In the name of God.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-was-able-to-bypass-cloudflare-for-xss-e94cd827a5d6?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
AOFEX Insight: Underlying Causes of Heavy Blow to Cross-chain Security

https://cdn-images-1.medium.com/max/1500/1*Ql8IM-GgFBg6GIYKszxOgg.png
Continuous security issues on cross-chain bridges

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacker’s search engine — OSINT-SPY

https://cdn-images-1.medium.com/max/1000/1*Jk9NS3UMIJU05x5ByjXkBg.jpeg
OSINT-SPY is a tool that helps in performing OSINT scans on several online resources and check information for email, domain, IP address…

Continue reading on Geek Culture »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Microsoft Provides Warning on Yet Another Print Spooler Vulnerability. — CyberWorkx

https://cdn-images-1.medium.com/max/683/0*KTTnSbQJEWOC4CFZ
Microsoft has released a new advisory on the Elevation of Privilege vulnerability affecting Windows print Spooler component on last…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

How i was able to bypass Cloudflare for XSS!

In the name of God.Continue reading on InfoSec Write-ups »
Read more...

How i was able to bypass Cloudflare for XSS!

In the name of God.
Read more...

hacking: security in practice
is there a way to free-ride cellular internet just by using there zerorated websites?

So basically my cellular(4g/3g) isp, despite being so expensive (7.8 dollars for 1gb of internet with 5 to 10 mbps speed and terrible phone signal ) offers free websites like 0.facebook and freebasics.com among others that are not listed.

some times people find some bugged free webistes (sni/bug host) that allow you to hide any non zerorated websites (like youtube or reddit etc...) and make it seem to the isp that you are using just another zerorated websites ,all that using apps like httpinjector or your freedom (with a dns trick but that one gets you banned for 24 hours they didn't even bother to fix that bug in 9 years they just ban you for 24 hours if you use it) or using a payload or a configuration and import it directly to the app.

My problem is that I already have a payload it's password and the IP and port and the second TRACE payload but the app (socksip )crash on my phone and I couldn't find any other app that have this format: the "GET" payload password IP:Port the "TRACE" payload

others need a username this one doesn't, any help?

submitted by /u/Nziom
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Logical Flaw Resulting Path Hijacking

Hello, amazing peoples, hope you are doing well, I am back with my new writeup. In this write-up, I am going to explain a logical flaw that…
Read more...

Logical Flaw Resulting Path Hijacking
https://infosecwriteups.com/logical-flaw-resulting-path-hijacking-dd4d1e1e832f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, amazing peoples, hope you are doing well, I am back with my new writeup.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/logical-flaw-resulting-path-hijacking-dd4d1e1e832f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Logical Flaw Resulting Path Hijacking

Hello, amazing peoples, hope you are doing well, I am back with my new writeup.Continue reading on InfoSec Write-ups »
Read more...

Account Take Over with HTTP Pollution Attack at Reset Password Functionality
https://medium.com/@yoshimlutfi/account-take-over-with-http-pollution-attack-at-reset-password-functionality-9f683bc0bdd?source=rss------bug_bounty-5

First of all, this is my first write up about finding or bug when I work as cyber security. and also I try to write this post with English…Continue reading on Medium » (https://medium.com/@yoshimlutfi/account-take-over-with-http-pollution-attack-at-reset-password-functionality-9f683bc0bdd?source=rss------bug_bounty-5)

KitPloit - PenTest Tools!
Exploit_Mitigations - Knowledge Base Of Exploit Mitigations Available Across Numerous Operating Systems, Architectures And Applications And Versions

The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place.

An example is the following: http://3.bp.blogspot.com/-ooYBRdiYPFA/YOZh0RoZbNI/AAAAAAAAiEI/w3vi0ASy65AI2QkKmiYiE8yQZc1Uly-LwCK4BGAYYCw/w640-h180/exploit_mitigations_1_example-749208.png Supported targetsWe currently support the following operating systems:

* Microsoft Windows
* Linux
* Google Android
* Apple iPhone OS (iOS)
* OpenBSD
* FreeBSD

and the following software:

* Mozilla Firefox
* Microsoft Edge
* Google Chrome
* Microsoft Office

and the following libraries:

* glibc

and the following hardware:

* ARM MotivationsIt has become challenging to follow when certain mitigations are added in an update and/or backported to some older versions of various software and hardware.

Sometimes, online content becomes deprecated due to mitigation changes and it can be hard to keep up. Also, it is easy to forget after a short time if you don't work on a specific software/hardware.

We have been filling this gap by tracking all the mitigations in summary tables that hold the mitigations names and linking to online references to get technical information about them.

The shared information has demonstrated to be useful for several years to exploit developers. Does my current environment have mitigation X?This is a common question any exploit developer may have when trying to develop an exploit for a given target.

E.g. let's say you want to exploit a Windows kernel driver on Windows 7 x64 containing a kernel NULL pointer dereference bug. Is it exploitable?

Checking our table, we read the "NULL page mitigation" was introduced in "Windows 8 32-bit/64-bit and backported to Vista+ 64-bit". Now we know it depends if our target Windows 7 x64 is up-to-date or not, more precisely, we can focus on figuring out which KB introduces this mitigation and check our target against that KB! Final wordsWe do accept pull requests so feel free to do so :)

We do have other targets in our private pipeline too so reach out if you are interested in another particular one :) Download Exploit_Mitigations

___________________________
@hacking_Attack
@Hacking_Video