Hacking Articles Tips Tricks Videos Tutorials

Deep Web
Help in fixing tor

I have never understood why is the deepweb going that slow. Is there a dprt of technique wich could help me? I saw that somebody have experienced the use of XAMPP. How it could be useful here? Help

submitted by /u/Electronic_Sort_2918
[link] [comments]

Help in fixing tor

I have never understood why is the deepweb going that slow. Is there a dprt of technique wich could help me? I saw that somebody have experienced...

13 views20:30

Some ways to find more IDOR
https://16521092.medium.com/some-ways-to-find-more-idor-da16c93954e5?source=rss------bug_bounty-5

12 views20:39

Hacking Articles Tips Tricks Videos Tutorials

14 views20:39

Hacking Articles Tips Tricks Videos Tutorials

Hello friend!Continue reading on Medium » (https://16521092.medium.com/some-ways-to-find-more-idor-da16c93954e5?source=rss------bug_bounty-5)

14 views20:39

Hacking Articles Tips Tricks Videos Tutorials

Bro what’s the command of dirsearch u used on target
https://medium.com/@vinodsangepu799/bro-whats-the-command-of-dirsearch-u-used-on-target-1e0fd3658130?source=rss------bug_bounty-5

Please provide complete one line comand to me to use..Continue reading on Medium » (https://medium.com/@vinodsangepu799/bro-whats-the-command-of-dirsearch-u-used-on-target-1e0fd3658130?source=rss------bug_bounty-5)

21 views20:40

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
They told me they run regular tests but I found an ugly vuln about a year ago that they still haven't

Tldr: I found a bug, and after almost year of seeing it unfixed, I told them do a pentest. They said they always do pentests and scans. I cringed and am feeling bitter cause that insults to my "intelligence".

Let me preface by saying that according to the laws of the country I am living in everything I did is 100% legal therefore this post is compliant with rule 1 of r/hacking*.*

So about a year ago, this girl who used to be my senior at college posted a link to a services payment website on her Facebook. Feeling bored I visited the website and shortly after I found this ugly and I really mean ugly logic/sql bug which besides being a regular sql injection bug, it allowed me to set the price of a product to be paid(like a netflix subscription or mobile airtime recharge) to "$0" just by placing a "-1" on the price field. See, from what I understood, they seem to have a table for all the service prices which is fetched and displayed as a dropdown menu from which the user can choose the desired price(i.e $10 airtime / $30 airtime etc).

Looking at other input fields like mobile number(which were not vulnerable to injection), I came to the conclusion that the developer just didn't sanitize the price field because he/she may have thought "Well, since the price value is coming from a database table and the user never gets to type the value himself, then I don't need to sanitize this field after the user makes his choice and the form is submitted and processed".

Well, needless to say that's wrong because changing that value is as easy as popping the inspector tab not even burp is needed. Therefore injection... So changing the html option value to "-1" causes the DBMS to search for an entry with the id "-1"(at least that how I think it works) which doesn't exist therefore setting the price on the next page and checkout to "$0". This is a logic bug, but since the field is not sanitized there's also an injection bug on the same field.

I sat on this bug for about a year, just trying to decide what to do with it. Tell them?

Take advantage of it(which by the way goes against my moral values)?

Or just seat and watch what happens(maybe they'll find it and fix it; or maybe somebody else will and I get to watch the world burn and I won't be the one to blame neither morally nor legally cause I did not light the matchstick)? Well, I chose the latter. But to be honest I only did so because I didn't know how to approach them and talk to them. What would they say? What if they asked me wtf was I doing when I found it? What if somebody else already took advantage of it, and they end up blaming me for that shit? Will they even pay me being that they seem to be a small startup? I had questions and fears therefore I said nothing... For almost a year.

But every few weeks I would go to the site and change the value to a backslash (\) just to see if it still crashed... And so it did.

Which finally brings me to today.

I decided to contact that girl who initially publicized the links and banners on her Facebook stories to ask if she knew the owners of that website, and she told me that it was her coworker's startup. So I asked her if he would be interested on having a pentest or bug hunt done on his website so that he could better secure it "if I found" something. Of course I did not tell her that I had already found a bug a long time ago. But I even went as far as telling her, even if not done by me I recommend you guys talk to someone knowledgeable in the area to perform a test ASAP. I think this was a big enough non-incriminating hint.

To which she replied: "We always do pentests and scans. At our company we provide cyber security services. But I'll let him know a[...]

They told me they run regular tests but I found an ugly vuln about...

Tldr: *I found a bug, and after almost year of seeing it unfixed, I told them do a pentest. They said they always do pentests and scans. I...

19 views21:25

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice They told me they run regular tests but I found an ugly vuln about a year ago that they still haven't Tldr: I found a bug, and after almost year of seeing it unfixed, I told them do a pentest. They said they always do pentests…

nyway."

Something about her reply tells me that they won't do shit about it. Well, it's off of my hands now.

I won't do anything, but it's just a matter of time before someone else finds and does. And when that day comes I'll watch the world burn! Now with popcorn on my hand cause I have done my moral obligation.

Am I bitter? Yes I am.

Did I expect a cookie and a pat on the back for being a "good guy"? Yes I did.

Will I be happy if someone goes and makes purchases worth thousands for nothing, fucking their startup up? No, but I told them so.

I have no reason to lie about these things, but I am honest and extremely petty.

submitted by /u/yuyumprod [link] [comments]

13 views21:25

Hacking Articles Tips Tricks Videos Tutorials

BlobHunter - Find Exposed Data In Azure With This Public Blob Scanner
http://www.kitploit.com/2021/06/blobhunter-find-exposed-data-in-azure.html

12 views21:42

Hacking Articles Tips Tricks Videos Tutorials

13 views21:42

About

Blog

Apps

Platform