Restaurant Delivery Systems streamline operations, but they can also present significant security risks. Here’s how I discovered a…Continue reading on Medium » (https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5)

Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030)
https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5)

Finding Broken Access Control in DoD
https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5

I just got back from a run and figured, “why not do a little bug hunting on the Department of Defense?” Yeah, sounds crazy, but it’s…Continue reading on Medium » (https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5)

Header Injection to Hero: How I Hijacked Emails and Made the Server Sing

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

Exploiting Web Cache Poisoning with X-Host Header Using Param Miner

Write-up Web Cache Poisoning Using an Unknown Header.Continue reading on InfoSec Write-ups »
Read more...

$750 Bounty: for HTTP Reset Password Link in Mattermost

How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account TakeoversContinue reading on InfoSec Write-ups »
Read more...

Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard

Welcome Everyone to Another Writeup Recently while surfing the Infosec Twitter I came across a Post which mentioned Ganglia Dashboard . Had no Idea what it is so curiosity peaked in as usual :) What is Ganglia ? Ganglia is a scalable, distributed monitoring tool for high-performance computing systems, clusters and networks. The software is used to view either live or recorded statistics covering metrics such as CPU load averages or network utilization for many nodes. Where High Performance Computing systems are used ? An HPC cluster, or high-performance computing cluster, is a combination of specialized hardware, including a group of large and powerful computers, and a distributed processing software framework configured to handle massive amounts of data at high speeds with parallel performance and high availability.https://medium.com/media/2d2d2f1e10d2b4d2d38927f0c82ce1c9/href SHODAN TIME !!http.title:"Ganglia" From the Search results found something asGanglia:: Cluster Report that belonged to xyz.uohyd.ac.in Came to know uohyd.ac.in belongs to University of Hyderabad There is no prebuilt authentication mechanism for accessing Ganglia dashboard . From this dashboard one can understand how multiple computer systems are behaving as far as I have came to understand it . To check whether an organization is using ganglia all one have to do is add ganglia to their wordlisttarget.com/ganglia To search more about it use Google DorksIndex of:"Ganglia:: " Sources to read more about it :Ganglia (software) - WikipediaGitHub - ganglia/ganglia-web: Ganglia Web FrontendView Ganglia metricsOffSec's Exploit Database Archive I hope you learned something new :) . Bye Bye !! Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...

$500 Bounty: Shopify Referrer Leak: Hijacking Storefront Access with a Single Token

Referrer Header Leaks + Iframe Injection = Storefront Password BypassContinue reading on InfoSec Write-ups »
Read more...

$750 Bounty: for HTTP Reset Password Link in Mattermost

How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account TakeoversContinue reading on InfoSec Write-ups »
Read more...

Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard

Ganglia is a scalable, distributed monitoring tool for high-performance computing systems, clusters and networksContinue reading on InfoSec Write-ups »
Read more...

$500 Bounty: Shopify Referrer Leak: Hijacking Storefront Access with a Single Token

Referrer Header Leaks + Iframe Injection = Storefront Password BypassContinue reading on InfoSec Write-ups »
Read more...

I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs

Free Article LinkContinue reading on InfoSec Write-ups »
Read more...

Broken Access Control: The Quiet Killer in Web Applications

Hidden tokens, endpoints led to large compromise Continue reading on Medium »
Read more...

OneSpan Race Condition — Duplicate Group Names? Ez Game

While messing around with the OneSpan Transaction Cloud Platform (sandbox), I stumbled upon a juicy race condition that lets you create…Continue reading on Medium »
Read more...

Unsafe Redirects = Unlimited Ride: How Open Redirect Led Me to Internal Dashboards

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

$750 Bounty: for HTTP Reset Password Link in Mattermost
https://infosecwriteups.com/750-bounty-for-http-reset-password-link-in-mattermost-3cc3acdb0f85?source=rss------bug_bounty-5

How an Unsecured Protocol in a Critical Workflow Opened the Door for Network-Based Account TakeoversContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/750-bounty-for-http-reset-password-link-in-mattermost-3cc3acdb0f85?source=rss------bug_bounty-5)

Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard
https://infosecwriteups.com/hacking-insights-gaining-access-to-university-of-hyderabad-ganglia-dashboard-bdc15f3a82fe?source=rss------bug_bounty-5