OTP Bypass — Weak brute-force protection

Bypassing OTP by Brute ForceContinue reading on Medium »
Read more...

Redis CVE-2023-36824 - How to Reproduce the Vulnerability
https://www.reddit.com/r/Pentesting/comments/1gus04y/redis_cve202336824_how_to_reproduce_the/

submitted by /u/vah_13 (https://www.reddit.com/user/vah_13)
[link] (https://redrays.io/blog/redis-cve-2023-36824-how-to-reproduce-the-vulnerability/) [comments] (https://www.reddit.com/r/Pentesting/comments/1gus04y/redis_cve202336824_how_to_reproduce_the/)

【Vulnerability Campaign】Earn Your Thanksgiving Bonus Rebate

A thank you to all TECNO security researchers who’ve backed us through 2024! Here comes our festival plan.Continue reading on Medium »
Read more...

OTP Bypass — Weak brute-force protection
https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5

Bypassing OTP by Brute ForceContinue reading on Medium » (https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5)

【Vulnerability Campaign】Earn Your Thanksgiving Bonus Rebate
https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5

A thank you to all TECNO security researchers who’ve backed us through 2024! Here comes our festival plan.Continue reading on Medium » (https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5)

The Easiest $$$ I Made from a Business Logic Vulnerability
https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5

Let’s dive straight into the topic without any fluff.Continue reading on Medium » (https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5)

The Easiest $$$ I Made from a Business Logic Vulnerability

Let’s dive straight into the topic without any fluff.Continue reading on Medium »
Read more...

How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough

In this article, I’ll guide you through a practical example of exploiting a Cross-Site Request Forgery (CSRF) vulnerability that allows an…Continue reading on Medium »
Read more...

How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough
https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5

In this article, I’ll guide you through a practical example of exploiting a Cross-Site Request Forgery (CSRF) vulnerability that allows an…Continue reading on Medium » (https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5)

From User to Admin: The Art of Privilege Escalation
https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5

“What if I told you that the biggest risk in your web app isn’t hacking the login, but what comes after someone gets in?Continue reading on Medium » (https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5)

Enumeração de subdomínios através da homepage
https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5

Dica de enumeração de subdomínios através da homepage de um alvo utilizando nada menos do que somente um terminal linux e o básico de…Continue reading on Medium » (https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5)

From User to Admin: The Art of Privilege Escalation

“What if I told you that the biggest risk in your web app isn’t hacking the login, but what comes after someone gets in?Continue reading on Medium »
Read more...

Enumeração de subdomínios através da homepage

Dica de enumeração de subdomínios através da homepage de um alvo utilizando nada menos do que somente um terminal linux e o básico de…Continue reading on Medium »
Read more...