Recruit — SSRF → LFI → SQL Injection → Admin Takeover”THM”

Difficulty: Easy/Medium Category: Web Application Pentesting Techniques: SSRF, Local File Inclusion, SQL Injection, Vulnerability ChainingContinue reading on Medium »
Read more...

Support — Cookie Tampering → IDOR → LFI → Command Injection (RCE) “THM”

Difficulty: Medium Category: Web Application Pentesting Techniques: Credential Brute-Forcing, Insecure Cookie Trust, Local File Inclusion…Continue reading on Medium »
Read more...

It Returned 404… But the Data Was Still There

Hello Hacker👋Continue reading on Medium »
Read more...

ndaal_public_auditd
https://kitploit.com/en/tools/gitlab/ndaal_open_source/ndaal_public_auditd

Best-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and compliance auditing.

C2SP
https://kitploit.com/en/tools/github/c2sp/c2sp

Community Cryptography Specification Project

proxy-workbench
https://kitploit.com/en/tools/github/davidvoitenko/proxy-workbench

Collects, checks and ranks public HTTP/SOCKS proxies against your own targets, then serves them via ranked exports, pools, a rotating gateway and a local API.

cowrie v3.1.0
https://kitploit.com/en/posts/cowrie-4115130f3aeb0ede

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Web Cache Deception: Understanding the Attack and How to Prevent It
https://medium.com/@MazenElsayed_/web-cache-deception-understanding-the-attack-and-how-to-prevent-it-f9d617af56d3?source=rss------bug_bounty-5

IntroductionContinue reading on Medium » (https://medium.com/@MazenElsayed_/web-cache-deception-understanding-the-attack-and-how-to-prevent-it-f9d617af56d3?source=rss------bug_bounty-5)

Recruit — SSRF → LFI → SQL Injection → Admin Takeover”THM”
https://medium.com/@ahmed240102345/recruit-ssrf-lfi-sql-injection-admin-takeover-thm-e31a0688b0bc?source=rss------bug_bounty-5

Difficulty: Easy/Medium Category: Web Application Pentesting Techniques: SSRF, Local File Inclusion, SQL Injection, Vulnerability ChainingContinue reading on Medium » (https://medium.com/@ahmed240102345/recruit-ssrf-lfi-sql-injection-admin-takeover-thm-e31a0688b0bc?source=rss------bug_bounty-5)

Support — Cookie Tampering → IDOR → LFI → Command Injection (RCE) “THM”
https://medium.com/@ahmed240102345/support-cookie-tampering-idor-lfi-command-injection-rce-thm-d8bf93bcb5ce?source=rss------bug_bounty-5

Difficulty: Medium Category: Web Application Pentesting Techniques: Credential Brute-Forcing, Insecure Cookie Trust, Local File Inclusion…Continue reading on Medium » (https://medium.com/@ahmed240102345/support-cookie-tampering-idor-lfi-command-injection-rce-thm-d8bf93bcb5ce?source=rss------bug_bounty-5)

It Returned 404… But the Data Was Still There
https://medium.com/@hamdyosama2995/it-returned-404-but-the-data-was-still-there-6e9bf4dd408d?source=rss------bug_bounty-5