Potential XSS Vulnerability in Acronis Login Callback URL

Exploiting login callback flows to inject JavaScript and hijack sessions — with a real-world bug bounty reportContinue reading on OSINT Team »
Read more...

How Hackers hide Malware in image files — A black hat tactic.
https://err0rgod.medium.com/how-hackers-hide-malware-in-image-files-a-black-hat-tactic-efe0b2b5fb5c?source=rss------bug_bounty-5

While starting in Malware Development you will always En-counter a problem, Whenever you test your malware in real scenarios you will…Continue reading on Medium » (https://err0rgod.medium.com/how-hackers-hide-malware-in-image-files-a-black-hat-tactic-efe0b2b5fb5c?source=rss------bug_bounty-5)

From LFI to RCE via /var/log/sshd.log
https://medium.com/@zoningxtr/from-lfi-to-rce-via-var-log-sshd-log-1cd81cd318ef?source=rss------bug_bounty-5

Complete Step-by-Step Attack Chain for Security Enthusiasts, Red Teamers, and Ethical HackersContinue reading on Medium » (https://medium.com/@zoningxtr/from-lfi-to-rce-via-var-log-sshd-log-1cd81cd318ef?source=rss------bug_bounty-5)

Full Guide: From LFI to RCE via /var/log/apache2/error.log
https://medium.com/@zoningxtr/full-exploitation-guide-from-lfi-to-rce-via-var-log-apache2-error-log-0f364049b107?source=rss------bug_bounty-5

A Step-by-Step Manual to Weaponize Apache Error Logs for Code ExecutionContinue reading on Medium » (https://medium.com/@zoningxtr/full-exploitation-guide-from-lfi-to-rce-via-var-log-apache2-error-log-0f364049b107?source=rss------bug_bounty-5)

Full LFI-to-RCE via Apache Access Logs
https://medium.com/@zoningxtr/full-lfi-to-rce-via-apache-access-logs-e521ec06ec1a?source=rss------bug_bounty-5

🧠 + 💣 = ⚔️ Total Exploitation Guide for Ethical HackersContinue reading on Medium » (https://medium.com/@zoningxtr/full-lfi-to-rce-via-apache-access-logs-e521ec06ec1a?source=rss------bug_bounty-5)

Cybersecurity Student Success Stories: Inspiring Journeys to Digital Defense
https://medium.com/@misterdoom07/cybersecurity-student-success-stories-inspiring-journeys-to-digital-defense-03e51470c540?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@misterdoom07/cybersecurity-student-success-stories-inspiring-journeys-to-digital-defense-03e51470c540?source=rss------bug_bounty-5)

I Found 50+ XSS Flaws Using Just My Browser

How a Simple Chrome Trick Turned Into a $5,000 Bug BountyContinue reading on Medium »
Read more...

FileJacking – Initial Access with File System API
https://www.reddit.com/r/redteamsec/comments/1mhe8y7/filejacking_initial_access_with_file_system_api/

submitted by /u/Print3M (https://www.reddit.com/user/Print3M)
[link] (https://print3m.github.io/blog/filejacking-initial-access-with-file-system-api) [comments] (https://www.reddit.com/r/redteamsec/comments/1mhe8y7/filejacking_initial_access_with_file_system_api/)

Finding vulnerabilities in Claude code
https://www.reddit.com/r/redteamsec/comments/1mhizx3/finding_vulnerabilities_in_claude_code/

submitted by /u/Fun_Preference1113 (https://www.reddit.com/user/Fun_Preference1113)
[link] (https://cymulate.com/blog/cve-2025-547954-54795-claude-inverseprompt/) [comments] (https://www.reddit.com/r/redteamsec/comments/1mhizx3/finding_vulnerabilities_in_claude_code/)

DNS proxy for C2 communications
https://www.reddit.com/r/redteamsec/comments/1mhjgqf/dns_proxy_for_c2_communications/

<!-- SC_OFF -->Hello there, I write a medium tutorial about How to setup DNS proxy for C2 commuications and a example with Myhic <!-- SC_ON --> submitted by /u/umbraXsecure (https://www.reddit.com/user/umbraXsecure)
[link] (https://medium.com/@umbraxsecure/dns-proxy-for-c2-servers-c1a3f2cf4944) [comments] (https://www.reddit.com/r/redteamsec/comments/1mhjgqf/dns_proxy_for_c2_communications/)

I Found 50+ XSS Flaws Using Just My Browser
https://medium.com/@ibtissamhammadi1/i-found-50-xss-flaws-using-just-my-browser-a00caba76c48?source=rss------bug_bounty-5

How a Simple Chrome Trick Turned Into a $5,000 Bug BountyContinue reading on Medium » (https://medium.com/@ibtissamhammadi1/i-found-50-xss-flaws-using-just-my-browser-a00caba76c48?source=rss------bug_bounty-5)