2fa Bypass Using Response Manipulation

Hi Folks I am Vaibhav Gaikwad Bug Bounty Hunter from India and i recently found a 2fa bypass using Response Manipulation bug on Bugcrowd…Continue reading on Medium »
Read more...

2fa Bypass Using Response Manipulation
https://vaibhavgaikwad1712.medium.com/2fa-bypass-using-response-manipulation-29d6c2583936?source=rss------bug_bounty-5

Hi Folks I am Vaibhav Gaikwad Bug Bounty Hunter from India and i recently found a 2fa bypass using Response Manipulation bug on Bugcrowd…Continue reading on Medium » (https://vaibhavgaikwad1712.medium.com/2fa-bypass-using-response-manipulation-29d6c2583936?source=rss------bug_bounty-5)

Deep Web
logging in with only the nickname is it possible?

submitted by /u/disisbeyondscience
[link] [comments]

Deep Web
forgot both the password and email, only got the nickname

submitted by /u/disisbeyondscience
[link] [comments]

JavaScript prototype pollution: practice of finding and exploitation

If you follow the reports of researchers who participate in bug bounty programs, you probably know about the category of JavaScript…
Read more...

JavaScript prototype pollution: practice of finding and exploitation
https://infosecwriteups.com/javascript-prototype-pollution-practice-of-finding-and-exploitation-f97284333b2?source=rss------bug_bounty-5

If you follow the reports of researchers who participate in bug bounty programs, you probably know about the category of JavaScript…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/javascript-prototype-pollution-practice-of-finding-and-exploitation-f97284333b2?source=rss------bug_bounty-5)

hacking: security in practice
logging in with only the nickname is it possible?

I forgot both the email and password please help me out

submitted by /u/disisbeyondscience
[link] [comments]

hacking: security in practice
forgot both the password and email, only got the nickname

can you please help me out

submitted by /u/disisbeyondscience
[link] [comments]

hacking: security in practice
Usb device which pretends to be a keyboard, name?

Today at work our security manager showed me this little usb device which pretends to be a keyboard. you can save some scripts on a sd card and it will execute them when you connect it to a pc. I forgot the device's name, can anyone help?

submitted by /u/Defight556
[link] [comments]

hacking: security in practice
Hacking Startup 'Azimuth Security' Unlocked the San Bernardino iPhone

https://external-preview.redd.it/kYFJcfhoGxcT3YMcKb-t0ekRWQ6HLZ5ws_fgkZjXbaA.jpg?width=640&crop=smart&auto=webp&s=1be479b157c2e9e4bb0545ffedfe9a447017ac21 submitted by /u/Alex5899
[link] [comments]

Swissknife - Scriptable VSCode Extension To Generate Or Manipulate Data. Stop Pasting Sensitive Data In Webpag
http://www.kitploit.com/2021/04/swissknife-scriptable-vscode-extension.html

The developers swissknife. Do conversions and generations right out of vs code. Extendable with user scripts Available in the Visual Studio Marketplace (https://marketplace.visualstudio.com/items?itemName=luisfontes19.vscode-swissknife)
Currently available scripts
Base64 decode Base64 encode Binary To Text Bip39 Mnemonic CSV to Markdown Count characters Count words Crypto currency value Date to Timestamp Eliptic Curve Key Pair Generate Password HTML Encode (AlL) Hex decode Hex encode Hex to RGB Identify hash JWT Decode Join lines Lorem Ipsum Markdown to HTML Md5 hash New Swissknife Script (JS) New Swissknife Script (TS) Password strength RGB To Hex RSA Key pair Random String Request to fetch SHA1 hash SHA256 hash SHA512 hash Self Signed Certificate Start Local HTTP Server Start Local HTTPS Server Stop HTTP Server Text To Binary Text to String Timestamp to Date To Camel Case To Lower Case To Morse code To Upper Case UUIDv4 Unicode decode Unicode encode (js format) Unix/Linux Permission To Human Readable Url Decode Url Encode Url Encode (All Characters) Url Shorten Url Unshorten (url expand)
Usage
You can invoke the dedicated command pallete with ctrl+shift+9 for windows (https://www.kitploit.com/search/label/Windows) or cmd+shift+9 for mac (when focusing the editor) The conversions will only use the selected text by default. If no text is selected the entire content of the editor will be used. It supports multi selection and will run the script for each selection individually Macbook Touchbar Support You can also invoke the swissknife extension directly from the macbook's touchbar

