When two factor authentication is enabled in Facebook you can login to the account by approving that login from a session where you are…Continue reading on Medium » (https://medium.com/@freak001/possible-2fa-compromise-with-login-approval-on-facebook-e9b4d23fb34c?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Nuki Smart Locks got Several Security Flaws, Know the Kinds!

https://cdn-images-1.medium.com/max/640/0*JYBzL4ecZove7jPV.png
As information & technology is developing, the humane society is bringing new challenges and new inventions into the international market…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

This SIMPLE vulnerability in Shopify earned a $2500 bug bounty

Don’t forget to check for user access rightsContinue reading on InfoSec Write-ups »
Read more...

How I earned $10,000 within the last 7 months — 17y/o Edition

you know that I mostly earn bounties in Cryptocurrencies and this leads to the answer → I mostly hunt on XXXXXXXXXXXXContinue reading on Medium »
Read more...

Black Hat Ethical Hacking
XSS vulnerabilities in Google Cloud, Google Play could lead to account hijacks

XSS vulnerabilities in Google Cloud, Google Play could lead to account hijacksPost Views: 29 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.
Reading Time: 3 Minutes A pair of vulnerabilities in Google Cloud, DevSite, and Google Play could have allowed attackers to achieve cross-site scripting (XSS) attacks, opening the door to account hijacks.The first vulnerability is a reflected XSS bug in Google DevSite. An attacker-controlled link could run JavaScript on the origins http://cloud.google.com and http://developers.google.com, meaning a malicious actor could read and modify its contents, bypassing the same-origin policy.

Researcher ‘NDevTK’, who discovered both vulnerabilities, wrote: “Due to a vulnerability in the server-side implementation of BountyThe researcher earned $3,133.70 for the DevSite issue and $5,000 for the vulnerability in Google Play.

Speaking to The Daily Swig, they said that they were “happy with the bounty”.
Trending: GitHub introduces 2FA and quality of life improvements for npm Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images-for-the-News-posts-2-1-300x150.png Microsoft SQL servers hacked to steal bandwidth with proxywareJuly 29, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images-for-the-News-posts-1-2-300x150.png GitHub introduces 2FA and quality of life improvements for npmJuly 28, 2022
Reading Time: 4 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Images-for-the-News-posts-5-300x150.png Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused BrandsJuly 27, 2022
Reading Time: 3 minutes

* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/0[...]

___________________________
@hacking_Attack
@Hacking_Video

7/Images-for-the-News-posts-1-1-300x150.png Cisco patches dangerous bug trio in Nexus DashboardJuly 26, 2022
Reading Time: 3 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post XSS vulnerabilities in Google Cloud, Google Play could lead to account hijacks first appeared on Black Hat Ethical Hacking.

___________________________
@hacking_Attack
@Hacking_Video

This SIMPLE vulnerability in Shopify earned a $2500 bug bounty

Don’t forget to check for user access rightsContinue reading on InfoSec Write-ups »
Read more...

Why this EASY vulnerability resulted in a $20,000 bug bounty from GitLab

The hidden dangers of numerical IDsContinue reading on InfoSec Write-ups »
Read more...

This SIMPLE vulnerability in Shopify earned a $2500 bug bounty
https://infosecwriteups.com/this-simple-vulnerability-in-shopify-earned-a-2500-bug-bounty-25f0b8358012?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Don’t forget to check for user access rightsContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/this-simple-vulnerability-in-shopify-earned-a-2500-bug-bounty-25f0b8358012?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I earned $10,000 within the last 7 months — 17y/o Edition
https://gowtham-naidu.medium.com/how-i-earned-10-000-within-the-last-7-months-17y-o-edition-f566651cef82?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

you know that I mostly earn bounties in Cryptocurrencies and this leads to the answer → I mostly hunt on XXXXXXXXXXXXContinue reading on Medium » (https://gowtham-naidu.medium.com/how-i-earned-10-000-within-the-last-7-months-17y-o-edition-f566651cef82?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to enter windows 10 without pass

I forgot my laptop win 10 password, is there any way can I gain access again??

submitted by /u/SirFodingo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bic Cristal Ballpoint Pen Review
https://www.reddit.com/r/Pentesting/comments/wdc5i8/bic_cristal_ballpoint_pen_review/

___________________________
@hacking_Attack
@Hacking_Video

submitted by /u/NoHearing1817 (https://www.reddit.com/user/NoHearing1817)
[link] (https://www.penaddict.com/blog/2016/1/17/bic-cristal-ballpoint-pen-review) [comments] (https://www.reddit.com/r/Pentesting/comments/wdc5i8/bic_cristal_ballpoint_pen_review/)

___________________________
@hacking_Attack
@Hacking_Video