Directory Bruteforce
https://medium.com/@badhrinathan/directory-bruteforce-cd559f7b8bd1?source=rss------bug_bounty-5

This attack is mostly used to find hidden directories on a web serverContinue reading on Medium » (https://medium.com/@badhrinathan/directory-bruteforce-cd559f7b8bd1?source=rss------bug_bounty-5)

Misconfigured Social Login Leads to Permanent account access
https://medium.com/@thehemdeep/misconfigured-social-login-leads-to-permanent-account-access-41a907d6bef5?source=rss------bug_bounty-5

Hello Hunters, This article is about one of my finding in which an user can access the account which is not belong to him via social login…Continue reading on Medium » (https://medium.com/@thehemdeep/misconfigured-social-login-leads-to-permanent-account-access-41a907d6bef5?source=rss------bug_bounty-5)

Hacking on Medium
La protezione dietro al Green Pass

Di recente un lettore mi ha fatto alcune domande tecniche sul mio progetto di ricerca sul Green Pass, vista la complessità dell’argomento…

Continue reading on Medium »

Hacking on Medium
Los errores de escucha en los chips de MediaTek afectan al 37% de todos los teléfonos inteligentes…

https://cdn-images-1.medium.com/max/1449/0*Sltv7sRWxeLe5_lD
PUBLICADO EN 24 NOVIEMBRE, 2021POR EHACKING

Continue reading on Medium »

Hacking on Medium
Introduction To Bash For System Administration and Bug Bounty Hunting

https://cdn-images-1.medium.com/max/800/0*sXJwYCOxOy9doASh
Suggested Entry-Point/Pre-Requisite For My Series: Designing, Developing, and Automating a Distributed System That Will Be Geared For Bug…

Continue reading on Medium »

Hacking on Medium
Retos y soluciones de Ciberseguridad para Pymes

[Video] Seminario web

Continue reading on Medium »

Hacking on Medium
IDOR — O QUE É ? E COMO FUNCIONA.

https://cdn-images-1.medium.com/max/960/1*dMbMsfcu5cYnBFQqBk0Nyw.jpeg
O que é IDOR ?

Continue reading on Medium »

hacking: security in practice
Obfuscating Beacon Traffic (Red Team)

I am starting to notice that Cobalt Strike Beacons are getting burned or DOA more and more -- I am wondering if CS is the new mertepreter, or am I just having opsec problems. I'd be interested to know if anyone else has had this issue over the last couple of months - thanks.

submitted by /u/morg43
[link] [comments]

hacking: security in practice
Can i "reverse engineer" such website ?

So there's this website that has an input form and once submitted it returns recent chat history of some social app l, is there a proper way to know what's being done in the background ? All ik so far is it submits the form to same page and figured out the request parameters

submitted by /u/iiMoe
[link] [comments]

hacking: security in practice
Is ethical hacking legal for countering threats?

I’ve recently had people on Snapchat and TikTok tell me that they have my IP and that they would DDoS me. Although it was not my actual IP I have possession of their IPs. If I were to give them their IPs would that be illegal?

submitted by /u/flamestamed
[link] [comments]

Redherd Framework -A Collaborative And Serverless Framework For Orchestrating A Geographically Distributed Group Of Assets
http://www.kitploit.com/2021/11/redherd-framework-collaborative-and.html