.contoso.local"
Invoke-SessionHunter -Targets c:\Users\Public\Documents\targets.txt
Retrieve and display information about active user sessions on servers only Invoke-SessionHunter -Servers
Retrieve and display information about active user sessions on workstations only Invoke-SessionHunter -Workstations
Show active session for the specified user only Invoke-SessionHunter -Hunt "Administrator"
Exclude localhost from the sessions retrieval Invoke-SessionHunter -IncludeLocalHost
Return custom PSObjects instead of table-formatted results Invoke-SessionHunter -RawResults
Do not run a port scan to enumerate for alive hosts before trying to retrieve sessions Note: if a host is not reachable it will hang for a while Invoke-SessionHunter -NoPortScan


Download Invoke-SessionHunter (https://github.com/Leo4j/Invoke-SessionHunter)

Account takeover with a sad ending

it’s a long oneContinue reading on Medium »
Read more...

How I got Critical IDOR in one of India’s Best Known Food Delivery Website

Hello everyone,Continue reading on Medium »
Read more...