A look back at the road to obtaining the Offensive Security Certified Professional, having had some time to recover!Continue reading on Medium » (https://medium.com/@nosignalrightnow/oscp-review-3a9568bf9c5d?source=rss------bug_bounty-5)

IDOR Exploit: A Tale of Account Takeover

Introduction:Continue reading on Medium »
Read more...

IDOR Exploit: A Tale of Account Takeover
https://danial1337.medium.com/idor-exploit-a-tale-of-account-takeover-51ab2c47c246?source=rss------bug_bounty-5

Introduction:Continue reading on Medium » (https://danial1337.medium.com/idor-exploit-a-tale-of-account-takeover-51ab2c47c246?source=rss------bug_bounty-5)

How I Found a Vulnerability in Apple: A Journey of Discovery and Impact

Imagine uncovering a flaw in one of the world’s most secure tech ecosystems. That’s exactly what happened to me. I’m Husnain Suleman, a…Continue reading on Medium »
Read more...

CVE-2024–24919: Zero-Day Vulnerability leads to unauthorized Information Disclosure in Checkpoint

Check Point has issued a urgent warning regarding a zero-day vulnerability discovered in its Network Security gateway products. This…Continue reading on Medium »
Read more...

How I Found a Vulnerability in Apple: A Journey of Discovery and Impact
https://medium.com/@husnainsuleman/how-i-found-a-vulnerability-in-apple-a-journey-of-discovery-and-impact-0e55f14eef75?source=rss------bug_bounty-5

Imagine uncovering a flaw in one of the world’s most secure tech ecosystems. That’s exactly what happened to me. I’m Husnain Suleman, a…Continue reading on Medium » (https://medium.com/@husnainsuleman/how-i-found-a-vulnerability-in-apple-a-journey-of-discovery-and-impact-0e55f14eef75?source=rss------bug_bounty-5)

CVE-2024–24919: Zero-Day Vulnerability leads to unauthorized Information Disclosure in Checkpoint
https://codewithvamp.medium.com/cve-2024-24919-zero-day-vulnerability-leads-to-unauthorized-information-disclosure-in-checkpoint-97873b47d160?source=rss------bug_bounty-5

Check Point has issued a urgent warning regarding a zero-day vulnerability discovered in its Network Security gateway products. This…Continue reading on Medium » (https://codewithvamp.medium.com/cve-2024-24919-zero-day-vulnerability-leads-to-unauthorized-information-disclosure-in-checkpoint-97873b47d160?source=rss------bug_bounty-5)

Advanced Web Cache Poisoning

In my recent blog post, I briefly explained the concept of a web cache poisoning (WCP) attack.Continue reading on Medium »
Read more...

Advanced Web Cache Poisoning
https://medium.com/@majix_de/advanced-web-cache-poisoning-e6e17d5290ce?source=rss------bug_bounty-5

In my recent blog post, I briefly explained the concept of a web cache poisoning (WCP) attack.Continue reading on Medium » (https://medium.com/@majix_de/advanced-web-cache-poisoning-e6e17d5290ce?source=rss------bug_bounty-5)

كيفية استخدام أداة ParamSpider — لبرنامج الجوائز الأمنية (Bug Bounty)
https://gentilsecurity.medium.com/%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D8%A7%D9%85-%D8%A3%D8%AF%D8%A7%D8%A9-paramspider-%D9%84%D8%A8%D8%B1%D9%86%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%AC%D9%88%D8%A7%D8%A6%D8%B2-%D8%A7%D9%84%D8%A3%D9%85%D9%86%D9%8A%D8%A9-bug-bounty-c1361d476c4a?source=rss------bug_bounty-5

ما هو ParamSpider؟
ParamSpider هي أداة متعددة الاستخدامات مصممة للعثور على عناوين URL مع معلمات من مصادر مختلفة مثل صفحات الويب، وملفات…Continue reading on Medium » (https://gentilsecurity.medium.com/%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D8%A7%D9%85-%D8%A3%D8%AF%D8%A7%D8%A9-paramspider-%D9%84%D8%A8%D8%B1%D9%86%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%AC%D9%88%D8%A7%D8%A6%D8%B2-%D8%A7%D9%84%D8%A3%D9%85%D9%86%D9%8A%D8%A9-bug-bounty-c1361d476c4a?source=rss------bug_bounty-5)

كيفية استخدام أداة ParamSpider — لبرنامج الجوائز الأمنية (Bug Bounty)

ما هو ParamSpider؟ ParamSpider هي أداة متعددة الاستخدامات مصممة للعثور على عناوين URL مع معلمات من مصادر مختلفة مثل صفحات الويب، وملفات…Continue reading on Medium »
Read more...

ماذا تعرف عن ثغرة XSS? (Cross-Site Script)

XSS (Cross-Site Scripting) تبرز كواحدة من أكثر الثغرات الأمنية انتشارًا وخطورة في مجال أمن المعلومات عبر الإنترنت. تشكل هذه الثغرة تهديدًا…Continue reading on Medium »
Read more...

شرح اللاب بطريقة سهلة ومبسطة لفهم نوع ال Reflected XSS into HTML context with nothing encoded

في مجال أمن المعلومات في العالم الحقيقي، فهم عميق لثغرات الأمان وكيفية استغلالها أمر حاسم لتعزيز التدابير الأمنية. توفر التمارين العملية…Continue reading on Medium »
Read more...