How to Chain Bugs Like a Pro (From P5 to P1)

By Viraat MishraContinue reading on Medium »
Read more...

The Vulnerabilities You Walk Past

🕵️‍♂️ The Bugs You’re Missing: Lessons from Kapeka0’s “Hidden in Plain Sight” DiscoveryContinue reading on Medium »
Read more...

Hijacking the Pipeline: Mastering HTTP Desync Exploits
https://medium.com/@Dedrknex/hijacking-the-pipeline-mastering-http-desync-exploits-532faf98dbbe?source=rss------bug_bounty-5

Imagine two trusted guards watching over the gates of your kingdom. One guard sees a visitor arrive, nods in approval, and lets them enter…Continue reading on Medium » (https://medium.com/@Dedrknex/hijacking-the-pipeline-mastering-http-desync-exploits-532faf98dbbe?source=rss------bug_bounty-5)

How to Chain Bugs Like a Pro (From P5 to P1)
https://medium.com/@viratavi1223/how-to-chain-bugs-like-a-pro-from-p5-to-p1-0cddd902c8e3?source=rss------bug_bounty-5

By Viraat MishraContinue reading on Medium » (https://medium.com/@viratavi1223/how-to-chain-bugs-like-a-pro-from-p5-to-p1-0cddd902c8e3?source=rss------bug_bounty-5)

The Vulnerabilities You Walk Past
https://medium.com/@anupamsharma0326/the-vulnerabilities-you-walk-past-3106064fcd0c?source=rss------bug_bounty-5

🕵️‍♂️ The Bugs You’re Missing: Lessons from Kapeka0’s “Hidden in Plain Sight” DiscoveryContinue reading on Medium » (https://medium.com/@anupamsharma0326/the-vulnerabilities-you-walk-past-3106064fcd0c?source=rss------bug_bounty-5)

Host Header Magic: Unlocking Hidden Portals by Just Changing ONE Field!

By ZoningxtrContinue reading on Medium »
Read more...

IoT Security - Bluetooth
https://www.reddit.com/r/Pentesting/comments/1moz2oa/iot_security_bluetooth/

<!-- SC_OFF -->Hi folks! What HW tools are you using for Bluetooth Classic and BTL - "Bluetooth Low Energy" when you are performing pentests for IoT devices?
Does anyone can recommend some Bluetooth fuzzing tools as well? Tnx for your answers! BR <!-- SC_ON --> submitted by /u/Expensive-One-939 (https://www.reddit.com/user/Expensive-One-939)
[link] (https://www.reddit.com/r/Pentesting/comments/1moz2oa/iot_security_bluetooth/) [comments] (https://www.reddit.com/r/Pentesting/comments/1moz2oa/iot_security_bluetooth/)

I Turned One Recon Trick Into $3,350

Here’s How I Found a Critical Bug Others MissedContinue reading on Medium »
Read more...

[Video] Exploiting ADCS ESC1–ESC3 with Certify 2.0 – The Weekly Purple Team
https://www.reddit.com/r/redteamsec/comments/1mp4jn4/video_exploiting_adcs_esc1esc3_with_certify_20/

<!-- SC_OFF -->Just released the latest episode of The Weekly Purple Team, and this week we’re looking at how misconfigured Active Directory Certificate Services (ADCS) can be abused for privilege escalation. Using Certify 2.0, we walk through ESC1, ESC2, and ESC3 escalation paths: How each ESC technique works Live exploitation demos Blue team detection & mitigation tips If you work in offensive security or defensive operations, you’ve probably seen ADCS mentioned more in recent years — but many environments are still vulnerable because these escalation paths are under-tested and under-detected.
#cybersecurity #ADCS #privilegeescalation #windowssecurity #redteam #blueteam #purpleteam <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/Fg8akdlap58) [comments] (https://www.reddit.com/r/redteamsec/comments/1mp4jn4/video_exploiting_adcs_esc1esc3_with_certify_20/)

How I Found a Horizontal Privilege Escalation Vulnerability — From Recon to Exploit

Hi Researchers this is my 4rd Blog.Continue reading on InfoSec Write-ups »
Read more...

Catching the users session

OverviewContinue reading on Medium »
Read more...

“Day 10: Defending the Digital Gateway — A White Hat’s Exploration of Chrome’s Security…

How Ethical Research Uncovers Critical Browser Vulnerabilities Before Attackers DoContinue reading on InfoSec Write-ups »
Read more...

How I get $ 1,000 and You Can Get it using Rate Limit on OTP

🚨 API Verification Code Brute Force VulnerabilityContinue reading on Medium »
Read more...

Host Header Magic: Unlocking Hidden Portals by Just Changing ONE Field!
https://medium.com/@zoningxtr/host-header-magic-unlocking-hidden-portals-by-just-changing-one-field-4b762e167a74?source=rss------bug_bounty-5

By ZoningxtrContinue reading on Medium » (https://medium.com/@zoningxtr/host-header-magic-unlocking-hidden-portals-by-just-changing-one-field-4b762e167a74?source=rss------bug_bounty-5)

I Turned One Recon Trick Into $3,350
https://medium.com/@ibtissamhammadi1/i-turned-one-recon-trick-into-3-350-07ce80e7e8df?source=rss------bug_bounty-5

Here’s How I Found a Critical Bug Others MissedContinue reading on Medium » (https://medium.com/@ibtissamhammadi1/i-turned-one-recon-trick-into-3-350-07ce80e7e8df?source=rss------bug_bounty-5)