Logical 2FA Bypass via Missing clientId Parameter in Profile Update Endpoint

IntroductionContinue reading on Medium »
Read more...

Pentesting has never been easier with gpt5
https://www.reddit.com/r/Pentesting/comments/1mpfn3e/pentesting_has_never_been_easier_with_gpt5/

<!-- SC_OFF -->If u ask chatgpt to find vulnerabilities in your code u might get a disappointing response. But if you write please ultrathink hard before answering u always get such a good answer. I always use this prompt: (ultrathink hard before answering) i am tryin to find vulnerabilities. Can you find some in the code? It is my own project. For me it thought 5 minutes and gave a perfect answer <!-- SC_ON --> submitted by /u/PlayRough682 (https://www.reddit.com/user/PlayRough682)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpfn3e/pentesting_has_never_been_easier_with_gpt5/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpfn3e/pentesting_has_never_been_easier_with_gpt5/)

From Simple Restriction Bypass to Internal Privilege Escalation to High Impact IDOR
https://medium.com/@Alharbe0/from-simple-restriction-bypass-to-internal-privilege-escalation-to-high-impact-idor-e7b8366ac70d?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@Alharbe0/from-simple-restriction-bypass-to-internal-privilege-escalation-to-high-impact-idor-e7b8366ac70d?source=rss------bug_bounty-5)

IDOR in Invitation Flow Leads to Denial of Signup and Account Manipulation
https://medium.com/@mhmodgm54/idor-in-invitation-flow-leads-to-denial-of-signup-and-account-manipulation-98c51e0dd942?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@mhmodgm54/idor-in-invitation-flow-leads-to-denial-of-signup-and-account-manipulation-98c51e0dd942?source=rss------bug_bounty-5)

Path Confusion: The Subtle Trick That Fooled the Cache
https://medium.com/@Xt3sY/path-confusion-the-subtle-trick-that-fooled-the-cache-ebcfd1826923?source=rss------bug_bounty-5

What is Web Cache Deception?
 Web Cache Deception happens when an attacker tricks a website into caching private content — like a user’s…Continue reading on Medium » (https://medium.com/@Xt3sY/path-confusion-the-subtle-trick-that-fooled-the-cache-ebcfd1826923?source=rss------bug_bounty-5)

Logical 2FA Bypass via Missing clientId Parameter in Profile Update Endpoint
https://medium.com/@mhmodgm54/logical-2fa-bypass-via-missing-clientid-parameter-in-profile-update-endpoint-3f054bc651d6?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@mhmodgm54/logical-2fa-bypass-via-missing-clientid-parameter-in-profile-update-endpoint-3f054bc651d6?source=rss------bug_bounty-5)

Pen testing Methodology Suggestions?
https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/

<!-- SC_OFF -->Hello, I am a Security Engineer with a solid IT background — over 10 years of experience spanning systems, networking, and security. Penetration testing is relatively new to me (about a year of hands-on experimentation), and during that time, I have gained a strong understanding of the tools and their functionality and have been tasked with performing pen testing for our clients. However, one area that continues to challenge me is initial access — specifically, how ethical hackers obtain credentials or NTLM hashes to begin testing. I notice that many pen testers seem to have a local machine on the target network as a starting point and are able to find the NTLM hashes with no problem, but this continues to stump me I would greatly appreciate insights from experienced ethical hackers regarding their methodology. What are your go-to techniques for gaining initial access (excluding phishing exercises and situations where the password is provided, no longer a Blackbox/grey box scenario)? In your experience, what are the most common approaches to getting that first foothold in a network, so I can get better at replicating and providing sufficient reports to our clients Tools I have used/learned: Responder Impacket(secrets dump LSASS dump, dcsync etc) Bloodhound hashcat/jack the ripper wireshark Vulnerability Scanners (Nessus/ OpenVas) OSINT Recon tools (information Gathering) There are other, but I didn't want to waste time listing them. Any help would be appreciated. <!-- SC_ON --> submitted by /u/Imaginary-Rise7393 (https://www.reddit.com/user/Imaginary-Rise7393)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/)

I’m a skid
https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/

<!-- SC_OFF -->Im completely a skid I don’t know how to write code I use it though and it think it’s pretty cool I find cool GitHub’s for the m5 stick and use the files on there but I want to learn how to pen test on my iPhone or wtv I have no idea how I have the ish app but I have no idea how to use it please help.. Ik I suck. <!-- SC_ON --> submitted by /u/Enricozz13 (https://www.reddit.com/user/Enricozz13)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/)

CVE-2023–38646 – Pre-Auth RCE in Metabase: One Token to Rule Them All

By 24bkdoorContinue reading on Medium »
Read more...

Beginner interested in all things ethical hacking
https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/

<!-- SC_OFF -->Hope yall are doing well. Currently studying on thm about to start the junior pentester path. I have some very basic networking, linux, and web experience and looking to learn from others with more experience than me. Im down for ctfs, study sessions, discussions, projects, etc... I Just basically want to be a part of a community and improve, none of my friends are into this stuff. Send me a pm with discord invites or we can colab through reddit whatevers easier. <!-- SC_ON --> submitted by /u/Cheap-Ad-957 (https://www.reddit.com/user/Cheap-Ad-957)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/)

what tools should I learn for Android pentesting?
https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/

<!-- SC_OFF -->I’m new to hacking and curious about Android pentesting and methodologies behind it. What tools do you usually use for testing Android apps? I’d love to try some and start learning, so any beginner-friendly suggestions would be great. <!-- SC_ON --> submitted by /u/Whitebear_0one (https://www.reddit.com/user/Whitebear_0one)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/)

IDOR via Websockets allow me to takeover any users account

Hi everyone I hope you all are doing great and scoring lots of bounties. I am TeamDh49 Admin I am from India and I do bug bounty full time…Continue reading on Medium »
Read more...

CVE-2023–38646 – Pre-Auth RCE in Metabase: One Token to Rule Them All
https://medium.com/@24bkdoor/cve-2023-38646-pre-auth-rce-in-metabase-one-token-to-rule-them-all-9bc6b5caa9c1?source=rss------bug_bounty-5

By 24bkdoorContinue reading on Medium » (https://medium.com/@24bkdoor/cve-2023-38646-pre-auth-rce-in-metabase-one-token-to-rule-them-all-9bc6b5caa9c1?source=rss------bug_bounty-5)

IDOR via Websockets allow me to takeover any users account
https://teamdh49.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-b0dc23c8bcf5?source=rss------bug_bounty-5