Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5
https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium » (https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5)
Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium »
Read more...
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…Continue reading on Medium »
Read more...
Medium
Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties
Early 2021. After feeling unsatisfied with my job for quite some time and battling burnout, I decided to take a sabbatical. “To hell with…
Javascript cookie exfiltration problem
https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/
<!-- SC_OFF -->Hello everyone, hope you're fine. I was doing a hacking challenge online on root-me which meant to exploit a calculator using eval. I wanted to display the cookie. Knowing that my input would be given as argument to the function eval() I entered the following : 1+1+alert `${document.cookie}` which was interpreted as eval(1+1+alert `${document.cookie}`) Is there something special associated with `${}`, i used this format because the following characters were banned in the input : "(" , ")" , "<" , ">" and I don't know why instead of displaying the cookie it displayed me "," in the alert box. I solved the challenge, i want to know why it displayed a comma instead of the cookie. <!-- SC_ON --> submitted by /u/aes256bits (https://www.reddit.com/user/aes256bits)
[link] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/)
https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/
<!-- SC_OFF -->Hello everyone, hope you're fine. I was doing a hacking challenge online on root-me which meant to exploit a calculator using eval. I wanted to display the cookie. Knowing that my input would be given as argument to the function eval() I entered the following : 1+1+alert `${document.cookie}` which was interpreted as eval(1+1+alert `${document.cookie}`) Is there something special associated with `${}`, i used this format because the following characters were banned in the input : "(" , ")" , "<" , ">" and I don't know why instead of displaying the cookie it displayed me "," in the alert box. I solved the challenge, i want to know why it displayed a comma instead of the cookie. <!-- SC_ON --> submitted by /u/aes256bits (https://www.reddit.com/user/aes256bits)
[link] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/) [comments] (https://www.reddit.com/r/Pentesting/comments/1dlvc1l/javascript_cookie_exfiltration_problem/)
How i got easy multiple RXSS
https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5
https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5
السلام عليكمContinue reading on Medium » (https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5)
Complex Attack Types: Sample Scenarios 23
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium »
Read more...
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium »
Read more...
Medium
Complex Attack Types: Sample Scenarios 23
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…
Any AI/ML security courses online?
https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/
<!-- SC_OFF -->Hey folks- can anyone please recommend AI/ML courses that could help with testing AI/ML applications? Thanks in advance. <!-- SC_ON --> submitted by /u/Independent_Dirt3695 (https://www.reddit.com/user/Independent_Dirt3695)
[link] (https://owasp.org/www-project-ai-security-and-privacy-guide/) [comments] (https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/)
https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/
<!-- SC_OFF -->Hey folks- can anyone please recommend AI/ML courses that could help with testing AI/ML applications? Thanks in advance. <!-- SC_ON --> submitted by /u/Independent_Dirt3695 (https://www.reddit.com/user/Independent_Dirt3695)
[link] (https://owasp.org/www-project-ai-security-and-privacy-guide/) [comments] (https://www.reddit.com/r/redteamsec/comments/1dm1zf0/any_aiml_security_courses_online/)
Complex Attack Types: Sample Scenarios 23
https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5
https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5
The 23rd episode of the series is with you today. Those who have read the previous parts of the article series are familiar with it. We…Continue reading on Medium » (https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5)
VulnNodeApp - A Vulnerable Node.Js Application
http://www.kitploit.com/2024/06/vulnnodeapp-vulnerable-nodejs.html
http://www.kitploit.com/2024/06/vulnnodeapp-vulnerable-nodejs.html
A vulnerable (https://www.kitploit.com/search/label/Vulnerable) application made using node.js, express server and ejs template engine. This application is meant for educational purposes only.
Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git
Application setup: Install the latest node.js version with npm. Open terminal/command prompt and navigate to the location of downloaded/cloned repository. Run command: npm install DB setup Install and configure latest mysql version and start the mysql service/deamon Login with root user in mysql and run below sql script: CREATE USER 'vulnnodeapp'@'localhost' IDENTIFIED BY 'password';
create database vuln_node_app_db;
GRANT ALL PRIVILEGES ON vuln_node_app_db.* TO 'vulnnodeapp'@'localhost';
USE vuln_node_app_db;
create table users (id int AUTO_INCREMENT PRIMARY KEY, fullname varchar(255), username varchar(255),password varchar(255), email varchar(255), phone varchar(255), profilepic varchar(255));
insert into users(fullname,username,password,email,phone) values("test1","test1","test1","test1@test.com","976543210");
insert into users(fullname,username,password,email,phone) values("test2","test2","test2","test2@test.com","9887987541");
insert into users(fullname,username,password,email,phone) values("test3","test3","test3","test3@test.com","9876987611");
insert into users(fullname,username,password,email,phone) values("test4","test4","test4","test4@test.com","9123459876");
insert into users(fullname,username,password,email,phone) values("test5","test5","test 5","test5@test.com","7893451230");
Set basic environment variable User needs to set the below environment variable. DATABASE_HOST (E.g: localhost, 127.0.0.1, etc...) DATABASE_NAME (E.g: vuln_node_app_db or DB name you change in above DB script) DATABASE_USER (E.g: vulnnodeapp or user name you change in above DB script) DATABASE_PASS (E.g: password or password you change in above DB script) Start the server Open the command prompt/terminal and navigate to the location of your repository Run command: npm start Access the application at http://localhost:3000 Vulnerability covered SQL Injection Cross Site Scripting (XSS) Insecure Direct Object Reference (IDOR) Command Injection Arbitrary File Retrieval Regular Expression Injection External XML Entity Injection (XXE) Node js Deserialization Security Misconfiguration Insecure Session Management TODO Will add new vulnerabilities such as CORS, Template Injection, etc... Improve application documentation Issues In case of bugs in the application, feel free to create an issues (https://github.com/4auvar/VulnNodeApp/issues) on github. Contribution Feel free to create a pull request for any contribution. You can reach me out at @4auvar (https://twitter.com/4auvar)
Download VulnNodeApp (https://github.com/4auvar/VulnNodeApp)<!--more-->
Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git
Application setup: Install the latest node.js version with npm. Open terminal/command prompt and navigate to the location of downloaded/cloned repository. Run command: npm install DB setup Install and configure latest mysql version and start the mysql service/deamon Login with root user in mysql and run below sql script: CREATE USER 'vulnnodeapp'@'localhost' IDENTIFIED BY 'password';
create database vuln_node_app_db;
GRANT ALL PRIVILEGES ON vuln_node_app_db.* TO 'vulnnodeapp'@'localhost';
USE vuln_node_app_db;
create table users (id int AUTO_INCREMENT PRIMARY KEY, fullname varchar(255), username varchar(255),password varchar(255), email varchar(255), phone varchar(255), profilepic varchar(255));
insert into users(fullname,username,password,email,phone) values("test1","test1","test1","test1@test.com","976543210");
insert into users(fullname,username,password,email,phone) values("test2","test2","test2","test2@test.com","9887987541");
insert into users(fullname,username,password,email,phone) values("test3","test3","test3","test3@test.com","9876987611");
insert into users(fullname,username,password,email,phone) values("test4","test4","test4","test4@test.com","9123459876");
insert into users(fullname,username,password,email,phone) values("test5","test5","test 5","test5@test.com","7893451230");
Set basic environment variable User needs to set the below environment variable. DATABASE_HOST (E.g: localhost, 127.0.0.1, etc...) DATABASE_NAME (E.g: vuln_node_app_db or DB name you change in above DB script) DATABASE_USER (E.g: vulnnodeapp or user name you change in above DB script) DATABASE_PASS (E.g: password or password you change in above DB script) Start the server Open the command prompt/terminal and navigate to the location of your repository Run command: npm start Access the application at http://localhost:3000 Vulnerability covered SQL Injection Cross Site Scripting (XSS) Insecure Direct Object Reference (IDOR) Command Injection Arbitrary File Retrieval Regular Expression Injection External XML Entity Injection (XXE) Node js Deserialization Security Misconfiguration Insecure Session Management TODO Will add new vulnerabilities such as CORS, Template Injection, etc... Improve application documentation Issues In case of bugs in the application, feel free to create an issues (https://github.com/4auvar/VulnNodeApp/issues) on github. Contribution Feel free to create a pull request for any contribution. You can reach me out at @4auvar (https://twitter.com/4auvar)
Download VulnNodeApp (https://github.com/4auvar/VulnNodeApp)<!--more-->
Offensive VBA: old tricks for new dogs
https://www.reddit.com/r/redteamsec/comments/1dmlb2n/offensive_vba_old_tricks_for_new_dogs/
submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://github.com/X-C3LL/congresos-slides/blob/master/Offensive%20VBA.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/1dmlb2n/offensive_vba_old_tricks_for_new_dogs/)
https://www.reddit.com/r/redteamsec/comments/1dmlb2n/offensive_vba_old_tricks_for_new_dogs/
submitted by /u/gid0rah (https://www.reddit.com/user/gid0rah)
[link] (https://github.com/X-C3LL/congresos-slides/blob/master/Offensive%20VBA.pdf) [comments] (https://www.reddit.com/r/redteamsec/comments/1dmlb2n/offensive_vba_old_tricks_for_new_dogs/)
13.29 Exploiting cross-site scripting to steal cookies
https://cyberw1ng.medium.com/13-29-exploiting-cross-site-scripting-to-steal-cookies-21c7d5851ea3?source=rss------bug_bounty-5
https://cyberw1ng.medium.com/13-29-exploiting-cross-site-scripting-to-steal-cookies-21c7d5851ea3?source=rss------bug_bounty-5
This lab contains a stored XSS vulnerability in the blog comments function. A simulated victim user views all comments after they are…Continue reading on Medium » (https://cyberw1ng.medium.com/13-29-exploiting-cross-site-scripting-to-steal-cookies-21c7d5851ea3?source=rss------bug_bounty-5)