New Types of Hacking: IDOR Attacks Evolved
https://theosintedge.medium.com/new-types-of-hacking-idor-attacks-evolved-ce556e25572e?source=rss------bug_bounty-5

In the ever-evolving landscape of cybersecurity, one of the most underestimated and overlooked vulnerabilities remains the Insecure Direct…Continue reading on Medium » (https://theosintedge.medium.com/new-types-of-hacking-idor-attacks-evolved-ce556e25572e?source=rss------bug_bounty-5)

Is XBOW Replacing Cybersecurity Professionals? The Truth Behind the AI Hacker Taking Over HackerOne
https://medium.com/@ishowcybersecurity/is-xbow-replacing-cybersecurity-professionals-the-truth-behind-the-ai-hacker-taking-over-hackerone-7f5f38d78153?source=rss------bug_bounty-5

A New Contender in CybersecurityContinue reading on Medium » (https://medium.com/@ishowcybersecurity/is-xbow-replacing-cybersecurity-professionals-the-truth-behind-the-ai-hacker-taking-over-hackerone-7f5f38d78153?source=rss------bug_bounty-5)

Vulnerable and obsolete components (OWASP A06): Hacking and Bug Bounty Guide

Discover how outdated libraries and frameworks are entry points for RCE and data leakage. Protect your systems!Continue reading on Medium »
Read more...

Vulnerable and obsolete components (OWASP A06): Hacking and Bug Bounty Guide
https://medium.com/@jpablo13/vulnerable-and-obsolete-components-owasp-a06-hacking-and-bug-bounty-guide-0f8b3d1736c4?source=rss------bug_bounty-5

Discover how outdated libraries and frameworks are entry points for RCE and data leakage. Protect your systems!Continue reading on Medium » (https://medium.com/@jpablo13/vulnerable-and-obsolete-components-owasp-a06-hacking-and-bug-bounty-guide-0f8b3d1736c4?source=rss------bug_bounty-5)

OS command injection, simple case [ES] [PortSwigger]

Imagina que pudieras dar instrucciones secretas al sistema operativo y obtener el resultado sin ningún tipo de filtro, utilizando un canal…Continue reading on Medium »
Read more...

OS command injection, simple case [ES] [PortSwigger]
https://h0lm3s.medium.com/os-command-injection-simple-case-es-portswigger-601126eea44a?source=rss------bug_bounty-5

Imagina que pudieras dar instrucciones secretas al sistema operativo y obtener el resultado sin ningún tipo de filtro, utilizando un canal…Continue reading on Medium » (https://h0lm3s.medium.com/os-command-injection-simple-case-es-portswigger-601126eea44a?source=rss------bug_bounty-5)

Anyone have experience with bypassing sentinelone edr?
https://www.reddit.com/r/redteamsec/comments/1m9hj3s/anyone_have_experience_with_bypassing_sentinelone/

<!-- SC_OFF -->Im Stucked in one red team engagement. Need some guidance from experts here. <!-- SC_ON --> submitted by /u/Designer-Ad6955 (https://www.reddit.com/user/Designer-Ad6955)
[link] (https://google.com/) [comments] (https://www.reddit.com/r/redteamsec/comments/1m9hj3s/anyone_have_experience_with_bypassing_sentinelone/)

SharePoint ToolShell: The Most sophisticated Enterprise hack of 2025

By Mostefa Jakboub | Threat Hunter & Security ResearcherContinue reading on Medium »
Read more...

Insecure OTP Mechanism: How I Discovered a Replay Attack Vulnerability

Recently, while auditing an application’s authentication mechanisms, I unearthed a subtle but serious flaw in the way it handled One-Time…Continue reading on Medium »
Read more...

Admin Emails & Passwords Exposed via HTTP Method Change
https://www.reddit.com/r/Pentesting/comments/1m9h51p/admin_emails_passwords_exposed_via_http_method/

<!-- SC_OFF -->Just published a new write-up where I walk through how a small HTTP method misconfiguration led to admin credentials being exposed. It's a simple but impactful example of why misconfigurations matter. 📖 Read it here: https://is4curity.medium.com/admin-emails-passwords-exposed-via-http-method-change-da23186f37d3 Let me know what you think and feel free to share similar cases! <!-- SC_ON --> submitted by /u/General_Speaker9653 (https://www.reddit.com/user/General_Speaker9653)
[link] (https://i.redd.it/puj4vxkmi4ff1.png) [comments] (https://www.reddit.com/r/Pentesting/comments/1m9h51p/admin_emails_passwords_exposed_via_http_method/)

The Bug Hiding in Plain Sight: A Simple Click Led to Cross-Org Account Takeover

Sometimes, the most powerful bugs don’t hide behind layers of complexity— they sit quietly in the open, waiting for someone to ask the…Continue reading on Medium »
Read more...