Broken session control leads to access the admin panel even after revoking the access!! — #ZOHO

Hey Guy’sContinue reading on Medium »
Read more...

Euler запускає програму ImmuneFi Bug Bounty на суму 1 мільйон доларів!

Програма ImmuneFi Bug Bounty має на меті посилити безпеку Euler, одночасно посилюючи співпрацю з більшою екосистемою DeFi в рамках нашого…Continue reading on Medium »
Read more...

Broken session control leads to access the admin panel even after revoking the access!! — #ZOHO
https://naveenroy008.medium.com/broken-session-control-leads-to-access-the-admin-panel-even-after-revoking-the-access-zoho-db219b19d2dd?source=rss------bug_bounty-5

Hey Guy’sContinue reading on Medium » (https://naveenroy008.medium.com/broken-session-control-leads-to-access-the-admin-panel-even-after-revoking-the-access-zoho-db219b19d2dd?source=rss------bug_bounty-5)

Euler запускає програму ImmuneFi Bug Bounty на суму 1 мільйон доларів!
https://medium.com/@veralaveraaa/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D1%94-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D1%83-immunefi-bug-bounty-%D0%BD%D0%B0-%D1%81%D1%83%D0%BC%D1%83-1-%D0%BC%D1%96%D0%BB%D1%8C%D0%B9%D0%BE%D0%BD-%D0%B4%D0%BE%D0%BB%D0%B0%D1%80%D1%96%D0%B2-303d291facee?source=rss------bug_bounty-5

Програма ImmuneFi Bug Bounty має на меті посилити безпеку Euler, одночасно посилюючи співпрацю з більшою екосистемою DeFi в рамках нашого…Continue reading on Medium » (https://medium.com/@veralaveraaa/euler-%D0%B7%D0%B0%D0%BF%D1%83%D1%81%D0%BA%D0%B0%D1%94-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D1%83-immunefi-bug-bounty-%D0%BD%D0%B0-%D1%81%D1%83%D0%BC%D1%83-1-%D0%BC%D1%96%D0%BB%D1%8C%D0%B9%D0%BE%D0%BD-%D0%B4%D0%BE%D0%BB%D0%B0%D1%80%D1%96%D0%B2-303d291facee?source=rss------bug_bounty-5)

Dark Reading: Attacks/Breaches
Building a Cybersecurity Mesh Architecture in the Real World

Like zero trust, the cybersecurity mesh re-envisions the perimeter at the identity layer and centers upon unifying disparate security tools into a single, interoperable ecosystem.

Tarrask malware uses scheduled tasks for defense evasion
https://www.reddit.com/r/redteamsec/comments/u24xog/tarrask_malware_uses_scheduled_tasks_for_defense/

submitted by /u/SCI_Rusher (https://www.reddit.com/user/SCI_Rusher)
[link] (https://aka.ms/TarraskMalwareDART) [comments] (https://www.reddit.com/r/redteamsec/comments/u24xog/tarrask_malware_uses_scheduled_tasks_for_defense/)

Kali Linux Tutorials
Nivistealer : Steal Victim Images Exact Location Device Info And Much More

Nivistealer is a tool to Steal Victim Images Exact Location Device Info And Much More.

Features

* Steal Victim Ip
* Steal Device Info
* Steal Network and Battery Info
* Uses Device Gps to steal exact location
* Steal pic from front camera
* Steal text from victim clipboard (added recently)
* Send logs to discord also save them locally in a txt file
* Works on android, windows,linux,mac os
* Uses iframe to load live website to make phishing attack more reliable

How to use?

Method 0

* Click the above button or click here to run on repl.it
* Login/Signup on repl.it
* After it clones the repo edit this line with your repl url
* Now click Run

Method 1

* Clone or Download this repo
* Create a account on any webhosting site that provide ssl . I suggest a free webhosting site called 000webhost.com
* Now upload index.html,sunni.php,post.phpon your webhosting site
* Now open index.html and replace this with your discord webhook url
* Boom !!! . Now send the phishing link to your victim . Logs will be send to your discord webhook and also saved to sensitiveinfo.txtfile

Method 2

* Clone the repo and navigate to python_flaskdirectory
* open your terminal and type pip3 install coloramapip3 install flask
* Now edit this line with your url
* Now type python nivistealer.pyBoom !!!
* Images and log file will be saved locally on your directory

Donate

* BTC

bc1q37nqagapyt7nnu38p4pqu4hq2xgmumwklzn24l

* ETH

0xF3eBc9bA1bCD30C3efbAd298A73663691F4DB803
Download

Deep Web
Dread down for anyone else?

Ive tried both dark.fail and tor.taxi and sm getting the same error screen each time. Havent these sites updated their links to V3 yet? I would think so. I dont know any other safeish clearnet sites that are reputable for links. I tried other links like nitter and got in just fine. Is this just a dread thing?

submitted by /u/findingmewanahelp909
[link] [comments]

Hacking on Medium
Lab: Reflected XSS into HTML context with all tags blocked except custom ones — Portswigger Lab

https://cdn-images-1.medium.com/max/918/1*57xjsfavhFFN6qPSZ2WHQA.png
Portswigger XSS lab

Continue reading on Medium »

Hacking on Medium
The Full Roadmap to become an Ethical Hackers

https://cdn-images-1.medium.com/max/925/1*ImVaRoeVvMQ40sy3D_qkEA.jpeg
Who is an Ethical Hacker ?

Continue reading on Medium »

Compromise domain with NoPac exploit

During the last pentesting in client infra, we compromised a domain with CVE-2021–42287/CVE-2021–42278(noPac) exploits.Continue reading on Medium »
Read more...

Compromise domain with NoPac exploit
https://medium.com/@5L1V3R/compromise-domain-with-nopac-exploit-f759b670fab1?source=rss------bug_bounty-5

During the last pentesting in client infra, we compromised a domain with CVE-2021–42287/CVE-2021–42278(noPac) exploits.Continue reading on Medium » (https://medium.com/@5L1V3R/compromise-domain-with-nopac-exploit-f759b670fab1?source=rss------bug_bounty-5)