ffuf Tool Explained: Finding Hidden Doors on the Web

When hackers or security testers look at a website, what they see is usually just the front entrance 🚪. But websites often have hidden…Continue reading on Medium »
Read more...

Image XSS on Exif.tools | Hacking exif.tools by image injection by CYBER KALKI
https://medium.com/@krivadna/image-xss-on-exif-tools-hacking-exif-tools-by-image-injection-by-cyber-kalki-63b7d1261a19?source=rss------bug_bounty-5

I uncovered and demonstrated a multi-surface vulnerability on Exif.tools, chaining metadata reflection, open redirect, form upload bypass…Continue reading on Medium » (https://medium.com/@krivadna/image-xss-on-exif-tools-hacking-exif-tools-by-image-injection-by-cyber-kalki-63b7d1261a19?source=rss------bug_bounty-5)

ffuf Tool Explained: Finding Hidden Doors on the Web
https://medium.com/@natarajanck2/ffuf-tool-explained-finding-hidden-doors-on-the-web-37e7dc76e97c?source=rss------bug_bounty-5

When hackers or security testers look at a website, what they see is usually just the front entrance 🚪.
 But websites often have hidden…Continue reading on Medium » (https://medium.com/@natarajanck2/ffuf-tool-explained-finding-hidden-doors-on-the-web-37e7dc76e97c?source=rss------bug_bounty-5)

CVE-2022–26134: The Confluence RCE That Shook Enterprise Security

A Deep Dive into the Critical Vulnerability That Exposed Thousands of OrganizationsContinue reading on Medium »
Read more...

CVE-2022–26134: The Confluence RCE That Shook Enterprise Security
https://medium.com/@VampireXRay/cve-2022-26134-the-confluence-rce-that-shook-enterprise-security-2b58c5385011?source=rss------bug_bounty-5

A Deep Dive into the Critical Vulnerability That Exposed Thousands of OrganizationsContinue reading on Medium » (https://medium.com/@VampireXRay/cve-2022-26134-the-confluence-rce-that-shook-enterprise-security-2b58c5385011?source=rss------bug_bounty-5)

How I Discovered an Information Disclosure Vulnerability in Jira Instance (CVE-2020–14179)

Hi — I’m publishing my first Medium piece, so hello, internet! This isn’t a tale of dramatic exploitation or flashy shell access. It’s a…Continue reading on Medium »
Read more...

Findomain: Essential Tool for Passive Subdomain Enumeration

Discover Findomain, a key tool in bug bounty for quick and passive subdomain recognition.Continue reading on MeetCyber »
Read more...

How I Discovered an Information Disclosure Vulnerability in Jira Instance (CVE-2020–14179)
https://medium.com/@akashutosh659/how-i-discovered-an-information-disclosure-vulnerability-in-jira-instance-cve-2020-14179-644b14386e38?source=rss------bug_bounty-5

Hi — I’m publishing my first Medium piece, so hello, internet! This isn’t a tale of dramatic exploitation or flashy shell access. It’s a…Continue reading on Medium » (https://medium.com/@akashutosh659/how-i-discovered-an-information-disclosure-vulnerability-in-jira-instance-cve-2020-14179-644b14386e38?source=rss------bug_bounty-5)

Findomain: Essential Tool for Passive Subdomain Enumeration
https://medium.com/meetcyber/findomain-essential-tool-for-passive-subdomain-enumeration-2c1e78e71214?source=rss------bug_bounty-5

Discover Findomain, a key tool in bug bounty for quick and passive subdomain recognition.Continue reading on MeetCyber » (https://medium.com/meetcyber/findomain-essential-tool-for-passive-subdomain-enumeration-2c1e78e71214?source=rss------bug_bounty-5)

SpiderLock: Python Web Crawler (BFS/DFS) Built for Pentesters & Recon 🕸️
https://www.reddit.com/r/Pentesting/comments/1nwv210/spiderlock_python_web_crawler_bfsdfs_built_for/

<!-- SC_OFF -->Hey everyone! I'm excited to share SpiderLock, an open-source Python web crawler I built specifically for security reconnaissance and site mapping. It's designed to give pentesters, bug bounty hunters, and security researchers a focused tool for understanding target structure. Key Features: 🔹 Supports both Breadth-First Search (BFS) and Depth-First Search (DFS) crawling strategies 🔹 Respects robots.txt before starting any crawl 🔹 Configurable depth limits for controlled exploration 🔹 Stores results in JSON for easy querying and integration 🔹 SEO Audit module for on-page optimization insights 🔹 SEO Audit module for on-page optimization insights 🔹Quick Crawl Mode for efficient high-level scans Use Cases: Pentesters performing reconnaissance during engagements Security researchers exploring target structures Developers/learners studying how crawlers work The project is fully open-source and available here: 👉 GitHub – SpiderLock (https://github.com/sherlock2215/SpiderLock) Seeking Feedback! 🙏 As I develop this further, I'd really appreciate your thoughts on: Workflow Enhancements: What features would make it more practical for your penetration testing or bug bounty workflows? Integrations: Any suggestions for other tools it should integrate with (e.g., Nmap, Gobuster, or vulnerability parsers)? Data & Visualization: Improvements to the visualization or other data export formats you'd find useful. Looking forward to your thoughts and pull requests! Happy crawling! <!-- SC_ON --> submitted by /u/Latter-Ad-8317 (https://www.reddit.com/user/Latter-Ad-8317)
[link] (https://www.reddit.com/r/Pentesting/comments/1nwv210/spiderlock_python_web_crawler_bfsdfs_built_for/) [comments] (https://www.reddit.com/r/Pentesting/comments/1nwv210/spiderlock_python_web_crawler_bfsdfs_built_for/)

Every offensive security course avl
https://www.reddit.com/r/Pentesting/comments/1nwzidt/every_offensive_security_course_avl/

<!-- SC_OFF -->If anybody wants offensive security course contents which includes pdfs and videos Contact me , i have them . I just want to help the community. <!-- SC_ON --> submitted by /u/Repulsive_Hotel555 (https://www.reddit.com/user/Repulsive_Hotel555)
[link] (https://www.reddit.com/r/Pentesting/comments/1nwzidt/every_offensive_security_course_avl/) [comments] (https://www.reddit.com/r/Pentesting/comments/1nwzidt/every_offensive_security_course_avl/)