$1000 Bounty: Reset any password
https://medium.com/h7w/1000-bounty-reset-any-password-474606e18441?source=rss------bug_bounty-5

A simple logic flaw in Pixiv’s password reset flow enabled unrestricted verification code brute-forcing — earning a $1000 bountyContinue reading on T3CH » (https://medium.com/h7w/1000-bounty-reset-any-password-474606e18441?source=rss------bug_bounty-5)

I Got ROOT Access to a Hosting Provider Without a Single Exploit

🧠 Boring Recon That Led Somewhere InterestingContinue reading on Medium »
Read more...

SQL injection vulnerability allowing login bypass [ES] [PortSwigger]

Continuando con la vulnerabilidad SQLi, en esta ocasión tocaremos principalmente el Bypass de un sistema de autenticación por medio de…Continue reading on Medium »
Read more...

: HackerOne!

I’m thrilled to share that I’ve secured the 3rd position in one of HackerOne’s programs! What makes this achievement even more special is…Continue reading on Medium »
Read more...

I Got ROOT Access to a Hosting Provider Without a Single Exploit
https://kkonann.medium.com/i-got-root-access-to-a-hosting-provider-without-a-single-exploit-c6af4185dc54?source=rss------bug_bounty-5

🧠 Boring Recon That Led Somewhere InterestingContinue reading on Medium » (https://kkonann.medium.com/i-got-root-access-to-a-hosting-provider-without-a-single-exploit-c6af4185dc54?source=rss------bug_bounty-5)

SQL injection vulnerability allowing login bypass [ES] [PortSwigger]
https://h0lm3s.medium.com/sql-injection-vulnerability-allowing-login-bypass-es-portswigger-53c7adf477df?source=rss------bug_bounty-5

Continuando con la vulnerabilidad SQLi, en esta ocasión tocaremos principalmente el Bypass de un sistema de autenticación por medio de…Continue reading on Medium » (https://h0lm3s.medium.com/sql-injection-vulnerability-allowing-login-bypass-es-portswigger-53c7adf477df?source=rss------bug_bounty-5)

: HackerOne!
https://medium.com/@umeryousuf26/hackerone-19b7aeaf7c6a?source=rss------bug_bounty-5

I’m thrilled to share that I’ve secured the 3rd position in one of HackerOne’s programs! What makes this achievement even more special is…Continue reading on Medium » (https://medium.com/@umeryousuf26/hackerone-19b7aeaf7c6a?source=rss------bug_bounty-5)

Best Certifications in 2025 non beginner.
https://www.reddit.com/r/Pentesting/comments/1ma32vx/best_certifications_in_2025_non_beginner/

<!-- SC_OFF -->Throwing this out to the hive mind: after 4 years pentesting and playing red team full time (never bothered with certs, just dove straight into real exercises), I’m finally thinking of getting certified but not with a starter one since it overlaps my experience. What’s your “no nonsense” favorite cert for someone already living and breathing pentest/red team? OSCP, OSEP, CRTO, GPEN, CPTS, something else? I just want to improve my résumé <!-- SC_ON --> submitted by /u/wh1t3k4t (https://www.reddit.com/user/wh1t3k4t)
[link] (https://www.reddit.com/r/Pentesting/comments/1ma32vx/best_certifications_in_2025_non_beginner/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ma32vx/best_certifications_in_2025_non_beginner/)

Fed up with pentesting methodology chaos? Built something to fix it.
https://www.reddit.com/r/Pentesting/comments/1mab1ru/fed_up_with_pentesting_methodology_chaos_built/

