Hacking Articles Tips Tricks Videos Tutorials
Photo
Black Hat Ethical Hacking
IDOR vulnerability in Reddit allowed attackers to perform mod actions
IDOR vulnerability in Reddit allowed attackers to perform mod actionsPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes An IDOR vulnerability in Reddit allowed attackers to perform moderator actions or elevate regular users to mod status without the appropriate permissions.The flaw could have allowed for all kinds of mischief, as Reddit mods are privileged to perform actions such as pin or remove posts, ban other users, and edit subreddit information.
As detailed in a recent HackerOne report, a bug hunter with the handle ‘high_ping_ninja’ found that Reddit failed to check if the user was a moderator of a particular subreddit when they attempted to access the mod logs via GraphQL.
“You can change the parameter subredditName to any target subreddit name which is public or restricted and get access to mod logs of that subreddit,” they explained.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
As detailed in a recent HackerOne report, a bug hunter with the handle ‘high_ping_ninja’ found that Reddit failed to check if the user was a moderator of a particular subreddit when they attempted to access the mod logs via GraphQL.
“You can change the parameter subredditName to any target subreddit name which is public or restricted and get access to mod logs of that subreddit,” they explained.
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure Same-day fixThe insecure direct object reference (IDOR) bug was reported on August 3 and fixed on the same day.
“I increased severity to high based on our program policy,” a member of the Reddit triage team said in the disclosure notes.
The researcher was awarded a $5,000 bug bounty for the find. Trending: New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images_for_the_News_posts_2-300x150.png Kali Linux 2022.3 Release (New Tools in Kali & Test Lab)August 10, 2022
Reading Time: 5 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-1-300x150.png Twilio discloses data breach after SMS phishing attack on employeesAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-5-300x150.png Researcher bypass email filter – XSS in Gmail’s AMP For EmailAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-1-300x150.png Twitter confirms zero-day used to expose data of 5.4 million accountsAugust 8, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post IDOR vulnerability in Reddit allowed attackers to perform mod actions first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
IDOR vulnerability in Reddit allowed attackers to perform mod actions
IDOR vulnerability in Reddit allowed attackers to perform mod actionsPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.
Reading Time: 2 Minutes An IDOR vulnerability in Reddit allowed attackers to perform moderator actions or elevate regular users to mod status without the appropriate permissions.The flaw could have allowed for all kinds of mischief, as Reddit mods are privileged to perform actions such as pin or remove posts, ban other users, and edit subreddit information.
As detailed in a recent HackerOne report, a bug hunter with the handle ‘high_ping_ninja’ found that Reddit failed to check if the user was a moderator of a particular subreddit when they attempted to access the mod logs via GraphQL.
“You can change the parameter subredditName to any target subreddit name which is public or restricted and get access to mod logs of that subreddit,” they explained.
See Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course
As detailed in a recent HackerOne report, a bug hunter with the handle ‘high_ping_ninja’ found that Reddit failed to check if the user was a moderator of a particular subreddit when they attempted to access the mod logs via GraphQL.
“You can change the parameter subredditName to any target subreddit name which is public or restricted and get access to mod logs of that subreddit,” they explained.
Trending: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure Same-day fixThe insecure direct object reference (IDOR) bug was reported on August 3 and fixed on the same day.
“I increased severity to high based on our program policy,” a member of the Reddit triage team said in the disclosure notes.
The researcher was awarded a $5,000 bug bounty for the find. Trending: New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images_for_the_News_posts_2-300x150.png Kali Linux 2022.3 Release (New Tools in Kali & Test Lab)August 10, 2022
Reading Time: 5 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-1-300x150.png Twilio discloses data breach after SMS phishing attack on employeesAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-5-300x150.png Researcher bypass email filter – XSS in Gmail’s AMP For EmailAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-1-300x150.png Twitter confirms zero-day used to expose data of 5.4 million accountsAugust 8, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post IDOR vulnerability in Reddit allowed attackers to perform mod actions first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
Black Hat Ethical Hacking
IDOR vulnerability in Reddit allowed attackers to perform mod actions | Black Hat Ethical Hacking
An IDOR vulnerability in Reddit allowed attackers to perform moderator actions or elevate regular users to mod status without the appropriate permissions.
Hacking Articles Tips Tricks Videos Tutorials
Black Hat Ethical Hacking Kali Linux 2022.3 Release (New Tools in Kali & Test Lab) Kali Linux 2022.3 Release (New Tools in Kali & Test Lab)Post Views: 67 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe…
lt;package, else you can use the kali-linux-labs metapackage to get them all! This list will be growing in the upcoming Kali releases!
This list will be growing in the upcoming Kali releases!
*Note: At times, you may be running codes that are designed to be vulnerable. Please take the necessary steps to secure your environment. Kali for Virtual MachinesThey have already provided Kali Linux images for VMware and VirtualBox since the start. For this release, there’s been a few changes worth noting.
