This lab contains a reflected cross-site scripting vulnerability in the search blog functionality. The reflection occurs inside a template…Continue reading on Medium » (https://cyberw1ng.medium.com/13-28-lab-reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-45602869f45f?source=rss------bug_bounty-5)
13.28 Lab: Reflected XSS into a template literal with angle brackets, single, double quotes…
This lab contains a reflected cross-site scripting vulnerability in the search blog functionality. The reflection occurs inside a template…Continue reading on Medium »
Read more...
This lab contains a reflected cross-site scripting vulnerability in the search blog functionality. The reflection occurs inside a template…Continue reading on Medium »
Read more...
Medium
13.28 Lab: Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped
This lab contains a reflected cross-site scripting vulnerability in the search blog functionality. The reflection occurs inside a template…
CVE-2024–28999 SolarWinds Race Condition
Vulnerability Details:Continue reading on Medium »
Read more...
Vulnerability Details:Continue reading on Medium »
Read more...
Medium
CVE-2024–28999 SolarWinds Race Condition
Vulnerability Details:
CVE-2024–28999 SolarWinds Race Condition
https://medium.com/@0xSphinx/cve-2024-28999-solarwinds-race-condition-62e175339b46?source=rss------bug_bounty-5
https://medium.com/@0xSphinx/cve-2024-28999-solarwinds-race-condition-62e175339b46?source=rss------bug_bounty-5
Vulnerability Details:Continue reading on Medium » (https://medium.com/@0xSphinx/cve-2024-28999-solarwinds-race-condition-62e175339b46?source=rss------bug_bounty-5)
Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5
https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium » (https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5)
Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium »
Read more...
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium »
Read more...
Medium
Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…
Javascript cookie exfiltration problem
https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/
<!-- SC_OFF -->Hello everyone, hope you're fine. I was doing a hacking challenge online on root-me which meant to exploit a calculator using eval. I wanted to display the cookie. Knowing that my input would be given as argument to the function eval() I entered the following : 1+1+alert `${document.cookie}` which was interpreted as eval(1+1+alert `${document.cookie}`) Is there something special associated with `${}`, i used this format because the following characters were banned in the input : "(" , ")" , "<" , ">" and I don't know why instead of displaying the cookie it displayed me "," in the alert box. I solved the challenge, i want to know why it displayed a comma instead of the cookie. <!-- SC_ON --> submitted by /u/aes256bits (https://www.reddit.com/user/aes256bits)
[link] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/)
https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/
<!-- SC_OFF -->Hello everyone, hope you're fine. I was doing a hacking challenge online on root-me which meant to exploit a calculator using eval. I wanted to display the cookie. Knowing that my input would be given as argument to the function eval() I entered the following : 1+1+alert `${document.cookie}` which was interpreted as eval(1+1+alert `${document.cookie}`) Is there something special associated with `${}`, i used this format because the following characters were banned in the input : "(" , ")" , "<" , ">" and I don't know why instead of displaying the cookie it displayed me "," in the alert box. I solved the challenge, i want to know why it displayed a comma instead of the cookie. <!-- SC_ON --> submitted by /u/aes256bits (https://www.reddit.com/user/aes256bits)
[link] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/)
How i got easy multiple RXSS
https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5
https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5
السلام عليكمContinue reading on Medium » (https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5)
Complex Attack Types: Sample Scenarios 23
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium »
Read more...
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium »
Read more...
Medium
Complex Attack Types: Sample Scenarios 23
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…
Any AI/ML security courses online?
https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/
<!-- SC_OFF -->Hey folks- can anyone please recommend AI/ML courses that could help with testing AI/ML applications? Thanks in advance. <!-- SC_ON --> submitted by /u/Independent_Dirt3695 (https://www.reddit.com/user/Independent_Dirt3695)
[link] (https://owasp.org/www-project-ai-security-and-privacy-guide/) [comments] (https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/)
https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/
<!-- SC_OFF -->Hey folks- can anyone please recommend AI/ML courses that could help with testing AI/ML applications? Thanks in advance. <!-- SC_ON --> submitted by /u/Independent_Dirt3695 (https://www.reddit.com/user/Independent_Dirt3695)
[link] (https://owasp.org/www-project-ai-security-and-privacy-guide/) [comments] (https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/)
Complex Attack Types: Sample Scenarios 23
https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5
https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium » (https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5)
VulnNodeApp - A Vulnerable Node.Js Application
http://www.kitploit.com/2024/06/vulnnodeapp-vulnerable-nodejs.html
http://www.kitploit.com/2024/06/vulnnodeapp-vulnerable-nodejs.html