How I Found a Zero-Click Flaw by Questioning a “Safe” Rendering Path
https://medium.com/@Rawi1X/how-i-found-a-zero-click-flaw-by-questioning-a-safe-rendering-path-b104c29a3e8e?source=rss------bug_bounty-5
https://medium.com/@Rawi1X/how-i-found-a-zero-click-flaw-by-questioning-a-safe-rendering-path-b104c29a3e8e?source=rss------bug_bounty-5
Most impactful vulnerabilities are not found by scanning tools or exploit templates.
They are found by questioning assumptions.Continue reading on Medium » (https://medium.com/@Rawi1X/how-i-found-a-zero-click-flaw-by-questioning-a-safe-rendering-path-b104c29a3e8e?source=rss------bug_bounty-5)
They are found by questioning assumptions.Continue reading on Medium » (https://medium.com/@Rawi1X/how-i-found-a-zero-click-flaw-by-questioning-a-safe-rendering-path-b104c29a3e8e?source=rss------bug_bounty-5)
Why Most Bug Bounty Findings Come From Thinking, Not Tools
https://medium.com/write-a-catalyst/why-most-bug-bounty-findings-come-from-thinking-not-tools-2899347e6890?source=rss------bug_bounty-5
https://medium.com/write-a-catalyst/why-most-bug-bounty-findings-come-from-thinking-not-tools-2899347e6890?source=rss------bug_bounty-5
A practitioner’s guide to sustainable web security testingContinue reading on Write A Catalyst » (https://medium.com/write-a-catalyst/why-most-bug-bounty-findings-come-from-thinking-not-tools-2899347e6890?source=rss------bug_bounty-5)
Why AI-Driven Vibe Hacking Demands a New DevSecOps Mindset
https://medium.com/@Cyber-AppSec/why-ai-driven-vibe-hacking-demands-a-new-devsecops-mindset-790c0383ca38?source=rss------bug_bounty-5
https://medium.com/@Cyber-AppSec/why-ai-driven-vibe-hacking-demands-a-new-devsecops-mindset-790c0383ca38?source=rss------bug_bounty-5
AI is no longer a side feature in modern businesses. By the end of this decade, it will be embedded into every critical workflow — from…Continue reading on Medium » (https://medium.com/@Cyber-AppSec/why-ai-driven-vibe-hacking-demands-a-new-devsecops-mindset-790c0383ca38?source=rss------bug_bounty-5)
How 4 Months of Sleepless Nights Led Me to My First NASA Letter of Recognition
by Ninad GowdaContinue reading on Medium »
Read more...
by Ninad GowdaContinue reading on Medium »
Read more...
Medium
How 4 Months of Sleepless Nights Led Me to My First NASA Letter of Recognition
by Ninad Gowda
Don’t Just Patch; Predict: How I Used Dark Web Chatter to Find a Vulnerability Before It Was…
Free Link 🎈Continue reading on InfoSec Write-ups »
Read more...
Free Link 🎈Continue reading on InfoSec Write-ups »
Read more...
Medium
Don’t Just Patch; Predict: How I Used Dark Web Chatter to Find a Vulnerability Before It Was Exploited 🔮💻
Free Link 🎈
From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis
In the world of cybersecurity, bug bounty programs stand as a crucial bridge between organizations and security researchers. These programs incentivize ethical hackers to identify and report vulnerabilities, ultimately making the digital world safer. I’m excited to share my recent experience participating in the HackerOne bug bounty program and uncovering not one, but two Cross-Site Scripting (XSS) vulnerabilities on Acronis platforms.Report 1: XSS in Acronis Login Callback URL My first discovery centered around the login callback URL for Acronis, specifically https://learn.acronis.com/portal/. During the login process, the redirectUrl parameter, designed to redirect users back to their intended destination, was not properly secured. This oversight paved the way for a classic XSS attack. Simply crafting a malicious URL and enticing a user to click it was enough to trigger the vulnerability. For example, a URL like this could be used: https://learn.acronis.com/portal/?redirectUrl=javascript:alert(document.domain) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2611305 For This I was rewarded $100 for this: My AcronisReport 2: Double Parameter Trouble! During further testing on the Acronis learn platform, I decided to brute-force variations of the redirectUrl parameter. This led to the discovery of a second, similar parameter: redirect_url. Unfortunately, this parameter was also vulnerable to the same XSS flaw. Vulnerability: XSS (on both redirecturl and redirecturl) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2653342ConclusionThese three XSS findings emphasize secure coding, especially with user inputs and redirects. The discovery of the redirect_Url parameter through brute-forcing shows how important it is to go beyond basic testing and explore parameter variations. Acronis' quick response demonstrates their security commitment. Bug bounty programs are vital for collaborative security improvement and uncovering these kinds of nuanced vulnerabilities. Stay tuned for more cybersecurity insights! From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
In the world of cybersecurity, bug bounty programs stand as a crucial bridge between organizations and security researchers. These programs incentivize ethical hackers to identify and report vulnerabilities, ultimately making the digital world safer. I’m excited to share my recent experience participating in the HackerOne bug bounty program and uncovering not one, but two Cross-Site Scripting (XSS) vulnerabilities on Acronis platforms.Report 1: XSS in Acronis Login Callback URL My first discovery centered around the login callback URL for Acronis, specifically https://learn.acronis.com/portal/. During the login process, the redirectUrl parameter, designed to redirect users back to their intended destination, was not properly secured. This oversight paved the way for a classic XSS attack. Simply crafting a malicious URL and enticing a user to click it was enough to trigger the vulnerability. For example, a URL like this could be used: https://learn.acronis.com/portal/?redirectUrl=javascript:alert(document.domain) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2611305 For This I was rewarded $100 for this: My AcronisReport 2: Double Parameter Trouble! During further testing on the Acronis learn platform, I decided to brute-force variations of the redirectUrl parameter. This led to the discovery of a second, similar parameter: redirect_url. Unfortunately, this parameter was also vulnerable to the same XSS flaw. Vulnerability: XSS (on both redirecturl and redirecturl) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2653342ConclusionThese three XSS findings emphasize secure coding, especially with user inputs and redirects. The discovery of the redirect_Url parameter through brute-forcing shows how important it is to go beyond basic testing and explore parameter variations. Acronis' quick response demonstrates their security commitment. Bug bounty programs are vital for collaborative security improvement and uncovering these kinds of nuanced vulnerabilities. Stay tuned for more cybersecurity insights! From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...
