Reflected XSS and Blind OS Command Injection
https://osintteam.blog/reflected-xss-and-blind-os-command-injection-a056c75f99be?source=rss------bug_bounty-5

How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command ExecutionContinue reading on OSINT Team » (https://osintteam.blog/reflected-xss-and-blind-os-command-injection-a056c75f99be?source=rss------bug_bounty-5)

Reflected XSS and Blind OS Command Injection

How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command ExecutionContinue reading on OSINT Team »
Read more...

Submitting payloads to virustotal
https://www.reddit.com/r/redteamsec/comments/1kwqc2x/submitting_payloads_to_virustotal/

<!-- SC_OFF -->Was implementing a few loaders so to bypass a specific EDR vendor for initial access and get a beacon connection to my C2. Had been uploading few of the testing payloads to virustotal, but this time i mistakenly uploaded the main payload that i was going to use during the engagement (starts in a couple of days). Is the actual technique (e.g specific injection technique used) burned and do i need to write something new from scratch or could i try modifying the code logic a bit, adding some obsfucation and hopefully the same technique will still work? In other words how long does it for edr vendors to perform behavioral analysis on submitted samples, detect the technique applied and update their products (if thats how it works). Thanks! <!-- SC_ON --> submitted by /u/Full_Roll37 (https://www.reddit.com/user/Full_Roll37)
[link] (http://virustotal.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwqc2x/submitting_payloads_to_virustotal/)

Your strategy for hunting 0days
https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/

<!-- SC_OFF -->I recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? <!-- SC_ON --> submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard)
[link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)

Exploiting the Menu: Breaking Restaurant Delivery Systems

Restaurant Delivery Systems streamline operations, but they can also present significant security risks. Here’s how I discovered a…Continue reading on Medium »
Read more...

Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030)

Continue reading on Medium »
Read more...

Finding Broken Access Control in DoD

I just got back from a run and figured, “why not do a little bug hunting on the Department of Defense?” Yeah, sounds crazy, but it’s…Continue reading on Medium »
Read more...

Exploiting the Menu: Breaking Restaurant Delivery Systems
https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5

Restaurant Delivery Systems streamline operations, but they can also present significant security risks. Here’s how I discovered a…Continue reading on Medium » (https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5)

Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030)
https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5)

Finding Broken Access Control in DoD
https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5

I just got back from a run and figured, “why not do a little bug hunting on the Department of Defense?” Yeah, sounds crazy, but it’s…Continue reading on Medium » (https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5)

Header Injection to Hero: How I Hijacked Emails and Made the Server Sing

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

Exploiting Web Cache Poisoning with X-Host Header Using Param Miner

Write-up Web Cache Poisoning Using an Unknown Header.Continue reading on InfoSec Write-ups »
Read more...

$750 Bounty: for HTTP Reset Password Link in Mattermost

How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account TakeoversContinue reading on InfoSec Write-ups »
Read more...

Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard

Welcome Everyone to Another Writeup Recently while surfing the Infosec Twitter I came across a Post which mentioned Ganglia Dashboard . Had no Idea what it is so curiosity peaked in as usual :) What is Ganglia ? Ganglia is a scalable, distributed monitoring tool for high-performance computing systems, clusters and networks. The software is used to view either live or recorded statistics covering metrics such as CPU load averages or network utilization for many nodes. Where High Performance Computing systems are used ? An HPC cluster, or high-performance computing cluster, is a combination of specialized hardware, including a group of large and powerful computers, and a distributed processing software framework configured to handle massive amounts of data at high speeds with parallel performance and high availability.https://medium.com/media/2d2d2f1e10d2b4d2d38927f0c82ce1c9/href SHODAN TIME !!http.title:"Ganglia" From the Search results found something asGanglia:: Cluster Report that belonged to xyz.uohyd.ac.in Came to know uohyd.ac.in belongs to University of Hyderabad There is no prebuilt authentication mechanism for accessing Ganglia dashboard . From this dashboard one can understand how multiple computer systems are behaving as far as I have came to understand it . To check whether an organization is using ganglia all one have to do is add ganglia to their wordlisttarget.com/ganglia To search more about it use Google DorksIndex of:"Ganglia:: " Sources to read more about it :Ganglia (software) - WikipediaGitHub - ganglia/ganglia-web: Ganglia Web FrontendView Ganglia metricsOffSec's Exploit Database Archive I hope you learned something new :) . Bye Bye !! Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...

$500 Bounty: Shopify Referrer Leak: Hijacking Storefront Access with a Single Token

Referrer Header Leaks + Iframe Injection = Storefront Password BypassContinue reading on InfoSec Write-ups »
Read more...