Hey there!😁Continue reading on Medium » (https://medium.com/@iski/the-dark-web-data-goldmine-how-i-found-my-companys-leaked-credentials-before-the-bad-guys-did-4518890c8fa6?source=rss------bug_bounty-5)

EDR Update: Entry Point & Section Flags (Exec/Write) Detection Added
https://www.reddit.com/r/redteamsec/comments/1pgkjvt/edr_update_entry_point_section_flags_execwrite/

<!-- SC_OFF -->Added PE section parsing to my kernel-mode EDR.
It inspects where the Entry Point lands and verifies section flags — executable, writable, or both. Useful for catching loaders that jump outside .text. <!-- SC_ON --> submitted by /u/amberchalia (https://www.reddit.com/user/amberchalia)
[link] (https://www.youtube.com/watch?v=nfailJc1nzE) [comments] (https://www.reddit.com/r/redteamsec/comments/1pgkjvt/edr_update_entry_point_section_flags_execwrite/)

CLR-Unhook
https://www.reddit.com/r/redteamsec/comments/1pgotxs/clrunhook/

<!-- SC_OFF -->Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory .NET assembly loads. This tool unhooks that function. <!-- SC_ON --> submitted by /u/One_Calligrapher6903 (https://www.reddit.com/user/One_Calligrapher6903)
[link] (https://github.com/hwbp/CLR-Unhook) [comments] (https://www.reddit.com/r/redteamsec/comments/1pgotxs/clrunhook/)

Ghost in the WAF: Building “WAF-Whisper” — An Adaptive Evasion Engine

“Engineering an Intelligent Python Framework to Defeat Modern Firewalls”Continue reading on System Weakness »
Read more...

Ghost in the WAF: Building “WAF-Whisper” — An Adaptive Evasion Engine
https://systemweakness.com/ghost-in-the-waf-building-waf-whisper-an-adaptive-evasion-engine-54366af7e99a?source=rss------bug_bounty-5

“Engineering an Intelligent Python Framework to Defeat Modern Firewalls”Continue reading on System Weakness » (https://systemweakness.com/ghost-in-the-waf-building-waf-whisper-an-adaptive-evasion-engine-54366af7e99a?source=rss------bug_bounty-5)

How I Discovered a Price Manipulation Bug While Buying a Simple Product
https://xamiron.medium.com/how-i-discovered-a-price-manipulation-bug-while-buying-a-simple-product-d2584addbc74?source=rss------bug_bounty-5

A few days ago, I was trying to purchase a product from a website. Everything looked normal during checkout, but something caught my…Continue reading on Medium » (https://xamiron.medium.com/how-i-discovered-a-price-manipulation-bug-while-buying-a-simple-product-d2584addbc74?source=rss------bug_bounty-5)

How I Discovered a Price Manipulation Bug While Buying a Simple Product

A few days ago, I was trying to purchase a product from a website. Everything looked normal during checkout, but something caught my…Continue reading on Medium »
Read more...

IDOR & Parameter Tampering Vulnerability — How a Simple URL Change Exposed Hidden Content
https://xamiron.medium.com/idor-parameter-tampering-vulnerability-how-a-simple-url-change-exposed-hidden-content-c8ce26e512ca?source=rss------bug_bounty-5

A few days ago, while testing a web platform of a company (let’s call it example.com), I discovered a classic yet dangerous vulnerability…Continue reading on Medium » (https://xamiron.medium.com/idor-parameter-tampering-vulnerability-how-a-simple-url-change-exposed-hidden-content-c8ce26e512ca?source=rss------bug_bounty-5)

IDOR & Parameter Tampering Vulnerability — How a Simple URL Change Exposed Hidden Content

A few days ago, while testing a web platform of a company (let’s call it example.com), I discovered a classic yet dangerous vulnerability…Continue reading on Medium »
Read more...

Internal vs External Pentest: 12 Tools Clients Don’t Know Exist (and How Pros Use Them)

Ever sat across from a client, nodding as they ask about “just running Nessus or nmap” for their pentest? Here’s a stat: 80% of successful…Continue reading on Medium »
Read more...

CETP vs ODPC VS MALDEV ACADEMY
https://www.reddit.com/r/Pentesting/comments/1pgpj57/cetp_vs_odpc_vs_maldev_academy/

<!-- SC_OFF -->hi i wanted to ask which one you think is the "best" for defense evasion? <!-- SC_ON --> submitted by /u/General_Roof9555 (https://www.reddit.com/user/General_Roof9555)
[link] (https://www.reddit.com/r/Pentesting/comments/1pgpj57/cetp_vs_odpc_vs_maldev_academy/) [comments] (https://www.reddit.com/r/Pentesting/comments/1pgpj57/cetp_vs_odpc_vs_maldev_academy/)

Best AD first Certification
https://www.reddit.com/r/Pentesting/comments/1pgrdvh/best_ad_first_certification/

<!-- SC_OFF -->hi, what is one of the "best" ad cert for beginner / intermediate? I just finished GOAD labs from orange cyberdefense and I do medium / hard ad box on hack the box. I was thiking of doing the CRTP (maybe too hard I dont really know) since it isnt that expensive but what do you think about pnpt or maybe others cert. Which one will really help me secure an intership (17 years old in france) <!-- SC_ON --> submitted by /u/ApprehensiveGolf4989 (https://www.reddit.com/user/ApprehensiveGolf4989)
[link] (https://www.reddit.com/r/Pentesting/comments/1pgrdvh/best_ad_first_certification/) [comments] (https://www.reddit.com/r/Pentesting/comments/1pgrdvh/best_ad_first_certification/)

Internal vs External Pentest: 12 Tools Clients Don’t Know Exist (and How Pros Use Them)
https://medium.com/@verylazytech/internal-vs-external-pentest-12-tools-clients-dont-know-exist-and-how-pros-use-them-bab73f2b23a6?source=rss------bug_bounty-5

Ever sat across from a client, nodding as they ask about “just running Nessus or nmap” for their pentest? Here’s a stat: 80% of successful…Continue reading on Medium » (https://medium.com/@verylazytech/internal-vs-external-pentest-12-tools-clients-dont-know-exist-and-how-pros-use-them-bab73f2b23a6?source=rss------bug_bounty-5)

InSpectre
https://medium.com/@cyber_comics/inspectre-796902843430?source=rss------bug_bounty-5

How I Built a One‑Click Bookmarklet Tool to Spot Input Fields & ErrorsContinue reading on Medium » (https://medium.com/@cyber_comics/inspectre-796902843430?source=rss------bug_bounty-5)

InSpectre

How I Built a One‑Click Bookmarklet Tool to Spot Input Fields & ErrorsContinue reading on Medium »
Read more...

How I Earn 938$ Online In One Week Via Android

Hello this is my story of my first week of earning through online via only my Android.Continue reading on Medium »
Read more...