OTP Bypass — Weak brute-force protection
https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5

Bypassing OTP by Brute ForceContinue reading on Medium » (https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5)

【Vulnerability Campaign】Earn Your Thanksgiving Bonus Rebate
https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5

A thank you to all TECNO security researchers who’ve backed us through 2024! Here comes our festival plan.Continue reading on Medium » (https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5)

The Easiest $$$ I Made from a Business Logic Vulnerability
https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5

Let’s dive straight into the topic without any fluff.Continue reading on Medium » (https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5)

The Easiest $$$ I Made from a Business Logic Vulnerability

Let’s dive straight into the topic without any fluff.Continue reading on Medium »
Read more...

How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough

In this article, I’ll guide you through a practical example of exploiting a Cross-Site Request Forgery (CSRF) vulnerability that allows an…Continue reading on Medium »
Read more...

How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough
https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5

In this article, I’ll guide you through a practical example of exploiting a Cross-Site Request Forgery (CSRF) vulnerability that allows an…Continue reading on Medium » (https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5)

From User to Admin: The Art of Privilege Escalation
https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5

“What if I told you that the biggest risk in your web app isn’t hacking the login, but what comes after someone gets in?Continue reading on Medium » (https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5)

Enumeração de subdomínios através da homepage
https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5

Dica de enumeração de subdomínios através da homepage de um alvo utilizando nada menos do que somente um terminal linux e o básico de…Continue reading on Medium » (https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5)

From User to Admin: The Art of Privilege Escalation

“What if I told you that the biggest risk in your web app isn’t hacking the login, but what comes after someone gets in?Continue reading on Medium »
Read more...

Enumeração de subdomínios através da homepage

Dica de enumeração de subdomínios através da homepage de um alvo utilizando nada menos do que somente um terminal linux e o básico de…Continue reading on Medium »
Read more...

Critical Authentication Vulnerability in SAP BusinessObjects Business Intelligence Platform (CVE-2024-41730, CVSS 9.8/10)
https://www.reddit.com/r/Pentesting/comments/1guu7ac/critical_authentication_vulnerability_in_sap/

submitted by /u/vah_13 (https://www.reddit.com/user/vah_13)
[link] (https://redrays.io/blog/critical-sap-businessobjects-authentication-vulnerability-cve-2024-41730/) [comments] (https://www.reddit.com/r/Pentesting/comments/1guu7ac/critical_authentication_vulnerability_in_sap/)

Exploiting Business Logic Flaws in e-commerce platforms

Exploiting business logic flaws involves identifying weaknesses in the platform’s workflows or processes that can be manipulated by…Continue reading on Medium »
Read more...

Common Security Risks in Browser Extensions

In this blog, we’ll explore some of the most common security vulnerabilities found in browser extensions, with examples of vulnerable code…Continue reading on Medium »
Read more...