They now distribute the VirtualBox image as a VDI disk and a .vbox metadata file, or to say it short: the native format for VirtualBox images. It should be a bit faster to download, as those images have a better compression ratio compared to the OVA images that they used to provide. It should also be a bit more straightforward to use it, you just need to unpack the image in your VirtualBox folder and run it. In case you need help, refer to our documentation: Import Pre-Made Kali VirtualBox VM.
Additionally, they just started to provide weekly builds of our VM images. These images are built from the kali-rolling branch, meaning that they have the most up-to-date packages, but on the other hand they don’t receive as much testing as their quarterly releases.
Last but not least, the scripts that they use to build those images are now available on GitLab. If you need to build custom Kali VM images, this is the place to go!
Trending: Write up: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure New Tools in KaliIt would not be a Kali release if there were not any new tools added! A quick run down of what has been added (to the network repositories):
* BruteShark – Network Analysis Tool
* DefectDojo – Open-source application vulnerability correlation and security orchestration tool
* phpsploit – Stealth post-exploitation framework
* shellfire – Exploiting LFI/RFI and command injection vulnerabilities
* SprayingToolkit – Password spraying attacks against Lync/S4B, OWA and O365
There have been numerous packages updates as well.
Trending: New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: kali.org Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-6-300x150.png IDOR vulnerability in Reddit allowed attackers to perform mod actionsAugust 10, 2022
Reading Time: 2 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-1-300x150.png Twilio discloses data breach after SMS phishing attack on employeesAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-5-300x150.png Researcher bypass email filter – XSS in Gmail’s AMP For EmailAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-1-300x150.png Twitter confirms zero-day used to expose data of 5.4 million accountsAugust 8, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Kali Linux 2022.3 Release (New Tools in Kali & Test Lab) first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
This list will be growing in the upcoming Kali releases!
*Note: At times, you may be running codes that are designed to be vulnerable. Please take the necessary steps to secure your environment. Kali for Virtual MachinesThey have already provided Kali Linux images for VMware and VirtualBox since the start. For this release, there’s been a few changes worth noting.
They now distribute the VirtualBox image as a VDI disk and a .vbox metadata file, or to say it short: the native format for VirtualBox images. It should be a bit faster to download, as those images have a better compression ratio compared to the OVA images that they used to provide. It should also be a bit more straightforward to use it, you just need to unpack the image in your VirtualBox folder and run it. In case you need help, refer to our documentation: Import Pre-Made Kali VirtualBox VM.
Additionally, they just started to provide weekly builds of our VM images. These images are built from the kali-rolling branch, meaning that they have the most up-to-date packages, but on the other hand they don’t receive as much testing as their quarterly releases.
Last but not least, the scripts that they use to build those images are now available on GitLab. If you need to build custom Kali VM images, this is the place to go!
Trending: Write up: Find Hidden Info using Google Dorking manually, and Automated using Pagodo
Trending: Offensive Security Tool: Offensive-Azure New Tools in KaliIt would not be a Kali release if there were not any new tools added! A quick run down of what has been added (to the network repositories):
* BruteShark – Network Analysis Tool
* DefectDojo – Open-source application vulnerability correlation and security orchestration tool
* phpsploit – Stealth post-exploitation framework
* shellfire – Exploiting LFI/RFI and command injection vulnerabilities
* SprayingToolkit – Password spraying attacks against Lync/S4B, OWA and O365
There have been numerous packages updates as well.
Trending: New Linux malware called RapperBot brute-forces Linux SSH servers to breach networks
Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?
If you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com
Source: kali.org Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-6-300x150.png IDOR vulnerability in Reddit allowed attackers to perform mod actionsAugust 10, 2022
Reading Time: 2 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-1-300x150.png Twilio discloses data breach after SMS phishing attack on employeesAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-5-300x150.png Researcher bypass email filter – XSS in Gmail’s AMP For EmailAugust 9, 2022
Reading Time: 3 minutes
* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-1-300x150.png Twitter confirms zero-day used to expose data of 5.4 million accountsAugust 8, 2022
Reading Time: 4 minutes
https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!
The post Kali Linux 2022.3 Release (New Tools in Kali & Test Lab) first appeared on Black Hat Ethical Hacking.
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest Tools!
Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages
___________________________
@hacking_Attack
@Hacking_Video
Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages
Hacking Articles Tips Tricks Videos Tutorials
Photo
Dark Reading: Attacks/Breaches
UntitledFlow Security Launches Next-Gen Data Security Platform Following $10 Million Seed Round
First-of-its-kind solution discovers and protects both data at rest and in motion.
___________________________
@hacking_Attack
@Hacking_Video
UntitledFlow Security Launches Next-Gen Data Security Platform Following $10 Million Seed Round
First-of-its-kind solution discovers and protects both data at rest and in motion.