Writing Scripts
Swissknife will automatically load all scripts (https://www.kitploit.com/search/label/Scripts) in its user scripting (https://www.kitploit.com/search/label/Scripting) folder and you can find it by executing a command. Open you command pallete and type "Open swissknife users script folder". Or just start typing it as it will eventually be suggested. This is the folder where you can create your custom scripts. To start a new script you can also use a command provided by the extension. Open swissknife picker and type "New swissknife script".
Script Reloading
Scripts are loaded into the extension when initializing VS Code, so when you create a custom script you'll need to reload the scripts. To make it easier for development, the extension has a command "Reload Swissknife Scripts" that you can call from the VS Code command pallette (do not confuse with the swissknife's script launcher). Remember that everytime you do a change in a script in the user script folder you need to reload scripts.
Starting Template
You can chose the TS or JS version according to what you're more comfortable with. TS will be more complex as you need to transpile it to JS. We'll go with Javascript. This is the base structure of the script: 1btc to eur
This is the basic template to create scripts. In this file we created a script called "My Script". You can have as much scripts as you want per file. Its just a way of organization :) As you can see at the end, the structure for a script consists on 3 properties: title, detail and cb. The first two are self explanatory. cb is the code that will be called when you script runs. And by default swissknife gives you a few methods to help getting started, through the variable 'context'. The method doSomething is just replacing a's with b's
Context
In context you have some nice methods to help you out, and you should use them whenever possible. insertRoutine(cb) - This method will insert the resolved content into the cursor on editor. It will call cb and send context as a parameter. cb is expected to be async informationRoutine(cb) - This method will create a notification with the resolved content. It will call cb and send selected text in editor (all text if no selection) and context as a parameter. cb is expected to be async replaceRoutine(cb) - This method will replace selected text in editor, with the resolved content from cb (if no text selected it replaces all text). It will call cb and send selected text in editor (all text if no selection) and context as a parameter. cb is expected to be async vscode - This variable holds the vscode api (https://code.visualstudio.com/api). modules - This variable is an array of all JS modules inside the script (and lib) folder (https://github.com/luisfontes19/vscode-swissknife/tree/master/src/scripts). You can use them to call methods from the native scripts, to reuse code logic. Ex: context.modules.passwords.generateSecureCharCode()) The use of this methods is optional. If you feel that its easier to just work directly with vscode api you can also do it: Object.defineProperty(exports, "__esModule", { value: true });

exports.doSomething = async (text, context) => {
return new Promise((resolve, reject) => {

resolve(text.replace(/a/g, "b"));

});
}
const scripts = [
{
title: "My Script",
detail: "This script does something",
cb: (context) => context.replaceRoutine(exports.doSomething)
},
]

exports.default = scripts;
More Examples
Object.defineProperty(exports, "__esModule", { value: true });

const scripts = [
{
title: "My Script2",
detail: "This script does something",
cb: (context) => {
console.log(context)
const editor = context.vscode.window.activeTextEditor;
editor.edit((edit) => {
edit.insert(editor.selection.myactive, "Doing stuff")
});
}
},
]

exports.default = scripts; The best place to see examples is to check the native scripts (https://github.com/luisfontes19/vscode-swissknife/tree/master/src/scripts) bundled with the extension.
Future Plans
Create unit tests, specially for the scripts Start doing proper error handlings Create a place for user contributed scripts

Download Vscode-Swissknife (https://github.com/luisfontes19/vscode-swissknife/)

JavaScript prototype pollution: practice of finding and exploitation

If you follow the reports of researchers who participate in bug bounty programs, you probably know about the category of JavaScript…Continue reading on InfoSec Write-ups »
Read more...