<!-- SC_OFF -->Hello r/Pentesting (https://www.reddit.com/r/Pentesting) , Is anyone else tired of tracking methodologies across scattered notes, Excel sheets, and random text files? Ever find yourself thinking: Where did I put that command from last month? I remember that scenario... but what did I do last time? How do I clearly show this complex attack chain to my customer? Why is my methodology/documentation/life such a mess? Hmm what can I do at this point in my pentest mission? Did I have enough coverage? How can I share my findings or a whole "snapshot" of my current progress with my team? My friend and I developed a FOSS platform called Penflow to make our work easier as security engineers. Here's what we ended up with: Visual methodology organization Attack kill chain mapping with proper relationship tracking Built on Neo4j for the graph database magic AI powered chat and node suggestion UI that doesn't look like garbage from 2005 (we actually spent time on this) Looking for your feedback 🙏 GitHub: https://github.com/rb-x/penflow <!-- SC_ON --> submitted by /u/DoubleMirror1008 (https://www.reddit.com/user/DoubleMirror1008)
[link] (https://www.reddit.com/r/Pentesting/comments/1mab1ru/fed_up_with_pentesting_methodology_chaos_built/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mab1ru/fed_up_with_pentesting_methodology_chaos_built/)

“Bug Bounty ”Telerik Report Server Authentication Bypass — CVE-2024–4358 “POC”

Telerik Report Server Tool that helps to businesses to store, manage and share the reports in one Central placeContinue reading on Medium »
Read more...

Parameter Tampering on a Govt. site

One day I received an email to make payment for my home electricity connection. I had 2 options to make the payment of ₹ 610 via UPI or…Continue reading on Medium »
Read more...

How We Discovered a Stored HTML Injection in a Chatbot System ️

This write-up has been prepared under the guidance of Amish Patel, Lay Patel at Hacker4Help as part of our learning initiative on cybersecurity awareness.🔍 Introduction As budding cybersecurity enthusiasts, we’re always on the lookout for vulnerable systems that can help us learn and sharpen our skills. One casual evening of testing led us — Het Patel and Kaif Shah — to discover a Stored HTML Injection vulnerability in the chatbot feature of redacted.co.in, an AI-driven platform that connects users with verified professional experts across various categories. So Let’s get started 😎What is Stored HTML Injection? 💥 Before we dive into the juicy details, let’s break down what Stored HTML Injection actually is (because not everyone speaks fluent hacker 🤓): Think of it like this: Imagine you’re at a restaurant and the waiter takes your order without questioning it. You ask for “spaghetti with a side of surprise ingredients” and the kitchen just… makes it. No questions asked. That’s essentially what happens with stored HTML injection! 🍝 Hence, Stored HTML Injection occurs when user-supplied HTML content is not properly sanitized and is saved in the application’s database. When this data is later rendered on a page, the HTML is executed directly, which could lead to defacements or further security issues such as phishing or XSS (if scripts are allowed). This can lead to:🎭 Page defacements (making websites look funky)🎣 Phishing attacks (tricking users)⚡ XSS vulnerabilities (if scripts sneak through)The Setup: Where We Found It 🧪 While exploring the AI chatbot feature of pyng.co.in, we noticed an input field where users could send messages. At first, it seemed harmless — but our curiosity nudged us to test how it handled raw HTML.Payload and Execution We entered the following simple HTML tag as our message:<h1>Hello from Het & Kaif</h1> To our surprise, when the chat history was loaded on page refresh or revisit, the message was rendered exactly as HTML — not escaped, not sanitized. This confirmed a stored HTML injection — the HTML was being stored server-side and rendered client-side without any filtering. We also tried several other payloads to confirm the injection:<b style="color:red">XSS</b> <i onclick="alert('XSS')">Click me</i> <div style="background:red;padding:10px">Injected DIV</div> <b style="color:red">XSS</b> However, since JavaScript execution was fully disabled, despite attempting multiple payloads and bypass techniques, we were unable to achieve any successful execution.Screenshot of Payload Execution📬 Responsible Disclosure We followed responsible disclosure practices:Reported the bug to the redacted.co.in team.Shared steps to reproduce and suggestions to mitigate. We did got the reply from support team: They were already aware of the vulnerability so they marked our report as “Duplicate Submission” 😭About the Authors:Het Patel — Cybersecurity Enthusiast | Bug Hunter | Coffee Addict ☕Kaif Shah — Security Researcher | CEHv11 | CRTA | Top 4% THM | Bug Hunter Happy Hacking! (Ethically, of course) 😉🔒 How We Discovered a Stored HTML Injection in a Chatbot System 🕷️ was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...

Insecure by Design: How a Mobile API Let Me Reset Anyone’s Password With Just a Phone Number

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...