Telerik Report Server Tool that helps to businesses to store, manage and share the reports in one Central placeContinue reading on Medium » (https://medium.com/@hariharanhex00/bug-bounty-telerik-report-server-authentication-bypass-cve-2024-4358-poc-358575ed7102?source=rss------bug_bounty-5)

Parameter Tampering on a Govt. site
https://medium.com/@bagade1122/parameter-tampering-on-a-govt-site-b5a7c6a5490c?source=rss------bug_bounty-5

One day I received an email to make payment for my home electricity connection.
I had 2 options to make the payment of ₹ 610 via UPI or…Continue reading on Medium » (https://medium.com/@bagade1122/parameter-tampering-on-a-govt-site-b5a7c6a5490c?source=rss------bug_bounty-5)

Week 6 — Learning Basic Concepts of Cybersecurity
https://iamaangx028.medium.com/week-6-learning-basic-concepts-of-cybersecurity-d2a27e136f24?source=rss------bug_bounty-5

Aang Remains frozen for 100 Years.Continue reading on Medium » (https://iamaangx028.medium.com/week-6-learning-basic-concepts-of-cybersecurity-d2a27e136f24?source=rss------bug_bounty-5)

AI-Assisted Insecurity: Forging JWTs from Auto-Generated Weak Secrets
https://saeed0x1.medium.com/ai-assisted-insecurity-forging-jwts-from-auto-generated-weak-secrets-9a6db38b14ad?source=rss------bug_bounty-5

This article walks through a real-world JWT forgery vulnerability caused by a weak, AI-generated secret.Continue reading on Medium » (https://saeed0x1.medium.com/ai-assisted-insecurity-forging-jwts-from-auto-generated-weak-secrets-9a6db38b14ad?source=rss------bug_bounty-5)

AI-Assisted Insecurity: Forging JWTs from Auto-Generated Weak Secrets

This article walks through a real-world JWT forgery vulnerability caused by a weak, AI-generated secret.Continue reading on Medium »
Read more...

Host Validation Bypass via Connection State Attack: Multiple Requests Over the Same TCP Connection

Discover how persistent connections and weak Host validation open the doors to internal systems.Continue reading on InfoSec Write-ups »
Read more...

Host Validation Bypass via Connection State Attack: Multiple Requests Over the Same TCP Connection
https://infosecwriteups.com/host-validation-bypass-via-connection-state-attack-multiple-requests-over-the-same-tcp-connection-9fc2406d2fe1?source=rss------bug_bounty-5

Discover how persistent connections and weak Host validation open the doors to internal systems.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/host-validation-bypass-via-connection-state-attack-multiple-requests-over-the-same-tcp-connection-9fc2406d2fe1?source=rss------bug_bounty-5)

I can hack so why can’t I do bounties?
https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c4?source=rss------bug_bounty-5

Let’s talk about why you might be failing to find any exploits, even though you are trained…Continue reading on Medium » (https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c4?source=rss------bug_bounty-5)

I can hack so why can’t I do bounties?

Let’s talk about why you might be failing to find any exploits, even though you are trained…Continue reading on Medium »
Read more...

Good Wi-Fi card with Monitor & Packet Injection Mode.
https://www.reddit.com/r/Pentesting/comments/1magdo2/good_wifi_card_with_monitor_packet_injection_mode/

<!-- SC_OFF -->Hey, there. I'm using the ROG Strix G15 2022 laptop for pentesting lessons. The laptop is great, but the wifi isn't. Issue: WiFi card undetected from time to time. Very Annoying. Current card: MediaTek Wi-Fi 6E MT7922 (RZ616) 160MHz Wireless LAN Card -- WORST. What I'm looking for: A Good wifi card that supports: Both 2.4 GHz and 5 GHz (must). monitor & packet injection modes. at least WiFi 6E if possible (if possible). <!-- SC_ON --> submitted by /u/sharzun (https://www.reddit.com/user/sharzun)
[link] (https://www.reddit.com/r/Pentesting/comments/1magdo2/good_wifi_card_with_monitor_packet_injection_mode/) [comments] (https://www.reddit.com/r/Pentesting/comments/1magdo2/good_wifi_card_with_monitor_packet_injection_mode/)

Bug Bounty — “Si todo parece seguro, es que no has mirado lo suficiente”

1. Introducción: la falsa calma del 200 OKContinue reading on Medium »
Read more...

Bug Bounty — “Si todo parece seguro, es que no has mirado lo suficiente”
https://gorkaaa.medium.com/bug-bounty-si-todo-parece-seguro-es-que-no-has-mirado-lo-suficiente-386fef4ba55f?source=rss------bug_bounty-5