Exploiting Password Reset Poisoning

for account takeover and max bounty!Continue reading on InfoSec Write-ups »
Read more...

Exploiting Password Reset Poisoning
https://infosecwriteups.com/exploiting-password-reset-poisoning-b748797f0661?source=rss------bug_bounty-5

for account takeover and max bounty!Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/exploiting-password-reset-poisoning-b748797f0661?source=rss------bug_bounty-5)

Hacking on Medium
Exploiting Password Reset Poisoning

https://cdn-images-1.medium.com/max/1280/1*5JA0HKJTmgoym4FL51HVfg.jpeg
for account takeover and max bounty!

Continue reading on InfoSec Write-ups »

Hacking on Medium
Cyber Defenders Phishy Walkthrough

https://cdn-images-1.medium.com/max/1920/1*QVMyxN7w5s39-IivbLdazQ.png
What is the AD1 file? 
AD1 filename suffix is mostly used for Forensic Toolkit FTK Imager Image files. Forensic Toolkit FTK Imager Image…

Continue reading on InfoSec Write-ups »

Hacking on Medium
What is Access Control?

https://cdn-images-1.medium.com/max/1600/0*1jghZ-NBmWWaGFcP
How important is Access Control?Isn’t that the real question?

Continue reading on rootissh »

Analyzing a watering hole campaign using macOS exploits
https://www.reddit.com/r/redteamsec/comments/qswe9s/analyzing_a_watering_hole_campaign_using_macos/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/) [comments] (https://www.reddit.com/r/redteamsec/comments/qswe9s/analyzing_a_watering_hole_campaign_using_macos/)

OTP Bypass via response manipulation
https://medium.com/@thehemdeep/otp-bypass-via-response-manipulation-31a524f968cc?source=rss------bug_bounty-5

Hello Hunters, today I'm going tell about my one of the finding in which I'm able to bypass the OTP page. So let’s begin.Continue reading on Medium » (https://medium.com/@thehemdeep/otp-bypass-via-response-manipulation-31a524f968cc?source=rss------bug_bounty-5)

Guide Point Security CTF — Get Hexy (OCT 2021)

In the Misc Category of Guide Point CTF which was held on 12 October to 18 October 2021, there was a challenge called “Get Hexy”. let’s…
Read more...

Stealing Chat session ID with CORS and execute CSRF attack

Hello Everyone, Hope you all are healthy and safe. Today’s writeup is my recent find on Bugcrowd private program. This writeup explains…
Read more...

HOW I HACKED BILLION ANDROID USERS SOCIAL AND 3rd PARTY ACCOUNT | A STORY ABOUT 5000$ BUG

In this blog, I will explain the process of how I discovered a vulnerability that triggers the mobile application which in turn allows me…
Read more...

How I was able to send SMS from target and get their OTP.

Hey fellow hackers and bug hunters,
Read more...

Command Injection — All in one Blog

Everything about command injection
Read more...

Bypassed the subscription and got the certification

Hey fellow hackers and bug hunter’s,
Read more...

TryHackMe — Jeff

Hi guys, I am Piyush Achärya, and today in this write-up I am going to show you how to complete the Jeff challenge. Let’s get started.
Read more...