Hacking on Medium
Breaking Application’s Logic to DOS Attack

https://cdn-images-1.medium.com/max/600/1*bG0nYMMLc6Y6oLEbJ58rHg.png
Hey guys,
Recently I had found a bug which was fine enough to deserve this post. So, I thought of writing it up here. I can not disclose…

Continue reading on Nerd For Tech »

Hacking on Medium
How to Track Someone’s Location by Sending them over a Link?

https://cdn-images-1.medium.com/max/1000/1*oLiAf7XI9OMQ0KbQe1TxtA.jpeg
Disclaimer: It is a simple tool that is freely available online. It is for educational purposes only. To protect yourself from scammers…

Continue reading on Medium »

Hacking on Medium
Passed OSCP with 100% in 15 hours

https://cdn-images-1.medium.com/max/1033/1*7yUonpltudyIz92gFvBDGw.png
Hi everyone, I am back with OSCP this time. I wanted to share my full journey on how I passed OSCP in the first attempt and was able to…

Continue reading on Medium »

Hacking on Medium
CWE-79

https://cdn-images-1.medium.com/max/640/1*Ut4I_zK5nItYsNcUDR-hWg.jpeg
CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

Continue reading on ShiftLeft Blog »

Hacking on Medium
MetaBUIDL Hakathon how to participate and find a team?

https://cdn-images-1.medium.com/max/600/0*Odq20y9Sq5BNEwB8
We continue to understand the hackathon. In general, I explained what a hackathon and a MetaBUIDL event are in this article, if you are a…

Continue reading on Medium »

chaining bugs from self XSS to account takeover

ingredients for P2 account takeover= self XSS + WAF bypass + csrf bypassContinue reading on Medium »
Read more...

hacking: security in practice
IIRC Intel extends JTAG input to USB; only for FPGAs or consumer CPUs too?

Researching JTAG a while back I remember a patent where Intel had made JTAG accessible over USB. This was a real thing apparently, perhaps it still is.

I'm trying to look further into it but having trouble finding my old source. Anyone know more?

JTAG for those of you who don't know is a debugging protocol on most cicuit boards and chips that lets the user read / write to registers with absolute control (but low frequency).

submitted by /u/Jonathan-Todd
[link] [comments]

hacking: security in practice
Ethical hacker found a bug on my site... reward?

I run a website. Someone just contacted us to let us know that he found a vulnerability on our website (UI redressing) and provided some details about the bug. He is now asking us for a reward.

Our team investigating the bug now. We are open to the idea of providing him with a reward but this is all completely new to us. What are the norms in these situations and what's a fair reward?

submitted by /u/Dangerous-Durian8843
[link] [comments]

hacking: security in practice
Is raspberry pi better than a normal laptop for ethical hacking?

Well I am kinda broke at the moment and I wanna learn hacking. Can I learn and practice everything on a raspberry pi instead of buying a new laptop?

submitted by /u/pra7av
[link] [comments]

Hacking on Medium
Know? How To Use Of Mobile Legends Glitch Generator

The Supreme Court officially denied a solicitation from Texas early termination suppliers to freeze a state law that bars fetus removals…

Continue reading on Medium »

Hacking on Medium
A Conceptual Introduction to Automating Bug Bounties ft. ARPSyndicate, YesWeHack & ScanFactory

https://cdn-images-1.medium.com/max/844/1*9XUM2zHHerS9bEtld4LnyA.png
Exploring the big picture of Bug Bounty Automation with ARPSyndicate featuring Lazada BBP on YesWeHack.

Continue reading on Medium »

A Conceptual Introduction to Automating Bug Bounties ft. ARPSyndicate, YesWeHack & ScanFactory
https://g147.medium.com/a-conceptual-introduction-to-automating-bug-bounties-ft-arpsyndicate-yeswehack-scanfactory-f2468f345d7?source=rss------bug_bounty-5