___________________________
@hacking_Attack
@Hacking_Video
Dark Reading
Flow Security Launches Next-Gen Data Security Platform Following $10 Million Seed Round
First-of-its-kind solution discovers and protects both data at rest and in motion.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hackerrank Mutations problem solution in Python | python problem solution SoftwareTechIT
https://cdn-images-1.medium.com/max/600/0*t5dwAi0pjjZYW15b.png
Read More:-Mutations problem solution in Python
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Hackerrank Mutations problem solution in Python | python problem solution SoftwareTechIT
https://cdn-images-1.medium.com/max/600/0*t5dwAi0pjjZYW15b.png
Read More:-Mutations problem solution in Python
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Hackerrank Mutations problem solution in Python | python problem solution SoftwareTechIT
Read More:-Mutations problem solution in Python
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Ransoms and Hackers!
In real world there are thieves and dacoits. In I.T there are black hat hackers. Black hat hackers search for weaknesses in…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Ransoms and Hackers!
In real world there are thieves and dacoits. In I.T there are black hat hackers. Black hat hackers search for weaknesses in…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Ransoms and Hackers!
In real world there are thieves and dacoits. In I.T there are black hat hackers. Black hat hackers search for weaknesses in…
Hacking Articles Tips Tricks Videos Tutorials
1*Zojs82O4rGGEexSLiDhtmw.gif
Hacking on Medium
Why Crypto Projects Pay Hackers To Return Stolen Funds
https://cdn-images-1.medium.com/max/800/1*Zojs82O4rGGEexSLiDhtmw.gif
Did you know that $14 billion worth of blockchain transactions was tied to crypto crimes, hacks, and scams in 2021? This is the low end of…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Why Crypto Projects Pay Hackers To Return Stolen Funds
https://cdn-images-1.medium.com/max/800/1*Zojs82O4rGGEexSLiDhtmw.gif
Did you know that $14 billion worth of blockchain transactions was tied to crypto crimes, hacks, and scams in 2021? This is the low end of…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Why Crypto Projects Pay Hackers To Return Stolen Funds
Did you know that $14 billion worth of blockchain transactions was tied to crypto crimes, hacks, and scams in 2021? This is the low end of…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Wszystko o atakach Denial Of Service znajdziesz tutaj, włącznie z narzędziami.
Ataki Denial Of Service polegają na zalaniu dużą ilością zapytań systemu, który haker chce odciąć od sieci, czyniąc daną usługę…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Wszystko o atakach Denial Of Service znajdziesz tutaj, włącznie z narzędziami.
Ataki Denial Of Service polegają na zalaniu dużą ilością zapytań systemu, który haker chce odciąć od sieci, czyniąc daną usługę…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Wszystko o atakach Denial Of Service znajdziesz tutaj, włącznie z narzędziami.
Ataki Denial Of Service polegają na zalaniu dużą ilością zapytań systemu, który haker chce odciąć od sieci, czyniąc daną usługę niedostępną…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Coding on Holiday — Hacking Huawei MiFi
https://cdn-images-1.medium.com/max/620/0*TGdyGlfCR5ngTHCG
Back in 2014 i bought a Huawei B593s-22 which would allow me to be able to work non office locations using WiFi.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Coding on Holiday — Hacking Huawei MiFi
https://cdn-images-1.medium.com/max/620/0*TGdyGlfCR5ngTHCG
Back in 2014 i bought a Huawei B593s-22 which would allow me to be able to work non office locations using WiFi.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Coding on Holiday — Hacking Huawei MiFi
Back in 2014 i bought a Huawei B593s-22 which would allow me to be able to work non office locations using WiFi.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
2,525 milliards de dollars piratés : Le marché des cryptomonnaies est-il devenu un guichet…
https://cdn-images-1.medium.com/max/1280/1*6zzNPq_PBC9eK8xXT7ZdJw.png
Alors que la capitalisation totale du marché des crypto-actifs ne cesse d’augmenter, les piratages sont de plus en plus fréquents. Selon…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
2,525 milliards de dollars piratés : Le marché des cryptomonnaies est-il devenu un guichet…
https://cdn-images-1.medium.com/max/1280/1*6zzNPq_PBC9eK8xXT7ZdJw.png
Alors que la capitalisation totale du marché des crypto-actifs ne cesse d’augmenter, les piratages sont de plus en plus fréquents. Selon…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
2,525 milliards de dollars piratés : Le marché des cryptomonnaies est-il devenu un guichet automatique pour les pirates informatiques…
Alors que la capitalisation totale du marché des crypto-actifs ne cesse d’augmenter, les piratages sont de plus en plus fréquents. Selon…
Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages
http://www.kitploit.com/2022/08/packj-large-scale-security-analysis.html
___________________________
@hacking_Attack
@Hacking_Video
http://www.kitploit.com/2022/08/packj-large-scale-security-analysis.html
___________________________
@hacking_Attack
@Hacking_Video
KitPloit - PenTest & Hacking Tools
Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages