AI is no longer a side feature in modern businesses. By the end of this decade, it will be embedded into every critical workflow — from…Continue reading on Medium » (https://medium.com/@Cyber-AppSec/why-ai-driven-vibe-hacking-demands-a-new-devsecops-mindset-790c0383ca38?source=rss------bug_bounty-5)

How 4 Months of Sleepless Nights Led Me to My First NASA Letter of Recognition

by Ninad GowdaContinue reading on Medium »
Read more...

Don’t Just Patch; Predict: How I Used Dark Web Chatter to Find a Vulnerability Before It Was…

Free Link 🎈Continue reading on InfoSec Write-ups »
Read more...

From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis

In the world of cybersecurity, bug bounty programs stand as a crucial bridge between organizations and security researchers. These programs incentivize ethical hackers to identify and report vulnerabilities, ultimately making the digital world safer. I’m excited to share my recent experience participating in the HackerOne bug bounty program and uncovering not one, but two Cross-Site Scripting (XSS) vulnerabilities on Acronis platforms.Report 1: XSS in Acronis Login Callback URL My first discovery centered around the login callback URL for Acronis, specifically https://learn.acronis.com/portal/. During the login process, the redirectUrl parameter, designed to redirect users back to their intended destination, was not properly secured. This oversight paved the way for a classic XSS attack. Simply crafting a malicious URL and enticing a user to click it was enough to trigger the vulnerability. For example, a URL like this could be used: https://learn.acronis.com/portal/?redirectUrl=javascript:alert(document.domain) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2611305 For This I was rewarded $100 for this: My AcronisReport 2: Double Parameter Trouble! During further testing on the Acronis learn platform, I decided to brute-force variations of the redirectUrl parameter. This led to the discovery of a second, similar parameter: redirect_url. Unfortunately, this parameter was also vulnerable to the same XSS flaw. Vulnerability: XSS (on both redirecturl and redirecturl) Here is my original disclosure report URL if you want it: https://hackerone.com/reports/2653342ConclusionThese three XSS findings emphasize secure coding, especially with user inputs and redirects. The discovery of the redirect_Url parameter through brute-forcing shows how important it is to go beyond basic testing and explore parameter variations. Acronis' quick response demonstrates their security commitment. Bug bounty programs are vital for collaborative security improvement and uncovering these kinds of nuanced vulnerabilities. Stay tuned for more cybersecurity insights! From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.
Read more...

You’re Fuzzing All Wrong: FFUF & Virtual Host Fuzzing

📖FREE LINK HERE . A hands-on story of how FFUF virtual host fuzzing exposed hidden infrastructure, internal APIs, and four flags.Continue reading on InfoSec Write-ups »
Read more...

Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game
https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5

Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…Continue reading on Medium » (https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5)

Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game

Did you know most security breaches start with something as “boring” as an overlooked subdomain? In fact, some of the biggest pentest wins…Continue reading on Medium »
Read more...

One of our clients is preparing for SOC2 and looking for a pen tester.
https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/

<!-- SC_OFF -->Deliverables Comprehensive penetration test report with executive summary Detailed findings with CVSS scores and exploitation proof-of-concepts Prioritized remediation recommendations Retest report after fixes are implemented <!-- SC_ON --> submitted by /u/siddas92 (https://www.reddit.com/user/siddas92)
[link] (https://www.flexduty.com/jobs/06c7b00f-88db-480d-ba87-0a6f3f7f93dd) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppnr8c/one_of_our_clients_is_preparing_for_soc2_and/)

Pentesting the new way
https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/

<!-- SC_OFF -->Interested in hearing from people using AI agents (custom or XBOW/Vulnetic) about how y'all are actually going about designing systems to pentest environments. There's always the good old way of doing it using playbooks/manually but I'd love to do this the fancy new way in our environment and I'm looking to maximize the amount I can find/exploit. As pros, what works best for you? <!-- SC_ON --> submitted by /u/blavelmumplings (https://www.reddit.com/user/blavelmumplings)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppos13/pentesting_the_new_way/)

Starting A Pentesting Journey
https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/

<!-- SC_OFF -->I am starting a out with pentesting. I have a little knowledge from youTube and and a little personal readings. i tried my first website today but was locked out completely lol. Any help and advice on where to get more resources to study with.. <!-- SC_ON --> submitted by /u/Wooden_Assist2893 (https://www.reddit.com/user/Wooden_Assist2893)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppu5w2/starting_a_pentesting_journey/)

PNPT on sale.
https://www.reddit.com/r/Pentesting/comments/1ppvsus/pnpt_on_sale/

<!-- SC_OFF -->Killer price for a good quality cert, praised by many and the next one im tackling. <!-- SC_ON --> submitted by /u/Minge_Ninja420 (https://www.reddit.com/user/Minge_Ninja420)
[link] (https://i.redd.it/40zn2v4etz7g1.jpeg) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppvsus/pnpt_on_sale/)

Unpopular opinion: Gemini is actually good at pentesting
https://www.reddit.com/r/Pentesting/comments/1ppxbyx/unpopular_opinion_gemini_is_actually_good_at/

<!-- SC_OFF -->I am a junior pentester, I've worked at the cybersecurity field for couple of years doing all sorts of things, but actually pentesting for 3 months. For the past couple of months I've used ChatGPT, Though something was off, besides always telling me "I can't help you with that... bla bla", He just didn't help at all, only making things more confusing. I switched to Gemini about a month ago, and it’s been a total game-changer. It’s helped me spot bugs I honestly would’ve walked right past. It’s become a huge part of my workflow, not just for generating solid payloads on the fly (Yes I do tempt to sometimes take the easy way and copy paste payloads), but for actually breaking down new technologies I haven't seen before. It rarely hits me with those 'I can’t help' blocks, so I can actually focus on the work instead of fighting the AI. I feel it has become a partner of mine while researching. That's it, just wanted to share my thoughts. <!-- SC_ON --> submitted by /u/AdFlashy6158 (https://www.reddit.com/user/AdFlashy6158)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppxbyx/unpopular_opinion_gemini_is_actually_good_at/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppxbyx/unpopular_opinion_gemini_is_actually_good_at/)

Switching career (question)
https://www.reddit.com/r/Pentesting/comments/1ppzcp4/switching_career_question/

<!-- SC_OFF -->I have prior experience in sales, psychology, marketing, copywriting... You name it. The good old corporate life. Basically legally scamming people already to some moral extent. I don't have a CS degree but know my way around coding and terminals since my dad put linux on everything in our house since I was 11, only god knows why. Anyway, thanks dad Is there a way to get into pentesting, focusing on social engineering? Or it's almost impossible for someone like me (outside the CS enviroment) to get into pentesting? I've been studying the basics of networking and protocols for the past month or two. Social engineering seems very important to me. I wonder if companies are into that, or they just look for pure CS skills. Sorry if this is an obvious question, curious to see what actual pentesters think. <!-- SC_ON --> submitted by /u/Pyrotheman-e (https://www.reddit.com/user/Pyrotheman-e)
[link] (https://www.reddit.com/r/Pentesting/comments/1ppzcp4/switching_career_question/) [comments] (https://www.reddit.com/r/Pentesting/comments/1ppzcp4/switching_career_question/)

Buried in JavaScript: How One Comment Led Me to a Production API Key

Free Link 🎈Continue reading on InfoSec Write-ups »
Read more...

One “Harmless” Parameter, Full Account Takeover — My Favorite Bug Bounty Find

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal…

There’s a specific kind of vulnerability that feels almost nostalgic. Something from the early days of PHP. Something every pentester…Continue reading on Medium »
Read more...

The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story

Some vulnerabilities feel small at first glance — almost too simple to matter.Continue reading on Medium »
Read more...