Attacking Web Applications with Ffuf | Skills Assessment — Walkthrough
https://medium.com/@Mx0o14/attacking-web-applications-with-ffuf-skills-assessment-walkthrough-5af4160fe75b?source=rss------bug_bounty-5

Hello friend, how are you? I hope you are well.Continue reading on Medium » (https://medium.com/@Mx0o14/attacking-web-applications-with-ffuf-skills-assessment-walkthrough-5af4160fe75b?source=rss------bug_bounty-5)

Attacking Web Applications with Ffuf | Skills Assessment — Walkthrough

Hello friend, how are you? I hope you are well.Continue reading on Medium »
Read more...

Pattern Scanning Intro (For Game Hacking)

Pattern Scanning for Game HackingContinue reading on Medium »
Read more...

Pattern Scanning Intro (For Game Hacking)
https://medium.com/@MrRipperoni/pattern-scanning-intro-for-game-hacking-b13401b562fb?source=rss------bug_bounty-5

Pattern Scanning for Game HackingContinue reading on Medium » (https://medium.com/@MrRipperoni/pattern-scanning-intro-for-game-hacking-b13401b562fb?source=rss------bug_bounty-5)

How i get XSS & HTMLi with FUFF

Hey Guys, I hope you are doing well.Continue reading on Medium »
Read more...

How i get XSS & HTMLi with FUFF
https://kiraadx.medium.com/how-i-get-xss-htmli-with-fuff-0c8a4b094636?source=rss------bug_bounty-5

Hey Guys, I hope you are doing well.Continue reading on Medium » (https://kiraadx.medium.com/how-i-get-xss-htmli-with-fuff-0c8a4b094636?source=rss------bug_bounty-5)

Trouble installing ParrotOS onto hypervisor
https://www.reddit.com/r/Pentesting/comments/1d4r70p/trouble_installing_parrotos_onto_hypervisor/

<!-- SC_OFF -->Hey everyone, I'm currently using a macbook (apple silicon m3), and I want to practise my pen testing with HTB academy. However, I have been trying to install the ParrotOS (security edition) onto virtualbox. However, once I get to the try/install stage: I instead get directed to what looks like some kind of ddb console. I have attached an image at the bottom of how it looked like. Please help! Thank you! Edit: https://imgur.com/a/YenEjlf <!-- SC_ON --> submitted by /u/fmaa (https://www.reddit.com/user/fmaa)
[link] (https://www.reddit.com/r/Pentesting/comments/1d4r70p/trouble_installing_parrotos_onto_hypervisor/) [comments] (https://www.reddit.com/r/Pentesting/comments/1d4r70p/trouble_installing_parrotos_onto_hypervisor/)

26.3 Lab: Indirect prompt injection
https://cyberw1ng.medium.com/26-3-lab-indirect-prompt-injection-27d35f2e0e90?source=rss------bug_bounty-5

This lab is vulnerable to indirect prompt injection. The user carlos frequently uses the live chat to ask about the Lightweight “l33t”…Continue reading on Medium » (https://cyberw1ng.medium.com/26-3-lab-indirect-prompt-injection-27d35f2e0e90?source=rss------bug_bounty-5)

26.3 Lab: Indirect prompt injection

This lab is vulnerable to indirect prompt injection. The user carlos frequently uses the live chat to ask about the Lightweight “l33t”…Continue reading on Medium »
Read more...

Hi ..I'm having an mobile application where it's secured by root detection.i tried to bypass through xpsoeed, objection, magisk everything failed..anyone help me by manually what steps would you follow..?
https://www.reddit.com/r/Pentesting/comments/1d4sd0u/hi_im_having_an_mobile_application_where_its/

submitted by /u/Feeling-Wolverine-53 (https://www.reddit.com/user/Feeling-Wolverine-53)
[link] (https://www.reddit.com/r/Pentesting/comments/1d4sd0u/hi_im_having_an_mobile_application_where_its/) [comments] (https://www.reddit.com/r/Pentesting/comments/1d4sd0u/hi_im_having_an_mobile_application_where_its/)

Ars0N-Framework - A Modern Framework For Bug Bounty Hunting
http://www.kitploit.com/2024/05/ars0n-framework-modern-framework-for.html

Howdy! My name is Harrison Richardson, or rs0n (arson) when I want to feel cooler than I really am. The code in this repository started as a small collection of scripts to help automate many of the common Bug Bounty hunting processes I found myself repeating. Over time, I built a simple web application with a MongoDB connection to manage my findings and identify valuable data points. After 5 years of Bug Bounty hunting, both part-time and full-time, I'm finally ready to package this collection of tools into a proper framework.
The Ars0n Framework is designed to provide aspiring Application Security Engineers with all the tools they need to leverage Bug Bounty hunting as a means to learn valuable, real-world AppSec concepts and make 💰 doing it! My goal is to lower the barrier of entry for Bug Bounty hunting by providing easy-to-use automation (https://www.kitploit.com/search/label/Automation) tools in combination with educational content and how-to guides for a wide range of Web-based and Cloud-based vulnerabilities. In combination with my YouTube content, this framework will help aspiring Application Security Engineers to quickly and easily understand real-world security concepts that directly translate to a high paying career in Cyber Security. In addition to using this tool for Bug Bounty Hunting, aspiring engineers can also use this Github Repository as a canvas to practice collaborating with other developers! This tool was inspired by Metasploit (https://www.kitploit.com/search/label/Metasploit) and designed to be modular in a similar way. Each Script (Ex: wildfire.py or slowburn.py) is basically an algorithm that runs the Modules (Ex: fire-starter.py or fire-scanner.py) in a specific patter for a desired result. Because of this design, the community is free to build new Scripts to solve a specific use-case or Modules to expand the results of these Scripts. By learning the code in this framework and using Github to contribute your own code, aspiring engineers will continue to learn real-world skills that can be applied on the first day of a Security Engineer I position. My hope is that this modular framework will act as a canvas to help share what I've learned over my career to the next generation of Security Engineers! Trust me, we need all the help we can get!!
Quick Start Paste this code block into a clean installation of Kali Linux 2023.4 (https://www.kali.org/get-kali/#kali-installer-images) to download, install, and run the latest stable Alpha version of the framework: sudo apt update && sudo apt-get update
sudo apt -y upgrade && sudo apt-get -y upgrade
wget https://github.com/R-s0n/ars0n-framework/releases/download/v0.0.2-alpha/ars0n-framework-v0.0.2-alpha.tar.gz
tar -xzvf ars0n-framework-v0.0.2-alpha.tar.gz
rm ars0n-framework-v0.0.2-alpha.tar.gz
cd ars0n-framework
./install.sh
Download Latest Stable ALPHA Version wget https://github.com/R-s0n/ars0n-framework/releases/download/v0.0.2-alpha/ars0n-framework-v0.0.2-alpha.tar.gz
tar -xzvf ars0n-framework-v0.0.2-alpha.tar.gz
rm ars0n-framework-v0.0.2-alpha.tar.gz
Install The Ars0n Framework includes a script that installs all the necessary tools, packages, etc. that are needed to run the framework on a clean installation of Kali Linux 2023.4 (https://www.kali.org/get-kali/#kali-installer-images). Please note that the only supported installation of this framework is on a clean installation of Kali Linux 2023.3. If you choose to try and run the framework outside of a clean Kali install, I will not be able to help troubleshoot if you have any issues. ./install.sh
This video (https://www.youtube.com/watch?v=cF4xtVS7Rnc) shows exactly what to expect from a successful installation. If you are using an ARM Processor, you will need to add the --arm flag to all Install/Run scripts ./install.sh --arm