Day 15: Mastering ClickJacking Vulnerability — Essential Tricks & Techniques Based on Personal Experience and Valuable POCsContinue reading on Medium » (https://it4chis3c.medium.com/day-15-of-30-days-30-vulnerabilities-clickjacking-592505aff54d?source=rss------bug_bounty-5)

HTML Injection in Mobile App Support Ticket Form on target.tech
https://medium.com/@shobitsharma/html-injection-in-mobile-app-support-ticket-form-on-target-tech-f45d2de510af?source=rss------bug_bounty-5

Overview: I was invited to a private bug bounty program hosted on YesWeHack. After reviewing the program’s rules, during this testing…Continue reading on Medium » (https://medium.com/@shobitsharma/html-injection-in-mobile-app-support-ticket-form-on-target-tech-f45d2de510af?source=rss------bug_bounty-5)

Advanced Techniques and Emerging Trends in Web Cache Poisoning
https://cyberw1ng.medium.com/advanced-techniques-and-emerging-trends-in-web-cache-poisoning-d2c8d3807d46?source=rss------bug_bounty-5

Exploring the Mechanics, Risks, and Defense Strategies Against Web Cache Poisoning Attacks. Web cache poisoning is a sophisticated attack…Continue reading on Medium » (https://cyberw1ng.medium.com/advanced-techniques-and-emerging-trends-in-web-cache-poisoning-d2c8d3807d46?source=rss------bug_bounty-5)

XSS CHECKLIST
https://medium.com/@mehmetfarisacar/xss-checklist-a2bf18ed6992?source=rss------bug_bounty-5

Bu blog yazısında, XSS zaafiyeti ararken nelere dikkat edilmesi gerektiği ile ilgili bilgiler verilmiştir.Continue reading on Medium » (https://medium.com/@mehmetfarisacar/xss-checklist-a2bf18ed6992?source=rss------bug_bounty-5)

Day 14 of 30 Days — 30 Vulnerabilities | HTTP Parameter Pollution (HPP) Vulnerability
https://medium.com/@kumawatabhijeet2002/day-14-of-30-days-30-vulnerabilities-http-parameter-pollution-hpp-vulnerability-6c767a9227d8?source=rss------bug_bounty-5

Day 14: Mastering HTTP Parameter Pollution (HPP) Vulnerability — Essential Tricks & Techniques Based on Personal Experience and Valuable…Continue reading on Medium » (https://medium.com/@kumawatabhijeet2002/day-14-of-30-days-30-vulnerabilities-http-parameter-pollution-hpp-vulnerability-6c767a9227d8?source=rss------bug_bounty-5)

Title: Mastering CSRF Exploits with Port Swigger Academy Lab: How to Bypass SameSite Strict via…
https://medium.com/@dsksatheesh35/title-mastering-csrf-exploits-with-port-swigger-academy-lab-how-to-bypass-samesite-strict-via-7976c3f42d12?source=rss------bug_bounty-5

Introduction:Continue reading on Medium » (https://medium.com/@dsksatheesh35/title-mastering-csrf-exploits-with-port-swigger-academy-lab-how-to-bypass-samesite-strict-via-7976c3f42d12?source=rss------bug_bounty-5)

XSS CHECKLIST

Bu blog yazısında, XSS zaafiyeti ararken nelere dikkat edilmesi gerektiği ile ilgili bilgiler verilmiştir.Continue reading on Medium »
Read more...

Day 14 of 30 Days — 30 Vulnerabilities | HTTP Parameter Pollution (HPP) Vulnerability

Day 14: Mastering HTTP Parameter Pollution (HPP) Vulnerability — Essential Tricks & Techniques Based on Personal Experience and Valuable…Continue reading on Medium »
Read more...

Title: Mastering CSRF Exploits with Port Swigger Academy Lab: How to Bypass SameSite Strict via…

Introduction:Continue reading on Medium »
Read more...

Career/general advice for beginner
https://www.reddit.com/r/Pentesting/comments/1evh6dc/careergeneral_advice_for_beginner/

<!-- SC_OFF -->a few months ago i have discovered a love for programming, first as a creative outlet, i love game dev but i also have always loved exploitation and manipulation of all sorts of things around me, usually in harmless pranks for mutual humor in all parties involved, or minimal consequnces to anyone. like tricking the vending machine into a "free" snack at school once or twice primarily for the fun of it, i still gave the quarters. i always admired essence of "hacking", but always considered it way above my understanding, until recently when i started actually checking it out, and i really like it in theory as i learn about all the fundamentals. (using TryHackMe) i would like to ask anyone with reasonable paid experience in the field of offensive security, what would be a reasonable expectation of making money would be like after someone got the basic bare minimum skills to get a job. what the pay could be like, and what it actual jobs are like. i like the idea of being indepentant or just 100% distance. but any and all advice for my young sponge brain would be greatly appreciated. thank you for reading. <!-- SC_ON --> submitted by /u/CarGood3160 (https://www.reddit.com/user/CarGood3160)
[link] (https://www.reddit.com/r/Pentesting/comments/1evh6dc/careergeneral_advice_for_beginner/) [comments] (https://www.reddit.com/r/Pentesting/comments/1evh6dc/careergeneral_advice_for_beginner/)

Loading BOF on Linux
https://www.reddit.com/r/redteamsec/comments/1eve8va/loading_bof_on_linux/

<!-- SC_OFF -->Some time ago I had tried to create a module to load inline object file. I had some problems due the way elf is I couldn't create a loader that didn't demand a complex object file organization. There are some projects trying to solve it with approach like forwarding dynamic liked functions for libc, just like elfloader by TrustedSec does. Have you ever used it? Do you know any C2 that uses Linux BOF inline loading. <!-- SC_ON --> submitted by /u/Found_RCE (https://www.reddit.com/user/Found_RCE)
[link] (https://github.com/trustedsec/ELFLoader) [comments] (https://www.reddit.com/r/redteamsec/comments/1eve8va/loading_bof_on_linux/)