How I’m Learning Web3.0(Blockchain) Bug Bounties from Scratch And Sharing Everything.

From smart contract novice to ambitious Web3(Blockchain) Hacker, follow along as I learn, break, and share my journey.Continue reading on Medium »
Read more...

Broken Access Control - Unauthorized users able to add customer

Hallo Semuanya, Perkenalkan nama saya Ahmad Tazkiarni Ramadhan (LinkedIn). Pada kesempatan kali ini, saya akan berbagi cerita bagaimana…Continue reading on Medium »
Read more...

PEGASUS-NEO - A Comprehensive Penetration Testing Framework Designed For Security Professionals And Ethical Hackers. It Combines Multiple Security Tools And Custom Modules For Reconnaissance, Exploitation, Wireless Attacks, Web Hacking, And More
http://www.kitploit.com/2025/04/pegasus-neo-comprehensive-penetration.html

|___/
███▄ █ ▓█████ ▒█████
██ ▀█ █ ▓█ ▀ ▒██▒ ██▒
▓██ ▀█ ██▒▒███ ▒██░ ██▒
▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░
▒██░ ▓██░░▒████▒░ ████▓▒░
░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░
░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░
░ ░ ░ ░ ░ ░ ░ ▒
░ ░ ░ ░ ░
PEGASUS-NEO Penetration Testing Framework   🛡️ Description PEGASUS-NEO is a comprehensive penetration testing framework (https://www.kitploit.com/search/label/Framework) designed for security professionals and ethical hackers. It combines multiple security tools and custom modules for reconnaissance, exploitation, wireless (https://www.kitploit.com/search/label/Wireless) attacks, web hacking, and more. ⚠️ Legal Disclaimer This tool is provided for educational and ethical testing purposes only. Usage of PEGASUS-NEO for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. 🔒 Copyright Notice PEGASUS-NEO - Advanced Penetration Testing Framework
Copyright (C) 2024 Letda Kes dr. Sobri. All rights reserved.

This software is proprietary and confidential. Unauthorized copying, transfer, or
reproduction of this software, via any medium is strictly prohibited.

Written by Letda Kes dr. Sobri , January 2024
🌟 Features Password: Sobri Reconnaissance & OSINT Network scanning Email harvesting Domain enumeration Social media tracking (https://www.kitploit.com/search/label/Tracking) Exploitation & Pentesting Automated exploitation Password attacks SQL injection Custom payload generation Wireless Attacks WiFi cracking Evil twin attacks WPS exploitation Web Attacks Directory scanning XSS detection SQL injection CMS scanning (https://www.kitploit.com/search/label/Scanning) Social Engineering Phishing templates Email spoofing Credential harvesting Tracking & Analysis (https://www.kitploit.com/search/label/Analysis) IP geolocation Phone number tracking Email analysis Social media hunting 🔧 Installation # Clone the repository
git clone https://github.com/sobri3195/pegasus-neo.git

# Change directory
cd pegasus-neo

# Install dependencies
sudo python3 -m pip install -r requirements.txt

# Run the tool
sudo python3 pegasus_neo.py
📋 Requirements Python 3.8+ Linux Operating System (Kali/Ubuntu recommended) Root privileges Internet connection 🚀 Usage Start the tool: sudo python3 pegasus_neo.py
Enter authentication password Select category from main menu Choose specific tool or module Follow on-screen instructions 🔐 Security Features Source code protection Integrity checking Anti-tampering mechanisms Encrypted storage Authentication system 🛠️ Supported Tools Reconnaissance & OSINT Nmap Wireshark Maltego Shodan theHarvester Recon-ng SpiderFoot FOCA Metagoofil Exploitation & Pentesting Metasploit SQLmap Commix BeEF SET Hydra John the Ripper Hashcat Wireless Hacking Aircrack-ng Kismet WiFite Fern Wifi Cracker Reaver Wifiphisher Cowpatty Fluxion Web Hacking Burp Suite OWASP ZAP Nikto XSStrike Wapiti Sublist3r DirBuster WPScan 📝 Version History v1.0.0 (2024-01) - Initial release v1.1.0 (2024-02) - Added tracking modules v1.2.0 (2024-03) - Added tool installer 👥 Contributing This is a proprietary project and contributions are not accepted at this time. 🤝 Support For support, please email muhammadsobrimaulana31@gmail.com atau https://lynk.id/muhsobrimaulana ⚖️ License This project is protected under proprietary license. See the LICENSE file for details. Made with ❤️ by Letda Kes dr. Sobri

Download Pegasus-Neo (https://github.com/sobri3195/pegasus-neo)

Hostile Host Headers: How I Hijacked the App with One Sneaky Header
https://infosecwriteups.com/hostile-host-headers-how-i-hijacked-the-app-with-one-sneaky-header-42c7dd82d2bc?source=rss------bug_bounty-5

Hey there!😊Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/hostile-host-headers-how-i-hijacked-the-app-with-one-sneaky-header-42c7dd82d2bc?source=rss------bug_bounty-5)

From 0 to Hacker Hero
https://medium.com/@omkumar.coder/from-0-to-hacker-hero-e9b8b8c0d1af?source=rss------bug_bounty-5

My Bug Bounty Journey Starts with CTFs & Curiosity 🧠🔍Continue reading on Medium » (https://medium.com/@omkumar.coder/from-0-to-hacker-hero-e9b8b8c0d1af?source=rss------bug_bounty-5)

Нашёл баг — получил награду!

STON.fi запустили Bug Bounty для своих смарт-контрактов версии v2 — призовой фонд $500,000 💰Continue reading on Medium »
Read more...

Found a bug? Get rewarded!

STON.fi has launched a Bug Bounty for its v2 smart contracts — with a massive $500,000 prize pool 💰Continue reading on Medium »
Read more...

How I Reported My First Vulnerability

Hello fellow hackers!Continue reading on Medium »
Read more...

Insecure Direct Object Reference (IDOR) in a Government Portal

IntroductionContinue reading on Medium »
Read more...

Нашёл баг — получил награду!
https://medium.com/@roma_k90/%D0%BD%D0%B0%D1%88%D1%91%D0%BB-%D0%B1%D0%B0%D0%B3-%D0%BF%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D0%BB-%D0%BD%D0%B0%D0%B3%D1%80%D0%B0%D0%B4%D1%83-e936631f5e02?source=rss------bug_bounty-5

STON.fi запустили Bug Bounty для своих смарт-контрактов версии v2 — призовой фонд $500,000 💰Continue reading on Medium » (https://medium.com/@roma_k90/%D0%BD%D0%B0%D1%88%D1%91%D0%BB-%D0%B1%D0%B0%D0%B3-%D0%BF%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D0%BB-%D0%BD%D0%B0%D0%B3%D1%80%D0%B0%D0%B4%D1%83-e936631f5e02?source=rss------bug_bounty-5)

Insecure Direct Object Reference (IDOR) in a Government Portal
https://akashxak.medium.com/insecure-direct-object-reference-idor-in-a-government-portal-973758a23473?source=rss------bug_bounty-5