IntroductionContinue reading on Medium » (https://medium.com/@Alharbe0/from-simple-restriction-bypass-to-internal-privilege-escalation-to-high-impact-idor-e7b8366ac70d?source=rss------bug_bounty-5)

IDOR in Invitation Flow Leads to Denial of Signup and Account Manipulation
https://medium.com/@mhmodgm54/idor-in-invitation-flow-leads-to-denial-of-signup-and-account-manipulation-98c51e0dd942?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@mhmodgm54/idor-in-invitation-flow-leads-to-denial-of-signup-and-account-manipulation-98c51e0dd942?source=rss------bug_bounty-5)

Path Confusion: The Subtle Trick That Fooled the Cache
https://medium.com/@Xt3sY/path-confusion-the-subtle-trick-that-fooled-the-cache-ebcfd1826923?source=rss------bug_bounty-5

What is Web Cache Deception?
 Web Cache Deception happens when an attacker tricks a website into caching private content — like a user’s…Continue reading on Medium » (https://medium.com/@Xt3sY/path-confusion-the-subtle-trick-that-fooled-the-cache-ebcfd1826923?source=rss------bug_bounty-5)

Logical 2FA Bypass via Missing clientId Parameter in Profile Update Endpoint
https://medium.com/@mhmodgm54/logical-2fa-bypass-via-missing-clientid-parameter-in-profile-update-endpoint-3f054bc651d6?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@mhmodgm54/logical-2fa-bypass-via-missing-clientid-parameter-in-profile-update-endpoint-3f054bc651d6?source=rss------bug_bounty-5)

Pen testing Methodology Suggestions?
https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/

<!-- SC_OFF -->Hello, I am a Security Engineer with a solid IT background — over 10 years of experience spanning systems, networking, and security. Penetration testing is relatively new to me (about a year of hands-on experimentation), and during that time, I have gained a strong understanding of the tools and their functionality and have been tasked with performing pen testing for our clients. However, one area that continues to challenge me is initial access — specifically, how ethical hackers obtain credentials or NTLM hashes to begin testing. I notice that many pen testers seem to have a local machine on the target network as a starting point and are able to find the NTLM hashes with no problem, but this continues to stump me I would greatly appreciate insights from experienced ethical hackers regarding their methodology. What are your go-to techniques for gaining initial access (excluding phishing exercises and situations where the password is provided, no longer a Blackbox/grey box scenario)? In your experience, what are the most common approaches to getting that first foothold in a network, so I can get better at replicating and providing sufficient reports to our clients Tools I have used/learned: Responder Impacket(secrets dump LSASS dump, dcsync etc) Bloodhound hashcat/jack the ripper wireshark Vulnerability Scanners (Nessus/ OpenVas) OSINT Recon tools (information Gathering) There are other, but I didn't want to waste time listing them. Any help would be appreciated. <!-- SC_ON --> submitted by /u/Imaginary-Rise7393 (https://www.reddit.com/user/Imaginary-Rise7393)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpjzu5/pen_testing_methodology_suggestions/)

I’m a skid
https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/

<!-- SC_OFF -->Im completely a skid I don’t know how to write code I use it though and it think it’s pretty cool I find cool GitHub’s for the m5 stick and use the files on there but I want to learn how to pen test on my iPhone or wtv I have no idea how I have the ish app but I have no idea how to use it please help.. Ik I suck. <!-- SC_ON --> submitted by /u/Enricozz13 (https://www.reddit.com/user/Enricozz13)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpldy8/im_a_skid/)

CVE-2023–38646 – Pre-Auth RCE in Metabase: One Token to Rule Them All

By 24bkdoorContinue reading on Medium »
Read more...

Beginner interested in all things ethical hacking
https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/

<!-- SC_OFF -->Hope yall are doing well. Currently studying on thm about to start the junior pentester path. I have some very basic networking, linux, and web experience and looking to learn from others with more experience than me. Im down for ctfs, study sessions, discussions, projects, etc... I Just basically want to be a part of a community and improve, none of my friends are into this stuff. Send me a pm with discord invites or we can colab through reddit whatevers easier. <!-- SC_ON --> submitted by /u/Cheap-Ad-957 (https://www.reddit.com/user/Cheap-Ad-957)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpo0a4/beginner_interested_in_all_things_ethical_hacking/)

what tools should I learn for Android pentesting?
https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/

<!-- SC_OFF -->I’m new to hacking and curious about Android pentesting and methodologies behind it. What tools do you usually use for testing Android apps? I’d love to try some and start learning, so any beginner-friendly suggestions would be great. <!-- SC_ON --> submitted by /u/Whitebear_0one (https://www.reddit.com/user/Whitebear_0one)
[link] (https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/1mpovo5/what_tools_should_i_learn_for_android_pentesting/)

IDOR via Websockets allow me to takeover any users account

Hi everyone I hope you all are doing great and scoring lots of bounties. I am TeamDh49 Admin I am from India and I do bug bounty full time…Continue reading on Medium »
Read more...

CVE-2023–38646 – Pre-Auth RCE in Metabase: One Token to Rule Them All
https://medium.com/@24bkdoor/cve-2023-38646-pre-auth-rce-in-metabase-one-token-to-rule-them-all-9bc6b5caa9c1?source=rss------bug_bounty-5

By 24bkdoorContinue reading on Medium » (https://medium.com/@24bkdoor/cve-2023-38646-pre-auth-rce-in-metabase-one-token-to-rule-them-all-9bc6b5caa9c1?source=rss------bug_bounty-5)

IDOR via Websockets allow me to takeover any users account
https://teamdh49.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-b0dc23c8bcf5?source=rss------bug_bounty-5

Hi everyone I hope you all are doing great and scoring lots of bounties. I am TeamDh49 Admin I am from India and I do bug bounty full time…Continue reading on Medium » (https://teamdh49.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-b0dc23c8bcf5?source=rss------bug_bounty-5)

Top 5 Bug Bounty Tips

Top 5 Bug Bounty Tips (With Real-World Examples)Continue reading on Medium »
Read more...

Dorks For Sensitive Information Disclosure Part-3

Look google’s crawlers just got some juicy info……….Continue reading on InfoSec Write-ups »
Read more...