Open-Source AI in Security Operations: Case Studies from the Frontlines

Last month, I spent three days at a security conference where the same scene kept repeating: security professionals huddled around laptops…Continue reading on Medium »
Read more...

s3 bucket and firebase misconfigurtion Part-1

HI everyone, i am back with another writeup……….Continue reading on Medium »
Read more...

GraphQL Gatecrash: When an Introspection Query Opened the Whole Backend ️

Free Link 🎈Continue reading on InfoSec Write-ups »
Read more...

5 Valuable Lessons I Learned Moving from Bug Bounty Hunter to Security Consultant

Hi, I’m Mrunal Chawda. I started my cybersecurity journey as an independent bug bounty hunter. Now, I have around 4 plus years of…Continue reading on Level Up Coding »
Read more...

From Hunger to Hacker: How a Zomato Order Earned Me ₹25K”

Zomato Bugbounty Continue reading on Medium »
Read more...

Better Than Nmap? Meet FingerprintX — The Go-Powered Port Fingerprinter

FingerprintX is a blazing-fast Go tool that outpaces Nmap in service detection and works perfectly with Naabu for bug bounty reconContinue reading on Medium »
Read more...

The Complete Guide to PHP Functions That Can Cause Local File Inclusion (LFI) Vulnerabilities…

Local File Inclusion (LFI) vulnerabilities are among the most dangerous and common web application flaws — especially in PHP-based…Continue reading on Medium »
Read more...

MIME Sniffing Unmasked: How Browsers Misjudge Files and Create Risks

The internet runs on a set of rules and standards that help browsers, servers, and applications communicate effectively. One such standard…Continue reading on Medium »
Read more...

Flutter IOS pentest
https://www.reddit.com/r/Pentesting/comments/1l6w2ks/flutter_ios_pentest/

<!-- SC_OFF -->Need help intercepting traffic for iOS app built using flutter I tried reflutter but snapshot is not supported Tried frida scripts n SSL kill switch n stuff but didn't work as expected Tried the ovpn method but unable to intercept traffic Can anyone help me out? <!-- SC_ON --> submitted by /u/Different-Abies-3998 (https://www.reddit.com/user/Different-Abies-3998)
[link] (https://www.reddit.com/r/Pentesting/comments/1l6w2ks/flutter_ios_pentest/) [comments] (https://www.reddit.com/r/Pentesting/comments/1l6w2ks/flutter_ios_pentest/)

Are you guys at the core Network Engineers/Security Analysts and pentesting is just a skill you had?
https://www.reddit.com/r/Pentesting/comments/1l6wchs/are_you_guys_at_the_core_network/

<!-- SC_OFF -->There are not that many Pentesting jobs out there, and my question is: are you even using your full capacity at the job? Is this skill just a plus for the Network Security jobs? Are guys actively using this or it is just a small tool in your bag. Should the focus be on the networks security and configurations and not the pentesting itself too much? I am asking this so that I can understand if my focus should shift to learning something specific if my goal is to be into security of the networks(so that I will be more “employable”) or to focus on the pentesting itself too so that this skill will help pe achieve this. I would like to hear your thoughts on this so that I might save time moving closer to my goals(and to not leave in a fantasy that my focus should be all-in pentesting). <!-- SC_ON --> submitted by /u/TheLordJohn (https://www.reddit.com/user/TheLordJohn)
[link] (https://www.reddit.com/r/Pentesting/comments/1l6wchs/are_you_guys_at_the_core_network/) [comments] (https://www.reddit.com/r/Pentesting/comments/1l6wchs/are_you_guys_at_the_core_network/)

Open-Source AI in Security Operations: Case Studies from the Frontlines
https://medium.com/@sync-with-ivan/open-source-ai-in-security-operations-case-studies-from-the-frontlines-654fd26d078d?source=rss------bug_bounty-5

Last month, I spent three days at a security conference where the same scene kept repeating: security professionals huddled around laptops…Continue reading on Medium » (https://medium.com/@sync-with-ivan/open-source-ai-in-security-operations-case-studies-from-the-frontlines-654fd26d078d?source=rss------bug_bounty-5)

s3 bucket and firebase misconfigurtion Part-1
https://doordiefordream.medium.com/s3-bucket-and-firebase-misconfigurtion-part-1-76c15c90628f?source=rss------bug_bounty-5

HI everyone, i am back with another writeup……….Continue reading on Medium » (https://doordiefordream.medium.com/s3-bucket-and-firebase-misconfigurtion-part-1-76c15c90628f?source=rss------bug_bounty-5)

GraphQL Gatecrash: When an Introspection Query Opened the Whole Backend ️
https://infosecwriteups.com/graphql-gatecrash-when-an-introspection-query-opened-the-whole-backend-%EF%B8%8F-5ec2a74ac20a?source=rss------bug_bounty-5

Free Link 🎈Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/graphql-gatecrash-when-an-introspection-query-opened-the-whole-backend-%EF%B8%8F-5ec2a74ac20a?source=rss------bug_bounty-5)

5 Valuable Lessons I Learned Moving from Bug Bounty Hunter to Security Consultant
https://levelup.gitconnected.com/5-valuable-lessons-i-learned-moving-from-bug-bounty-hunter-to-security-consultant-1a202db85fd1?source=rss------bug_bounty-5

Hi, I’m Mrunal Chawda. I started my cybersecurity journey as an independent bug bounty hunter. Now, I have around 4 plus years of…Continue reading on Level Up Coding » (https://levelup.gitconnected.com/5-valuable-lessons-i-learned-moving-from-bug-bounty-hunter-to-security-consultant-1a202db85fd1?source=rss------bug_bounty-5)

XSS Unleashed: Exploiting & Defending Cross-Site Scripting in the Wild

Continue reading on Medium »
Read more...