When automating wayback machine and ffuf is not the answer, or manual analysis ftw

Wayback machine is an awesome resource for a quick recon. It helps in finding sometimes obscure paths and endpoints specific to that…Continue reading on InfoSec Write-ups »
Read more...

RCE By Code Injection| Perl Reverse Shell

what is php code injection weakness ?Continue reading on Medium »
Read more...

Breaking Application’s Logic to DOS Attack

Hey guys, Recently I had found a bug which was fine enough to deserve this post. So, I thought of writing it up here. I can not disclose…Continue reading on Nerd For Tech »
Read more...

How I Found Multiple XSS in Hidden Legacy Pages

Hello everyone, I am Marx Chryz and I do bug bounty hunting for about a year now. It’s also been two and a half years since I started…Continue reading on Medium »
Read more...

RCE By Code Injection| Perl Reverse Shell
https://4bdoz.medium.com/rce-by-code-injection-perl-reverse-shell-a2e90181b10?source=rss------bug_bounty-5

what is php code injection weakness ?Continue reading on Medium » (https://4bdoz.medium.com/rce-by-code-injection-perl-reverse-shell-a2e90181b10?source=rss------bug_bounty-5)

Breaking Application’s Logic to DOS Attack
https://medium.com/nerd-for-tech/breaking-applications-logic-to-dos-attack-88326cd0dd82?source=rss------bug_bounty-5

Hey guys,
Recently I had found a bug which was fine enough to deserve this post. So, I thought of writing it up here. I can not disclose…Continue reading on Nerd For Tech » (https://medium.com/nerd-for-tech/breaking-applications-logic-to-dos-attack-88326cd0dd82?source=rss------bug_bounty-5)

How I Found Multiple XSS in Hidden Legacy Pages
https://marxchryz.medium.com/how-i-found-multiple-xss-in-hidden-legacy-pages-a57a25d8ff1f?source=rss------bug_bounty-5

Hello everyone, I am Marx Chryz and I do bug bounty hunting for about a year now. It’s also been two and a half years since I started…Continue reading on Medium » (https://marxchryz.medium.com/how-i-found-multiple-xss-in-hidden-legacy-pages-a57a25d8ff1f?source=rss------bug_bounty-5)

chaining bugs from self XSS to account takeover
https://medium.com/@behnam.yazdanpanah/chaining-bugs-from-self-xss-to-account-takeover-82d572136bdf?source=rss------bug_bounty-5

ingredients for P2 account takeover=
self XSS + WAF bypass + csrf bypassContinue reading on Medium » (https://medium.com/@behnam.yazdanpanah/chaining-bugs-from-self-xss-to-account-takeover-82d572136bdf?source=rss------bug_bounty-5)

Hacking Dutch Government For a lousy T-shirt
https://medium.com/pentesternepal/hacking-dutch-government-for-a-lousy-t-shirt-8e1fd1b56deb?source=rss------bug_bounty-5

Good day, everyone! Greetings, As this is my first post on Pentester Nepal, I’d want to thank you for taking the time to read it. Allow me…Continue reading on Pentester Nepal » (https://medium.com/pentesternepal/hacking-dutch-government-for-a-lousy-t-shirt-8e1fd1b56deb?source=rss------bug_bounty-5)

Assless-Chaps - Crack MSCHAPv2 Challenge/Responses Quickly Using A Database Of NT Hashes
http://www.kitploit.com/2021/09/assless-chaps-crack-mschapv2.html