Email Confirmation bypass at Instagram
https://medium.com/@avinash_/email-confirmation-bypass-at-instagram-cc968f9a126?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This story is all about a logical vulnerability which helped me in Bypassing the email confirmation process and adding any arbitrary…Continue reading on Medium » (https://medium.com/@avinash_/email-confirmation-bypass-at-instagram-cc968f9a126?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Pentesting Course recommendation
https://www.reddit.com/r/Pentesting/comments/wl5k9s/pentesting_course_recommendation/

Looking for recommendations on formal Pentesting courses, either instructor led in person or online. I am completing my development plan for the next 12 months and looking at the best courses for beginners. I have done the EC-Council Ethical Hacker course which I enjoyed and see they do a Pentesting one also. submitted by /u/cb24nz (https://www.reddit.com/user/cb24nz)
[link] (https://www.reddit.com/r/Pentesting/comments/wl5k9s/pentesting_course_recommendation/) [comments] (https://www.reddit.com/r/Pentesting/comments/wl5k9s/pentesting_course_recommendation/)

___________________________
@hacking_Attack
@Hacking_Video

Defeat the HttpOnly flag to achieve Account Takeover | RXSS

Hello folks, I’m Mohamed Tarek aka Timooon at Bugcrowd and HackerOne, In this write up I will explain how I get the victim’s session when…Continue reading on Medium »
Read more...

Defeat the HttpOnly flag to achieve Account Takeover | RXSS
https://medium.com/@mohamedtarekq/defeat-the-httponly-flag-to-achieve-account-takeover-rxss-c16849d3d192?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello folks, I’m Mohamed Tarek aka Timooon at Bugcrowd and HackerOne, In this write up I will explain how I get the victim’s session when…Continue reading on Medium » (https://medium.com/@mohamedtarekq/defeat-the-httponly-flag-to-achieve-account-takeover-rxss-c16849d3d192?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I earned a $6000 bug bounty from Cloudflare
https://deb0con.medium.com/how-i-earned-a-6000-bug-bounty-from-cloudflare-db6949e39cf7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Introduction:Continue reading on Medium » (https://deb0con.medium.com/how-i-earned-a-6000-bug-bounty-from-cloudflare-db6949e39cf7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

How I earned a $6000 bug bounty from Cloudflare

Introduction:Continue reading on Medium »
Read more...

Defensics Fuzz Testing VS Core Impact
https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/

Hi everyone.
I am quite new to PenTesting. Sorry if my question is stupid So my place got new hardware and stuff. And i got a mission to figure out the difference between these 2 penetration tests tools. Defensics Fuzz Testing and Core Impact So would you guys help me out understanding what the differences between those two are. And if i have one of them. Which will be better?? Or will i need to have both to cover everything??? Many thanks reddit community!!! submitted by /u/gameboybin (https://www.reddit.com/user/gameboybin)
[link] (https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlgyw4/defensics_fuzz_testing_vs_core_impact/)

___________________________
@hacking_Attack
@Hacking_Video

My Experience on Hacking the Dutch Government

Hello, fellow Bug Hunters! It’s me again Jefferson Gonzales, and in this article, I’ll tell you about how I got my dream Dutch Government…Continue reading on Medium »
Read more...

My Experience on Hacking the Dutch Government
https://gonzx.medium.com/my-experience-on-hacking-the-dutch-government-a2c5a5f43d83?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello, fellow Bug Hunters! It’s me again Jefferson Gonzales, and in this article, I’ll tell you about how I got my dream Dutch Government…Continue reading on Medium » (https://gonzx.medium.com/my-experience-on-hacking-the-dutch-government-a2c5a5f43d83?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Panera Bread Public Network security is just sad.
https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/

I recently was at a Panera Bread, and their public network security was just horrible. Two of the main issues included: A: no good qos system, i was able to DoS the network by simply hogging the bandwith with masscan. no webpages or anything could load for other users while this command was running on my laptop B: Port 25 outbound is not blocked, which makes it extremely easy to scan the internet for open smtp relays to send spam mail from, this could be happening from a malicous actor in the building or a compromised computer on the network. So yeah the security sucks and it is very exploitable, especially for use to connect to unsecure smtp servers and send spam mail. submitted by /u/EvansMBgaming (https://www.reddit.com/user/EvansMBgaming)
[link] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/) [comments] (https://www.reddit.com/r/Pentesting/comments/wlijye/panera_bread_public_network_security_is_just_sad/)

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution

Time for another Kali Linux release! – Kali Linux 2022.3. This release has various impressive updates.The highlights for Kali’s 2022.3’s release:Discord Server - Kali’s new community real-time chat option has launched!Test Lab Environment - Quickly create a test bed to learn, practice, and benchmark tools and compare their resultsOpening Kali-Tools Repo - We have opened up the Kali tools repository & are accepting your submissions!Help Wanted - We are looking for a Go developer to help us on an open-source projectKali NetHunter Updates - New releases in our NetHunter storeVirtual Machines Updates - New VirtualBox image format, weekly images, and build-scripts to build your ownNew Tools In Kali - Would not be a release without some new tools!For more details, see the bug tracker changelog.More info here.Download Kali Linux 2022.3
Read more...

Kali Linux 2022.3 - Penetration Testing and Ethical Hacking Linux Distribution
http://www.kitploit.com/2022/08/kali-linux-20223-penetration-testing.html

___________________________
@hacking_Attack
@Hacking_Video