Week 6 — Learning Basic Concepts of Cybersecurity

Aang Remains frozen for 100 Years.Continue reading on Medium »
Read more...

“Bug Bounty ”Telerik Report Server Authentication Bypass — CVE-2024–4358 “POC”
https://medium.com/@hariharanhex00/bug-bounty-telerik-report-server-authentication-bypass-cve-2024-4358-poc-358575ed7102?source=rss------bug_bounty-5

Telerik Report Server Tool that helps to businesses to store, manage and share the reports in one Central placeContinue reading on Medium » (https://medium.com/@hariharanhex00/bug-bounty-telerik-report-server-authentication-bypass-cve-2024-4358-poc-358575ed7102?source=rss------bug_bounty-5)

Parameter Tampering on a Govt. site
https://medium.com/@bagade1122/parameter-tampering-on-a-govt-site-b5a7c6a5490c?source=rss------bug_bounty-5

One day I received an email to make payment for my home electricity connection.
I had 2 options to make the payment of ₹ 610 via UPI or…Continue reading on Medium » (https://medium.com/@bagade1122/parameter-tampering-on-a-govt-site-b5a7c6a5490c?source=rss------bug_bounty-5)

Week 6 — Learning Basic Concepts of Cybersecurity
https://iamaangx028.medium.com/week-6-learning-basic-concepts-of-cybersecurity-d2a27e136f24?source=rss------bug_bounty-5

Aang Remains frozen for 100 Years.Continue reading on Medium » (https://iamaangx028.medium.com/week-6-learning-basic-concepts-of-cybersecurity-d2a27e136f24?source=rss------bug_bounty-5)

AI-Assisted Insecurity: Forging JWTs from Auto-Generated Weak Secrets
https://saeed0x1.medium.com/ai-assisted-insecurity-forging-jwts-from-auto-generated-weak-secrets-9a6db38b14ad?source=rss------bug_bounty-5

This article walks through a real-world JWT forgery vulnerability caused by a weak, AI-generated secret.Continue reading on Medium » (https://saeed0x1.medium.com/ai-assisted-insecurity-forging-jwts-from-auto-generated-weak-secrets-9a6db38b14ad?source=rss------bug_bounty-5)

AI-Assisted Insecurity: Forging JWTs from Auto-Generated Weak Secrets

This article walks through a real-world JWT forgery vulnerability caused by a weak, AI-generated secret.Continue reading on Medium »
Read more...

Host Validation Bypass via Connection State Attack: Multiple Requests Over the Same TCP Connection

Discover how persistent connections and weak Host validation open the doors to internal systems.Continue reading on InfoSec Write-ups »
Read more...

Host Validation Bypass via Connection State Attack: Multiple Requests Over the Same TCP Connection
https://infosecwriteups.com/host-validation-bypass-via-connection-state-attack-multiple-requests-over-the-same-tcp-connection-9fc2406d2fe1?source=rss------bug_bounty-5

Discover how persistent connections and weak Host validation open the doors to internal systems.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/host-validation-bypass-via-connection-state-attack-multiple-requests-over-the-same-tcp-connection-9fc2406d2fe1?source=rss------bug_bounty-5)

I can hack so why can’t I do bounties?
https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c4?source=rss------bug_bounty-5

Let’s talk about why you might be failing to find any exploits, even though you are trained…Continue reading on Medium » (https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c4?source=rss------bug_bounty-5)

I can hack so why can’t I do bounties?

Let’s talk about why you might be failing to find any exploits, even though you are trained…Continue reading on Medium »
Read more...