While testing a website I found that the verify email endpoint was leaking the authorization tokens of any verified users by just passing…Continue reading on Medium » (https://vengeance.medium.com/authorization-token-leak-from-verifying-email-endpoint-f28803476680?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Authorization token leak from verify email endpoint

While testing a website I found that the verify email endpoint was leaking the authorization tokens of any verified users by just passing…Continue reading on Medium »
Read more...

CRLF to Account takeover (chaining bugs)

Hi, everyoneContinue reading on Medium »
Read more...

Hacking on Medium
CRLF to Account takeover (chaining bugs)

https://cdn-images-1.medium.com/max/600/1*cmObGZE__peI9_yQYQTP0w.png
Hi, everyone

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

CRLF to Account takeover (chaining bugs)
https://medium.com/@moSec/crlf-to-account-takeover-chaining-bugs-21a25dfa1cdf?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi, everyoneContinue reading on Medium » (https://medium.com/@moSec/crlf-to-account-takeover-chaining-bugs-21a25dfa1cdf?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

https://b.thumbs.redditmedia.com/ft10xbq3hMql5JoWEE4Jw1yhDtejQrrG3jh3SkYz_xs.jpg Seeking focus groups/use cases: https://www.domaincodex.com

https://preview.redd.it/zh6yn260ryb91.png?width=1318&format=png&auto=webp&s=7fe201c6240f4a9ccdbc4f7f196e5b009a30096e

Search 390+million root domains (associative 25 data points). Mix and match any criteria/points, additional API access available via RapidAPI.

#data #osint #bigdata

All feedback welcomed: https://www.domaincodex.com/contact.php

submitted by /u/cstadler
[link] [comments]

First Bug Bounty from DOS: Taking the service down

Hello friends, This is Faique, a security researcher & an ethical hacker from India, and this is a journey to my first bug bounty.Continue reading on Medium »
Read more...

MS-Interloper: On the Subject of Malicious MSIs
https://www.reddit.com/r/redteamsec/comments/w0ky2p/msinterloper_on_the_subject_of_malicious_msis/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://notes.huskyhacks.dev/notes/ms-interloper-on-the-subject-of-malicious-msis) [comments] (https://www.reddit.com/r/redteamsec/comments/w0ky2p/msinterloper_on_the_subject_of_malicious_msis/)

___________________________
@hacking_Attack
@Hacking_Video

First Bug Bounty from DOS: Taking the service down
https://medium.com/@faique/first-bug-bounty-from-dos-taking-the-service-down-30f9ad4e0246?source=rss------bug_bounty-5

Hello friends, This is Faique, a security researcher & an ethical hacker from India, and this is a journey to my first bug bounty.Continue reading on Medium » (https://medium.com/@faique/first-bug-bounty-from-dos-taking-the-service-down-30f9ad4e0246?source=rss------bug_bounty-5)

password reset No Rate Limiting
https://medium.com/@rishinikam/password-reset-no-rate-limiting-f46b93088ec0?source=rss------bug_bounty-5

hey gusy my name RISHI NIKAM i am Security Researcher and bug bounty hunterContinue reading on Medium » (https://medium.com/@rishinikam/password-reset-no-rate-limiting-f46b93088ec0?source=rss------bug_bounty-5)

Hacking on Medium
How to Become a Penetration Tester

https://cdn-images-1.medium.com/max/2600/1*LqNasta6RoVbPe0vK0wGHA.jpeg
The act of simulating cyber attacks against a digital asset or infrastructure is called a penetration test.

Continue reading on Medium »

Hacking on Medium
First Bug Bounty from DOS: Taking the service down

https://cdn-images-1.medium.com/max/2264/1*fJsu3ba2_EsIkHJwbb18iQ.png
Hello friends, This is Faique, a security researcher & an ethical hacker from India, and this is a journey to my first bug bounty.

Continue reading on Medium »