OAUTH Misconfiguration leads to Full Account Takeover
https://medium.com/@aditya043k/oauth-misconfiguration-leads-to-full-account-takeover-d93c0d0fb66c?source=rss------bug_bounty-5

Hello, you amazing Hackers!! My name is Aditya Singh a Security Researcher from India. in today’s blog, we are going to see OAUTH…Continue reading on Medium » (https://medium.com/@aditya043k/oauth-misconfiguration-leads-to-full-account-takeover-d93c0d0fb66c?source=rss------bug_bounty-5)

Hacking on Medium
start hacking carrier part 3

today i ll share a list of bug bounty writ up list and bug bounty checklist that i follow…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Stored XSS To Cookie Exfiltration

https://cdn-images-1.medium.com/max/1024/1*XwT6WPMB4hndkopcYwOIbA.png
Today I will be explaining an XSS (“Cross Site Scripting”) vulnerability I found in a private bug bounty program that allowed me to…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Jak używać Raspberry Pi do hakowania? Jak hakować za pomocą drona?

W internecie jest wiele płatnych kursów dotyczących tych tematów, po to by można było sobie zarobić “na efekcie wow!”. Da się to sprytnie…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
Android WebView Hacking — Enable WebView Debugging

https://cdn-images-1.medium.com/max/1329/1*euIkq3BPdn-P8VyuIYMavA.jpeg
Learn how to enable WebView debugging for hacking android applications.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
OPEN SOURCE INTELLIGENCE WITH BLACKBIRD

https://cdn-images-1.medium.com/max/1600/0*84Cjs9Ic2Wds4eay.png
Information provided in this article is to assist users in scanning their own networks and systems, or networks and systems for which they…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
TryHackMe: Linux Fundamentals Part 1 Write-Up

https://cdn-images-1.medium.com/max/1000/0*Ls902Vod1ppceFpP
Before looking at the answers, I recommend trying to answer the questions first.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

Hacking on Medium
WTH is a DAO? And Why DAO Security Matters

https://cdn-images-1.medium.com/max/2062/1*qjoYg0D4wztFFmGwLlVNYA.png
On June 28, we hosted @Infinitesn4ke in our Web3 Security Podcast to talk about DAO Security.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

hacking: security in practice
ffuf command not working

I’’ve been trying to run the command ffuf -u website.com/FUZZ -w ./ids.txt

But it only returns 1 error occured * Either -w or - -input-cmd flag is required. I’ve put -w in my command though. What should I do

submitted by /u/wahedstrijder
[link] [comments]

hacking: security in practice
ffuf can’t find txt file

I’ve been trying to run the command ffuf -u https://website.com/FUZZ -w code.txt and ffuf -u https://website.com/FUZZ -w ./code It says 1 errors occured. *stat code.txt: no such file or directory

The code.txt file is located on the D drive, I tried moving it to C drive too. How do I get ffuf to find the file?

submitted by /u/wahedstrijder
[link] [comments]

hacking: security in practice
stealing logins with cookies

Hello black hoodie wearers of Reddit,

Today I had a interesting discussion with a colleague of mine. We thought about how login data is stored on the internet. To my knowledge a website stores login data, e.g. when I login into a forum and store the login so I am already logged in when I visit the site next time, in the form of cookies. Now, I that’s true, what would happen if I took the cookie from one computer, copied it to a usb stick and copied it to the right place on another computer? How is it prevented that someone takes the cookies and logs in with them?

submitted by /u/Schievel1
[link] [comments]

hacking: security in practice
ffuf txt file defined, but not found in headers, method, URL or POST data

The command ffuf -u https://codingo.com/FUZZ/ -w D:/code.txt gives the following error I wrote in the title. (Keyword /code.txt defined, but not in headers, method, URL or POST data. What can I do to fix it?

submitted by /u/wahedstrijder
[link] [comments]