Acronis
Management portal
Advanced all-in-one learning platform for education and research focusing on rapid authoring, interactive & active learning and limitless expansibility. Create exceptional learner experience with practical multimedia blocks, coding exercises, adaptive quizzes…
You’re Fuzzing All Wrong: FFUF & Virtual Host Fuzzing
📖FREE LINK HERE . A hands-on story of how FFUF virtual host fuzzing exposed hidden infrastructure, internal APIs, and four flags.Continue reading on InfoSec Write-ups »
Read more...
📖FREE LINK HERE . A hands-on story of how FFUF virtual host fuzzing exposed hidden infrastructure, internal APIs, and four flags.Continue reading on InfoSec Write-ups »
Read more...
Medium
You’re Fuzzing All Wrong: FFUF & Virtual Host Fuzzing
📖FREE LINK HERE . A hands-on story of how FFUF virtual host fuzzing exposed hidden infrastructure, internal APIs, and four flags.
Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game
https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5
https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5
Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…Continue reading on Medium » (https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5)
Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game
Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…Continue reading on Medium »
Read more...
Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…Continue reading on Medium »
Read more...
Medium
Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game
Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…
One of our clients is preparing for SOC2 and looking for a pen tester.
https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/
<!-- SC_OFF -->Deliverables Comprehensive penetration test report with executive summary Detailed findings with CVSS scores and exploitation proof-of-concepts Prioritized remediation recommendations Retest report after fixes are implemented <!-- SC_ON --> submitted by /u/siddas92 (https://www.reddit.com/user/siddas92)
[link] (https://www.flexduty.com/jobs/06c7b00f-88db-480d-ba87-0a6f3f7f93dd) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/)
https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/
<!-- SC_OFF -->Deliverables Comprehensive penetration test report with executive summary Detailed findings with CVSS scores and exploitation proof-of-concepts Prioritized remediation recommendations Retest report after fixes are implemented <!-- SC_ON --> submitted by /u/siddas92 (https://www.reddit.com/user/siddas92)
[link] (https://www.flexduty.com/jobs/06c7b00f-88db-480d-ba87-0a6f3f7f93dd) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/)
Pentesting the new way
https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/
<!-- SC_OFF -->Interested in hearing from people using AI agents (custom or XBOW/Vulnetic) about how y'all are actually going about designing systems to pentest environments. There's always the good old way of doing it using playbooks/manually but I'd love to do this the fancy new way in our environment and I'm looking to maximize the amount I can find/exploit. As pros, what works best for you? <!-- SC_ON --> submitted by /u/blavelmumplings (https://www.reddit.com/user/blavelmumplings)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/)
https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/
<!-- SC_OFF -->Interested in hearing from people using AI agents (custom or XBOW/Vulnetic) about how y'all are actually going about designing systems to pentest environments. There's always the good old way of doing it using playbooks/manually but I'd love to do this the fancy new way in our environment and I'm looking to maximize the amount I can find/exploit. As pros, what works best for you? <!-- SC_ON --> submitted by /u/blavelmumplings (https://www.reddit.com/user/blavelmumplings)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/)
Starting A Pentesting Journey
https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/
<!-- SC_OFF -->I am starting a out with pentesting. I have a little knowledge from youTube and and a little personal readings. i tried my first website today but was locked out completely lol. Any help and advice on where to get more resources to study with.. <!-- SC_ON --> submitted by /u/Wooden_Assist2893 (https://www.reddit.com/user/Wooden_Assist2893)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/)
https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/
<!-- SC_OFF -->I am starting a out with pentesting. I have a little knowledge from youTube and and a little personal readings. i tried my first website today but was locked out completely lol. Any help and advice on where to get more resources to study with.. <!-- SC_ON --> submitted by /u/Wooden_Assist2893 (https://www.reddit.com/user/Wooden_Assist2893)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/)