hacking: security in practice
Leak disclosure, how to ask for compensation?

Hi everybody,

Today I've found out that one of these new fancy tech startups that do fitness is leaking private emails of their employees. I would like to report to them the vulnerability and how to reproduce it. They do not have a bug bounty in place and they are located in the EU.

I'm not sure on how to approach them and how to ask for compensation. I would be more than happy to settle for a free yearly membership of their top tier plan (worth 1.3k$) in order to burn some kcal accumulated during the lockdowns.

Do you think is it possible/reasonable to ask something like this? How should I approach them? Should I reveal the leak right away or should I first agree on the compensation?

submitted by /u/foundavulnerability
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How do hackers get a list of everyone's Company email?

How do hackers send phising emails to every single person at a Company?How do they get a list of everyone emails.

submitted by /u/Linux98
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box — Lame (Walkthrough)

Note: The IP address of your target machine can be different

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
how to avoid being hacked

https://cdn-images-1.medium.com/max/1414/1*F_a4nAjzhsy10tLiMjQMLg@2x.jpeg
Hi! This is wins. I would like to invite you to our upcoming Free Webinar with Free E-certificate!

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Deep Web
Is there a site where I can discuss illegal imigration?

I know someone who lives in a shitty country and is not allowed to legally leave, at all. I would like to get some more information on this, and find a way to get them out.

If this kind of question is not allowed, I am sorry. I just really do not know where to search for something like this. And I have not found anything like this on the clear web.

submitted by /u/ketchup_is_jam
[link] [comments]

3 Vulnerabilities Worth $$$
https://tuhin1729.medium.com/3-vulnerabilities-worth-e2851059dfc2?source=rss------bug_bounty-5

Hello guys! My name is Tuhin Bose (@tuhin1729). I am currently working as a Chief Technology Officer at Virtual Cyber Labs. In this…Continue reading on Medium » (https://tuhin1729.medium.com/3-vulnerabilities-worth-e2851059dfc2?source=rss------bug_bounty-5)

3 Vulnerabilities Worth $$$

Hello guys! My name is Tuhin Bose (@tuhin1729). I am currently working as a Chief Technology Officer at Virtual Cyber Labs. In this…Continue reading on Medium »
Read more...

SQLI on a Bugcrowd Private Program

Hello guys👋👋 ,Prajit Here from the BUG XS Team, in this write-up I will be discussing about how I found SQL Injection vulnerability on…Continue reading on Medium »
Read more...

SQLI on a Bugcrowd Private Program
https://sapt.medium.com/sqli-on-a-bugcrowd-private-program-17858b57ec61?source=rss------bug_bounty-5

Hello guys👋👋 ,Prajit Here from the BUG XS Team, in this write-up I will be discussing about how I found SQL Injection vulnerability on…Continue reading on Medium » (https://sapt.medium.com/sqli-on-a-bugcrowd-private-program-17858b57ec61?source=rss------bug_bounty-5)

XSS REFLECTED On Site https://accounts.bukalapak.com/

Assalamualaikum Bug Hunter & Teman-teman semua.Continue reading on Medium »
Read more...

Oauth

Oauth is a feature used by web applications that enables websites and web applications to request some amount of data from a user’s…Continue reading on Medium »
Read more...

XSS REFLECTED On Site https://accounts.bukalapak.com/
https://aidilarf.medium.com/xss-reflected-on-site-https-accounts-bukalapak-com-513f1d5e6bc7?source=rss------bug_bounty-5

Assalamualaikum Bug Hunter & Teman-teman semua.Continue reading on Medium » (https://aidilarf.medium.com/xss-reflected-on-site-https-accounts-bukalapak-com-513f1d5e6bc7?source=rss------bug_bounty-5)

Oauth
https://bhattaraiprashant98.medium.com/oauth-8f21bcd5df80?source=rss------bug_bounty-5

Oauth is a feature used by web applications that enables websites and web applications to request some amount of data from a user’s…Continue reading on Medium » (https://bhattaraiprashant98.medium.com/oauth-8f21bcd5df80?source=rss------bug_bounty-5)