OAuth-some Security Tricks: Yet more OAuth abuse
https://www.reddit.com/r/redteamsec/comments/1hsc7wz/oauthsome_security_tricks_yet_more_oauth_abuse/

submitted by /u/Party_Wolf6604 (https://www.reddit.com/user/Party_Wolf6604)
[link] (https://www.youtube.com/watch?v=F-s1OAq9C64) [comments] (https://www.reddit.com/r/redteamsec/comments/1hsc7wz/oauthsome_security_tricks_yet_more_oauth_abuse/)

What is an Advanced Persistent Threat (APT)?

An Advanced Persistent Threat (APT) represents one of the most significant and persistent challenges in the world of cybersecurity. These…Continue reading on Medium »
Read more...

How My Journey Started as a Bug Bounty Hunter

It’s an unpredictable journey, yet the discovery of one’s passion is fulfilling. My journey into the world of bug bounty hunting is a…Continue reading on Medium »
Read more...

Bug Bounty Methodology Version 2025

You will learn about how to approach your target and what are basic methods to perform while starting a bug bounty..Continue reading on Medium »
Read more...

Use SQL-Map at its best.

1. PreparationContinue reading on Medium »
Read more...

How I Uncovered an LFI in 15 Seconds: The Tale of a Curious Hacker and an Unprepared Server

👋 Hi there! I’m Shyam — a security researcher with a knack for finding vulnerabilities faster than your coffee gets cold. Today, I’m…Continue reading on Medium »
Read more...

Anyone know how I can pull Rayban Meta firmware for static analysis?
https://www.reddit.com/r/Pentesting/comments/1hsfkpi/anyone_know_how_i_can_pull_rayban_meta_firmware/

<!-- SC_OFF -->Watched a few teardowns, I'm assuming the cases USBC is strictly power without data and everything is done completely over WiFi/BLE - unless you want to tear it down. (Although it has a large PCB for just charging, nothings touches on the PCB for the case) I plan to run WireShark and nRF Scanner to see what I can find but wondering if anyone has some solid tips or has seen any good articles on this? I can't even find posts of people talking about the firmware. It uses a Snapdragon AR1 CPU and 32gb of flash memory. Good to know specs: https://www.qualcomm.com/products/mobile/snapdragon/xr-vr-ar/snapdragon-ar1-gen-1-platform Snapdragon AR1 Gen 1 – Key Specs CPU & Process Advanced process node (Qualcomm hasn’t publicly disclosed exact nm). Designed for low-power “always-on” smart glasses applications. AI / NPU 3rd Gen Qualcomm® Hexagon™ NPU Handles on-device AI (visual search, translation, voice assistance). Camera / ISP Dual ISPs (supports up to 12MP photos and 6MP video capture per camera). Display Support Binocular or single-lens display Up to 1280×1280 @ 60 fps (3DoF) Connectivity Qualcomm® FastConnect™ with support for Wi-Fi 7 Bluetooth® 5.3 / 5.2 Audio Up to 8 microphones Qualcomm® Noise & Echo Cancellation, AI-based targeted capture Power & Thermals Optimized for lightweight eyewear Low-power design for “always-on” capabilities Ray-Ban Meta (Gen 2) – Key Specs SoC Uses a custom variant of Snapdragon AR1 Gen 1 (as widely reported). Cameras Dual 12MP cameras (up from 5MP in Gen 1). Supports 1080p video at 60 fps. Onboard Storage 32GB flash storage for photos, videos, and firmware. <!-- SC_ON --> submitted by /u/Austinitered (https://www.reddit.com/user/Austinitered)
[link] (https://www.reddit.com/gallery/1hsfkpi) [comments] (https://www.reddit.com/r/Pentesting/comments/1hsfkpi/anyone_know_how_i_can_pull_rayban_meta_firmware/)

P4 Bugs and POC | Part 1
https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-1-0dab3517bbe9?source=rss------bug_bounty-5

P4 Bugs and POC | Part 1: Broken Link HijackingContinue reading on Medium » (https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-1-0dab3517bbe9?source=rss------bug_bounty-5)

PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367)

Hello everyone, Today we’re going to look at CVE-2024–4367, a serious vulnerability in PDF.js that allows attackers to run arbitrary…Continue reading on InfoSec Write-ups »
Read more...

PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367)

Hello everyone, Today we’re going to look at CVE-2024–4367, a serious vulnerability in PDF.js that allows attackers to run arbitrary…Continue reading on InfoSec Write-ups »
Read more...

My First RCE Vulnerability

Who Am i ?Continue reading on Medium »
Read more...

Here’s 24 web-application hacking tools:

Burp Suite — Framework.Continue reading on Medium »
Read more...

What is a Hacker?

What comes to mind when you hear the word “hacker”? A cybercriminal? A tech geek? Someone cool? A genius?Continue reading on Medium »
Read more...

PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367)
https://infosecwriteups.com/pdf-js-arbitrary-javascript-code-execution-cve-2024-4367-be4a64f877df?source=rss------bug_bounty-5

Hello everyone, Today we’re going to look at CVE-2024–4367, a serious vulnerability in PDF.js that allows attackers to run arbitrary…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/pdf-js-arbitrary-javascript-code-execution-cve-2024-4367-be4a64f877df?source=rss------bug_bounty-5)

My First RCE Vulnerability
https://medium.com/@RekoJR/my-first-rce-vulnerability-636cdc9f2dab?source=rss------bug_bounty-5

Who Am i ?Continue reading on Medium » (https://medium.com/@RekoJR/my-first-rce-vulnerability-636cdc9f2dab?source=rss------bug_bounty-5)

Here’s 24 web-application hacking tools:
https://saconychukwu.medium.com/heres-24-web-application-hacking-tools-17369f7f5097?source=rss------bug_bounty-5

Burp Suite — Framework.Continue reading on Medium » (https://saconychukwu.medium.com/heres-24-web-application-hacking-tools-17369f7f5097?source=rss------bug_bounty-5)