Hacking Articles Tips Tricks Videos Tutorials

Break the Logic: Insecure Parameters (€300)

Hello everyone. Today, I’m going to talk about two minor vulnerabilities based on insecure parameters that I discovered in the same…Continue reading on Medium »
Read more...

5 views02:10

Rest API Pentesting
https://www.reddit.com/r/Pentesting/comments/ww6t2f/rest_api_pentesting/

Hi there! I currently need to learn about how to do a pentest on a rest api web application. I was wondering if someone can recommend me a lab to practice and probably a good course to learn about it. submitted by /u/ushioyuuki (https://www.reddit.com/user/ushioyuuki)
[link] (https://www.reddit.com/r/Pentesting/comments/ww6t2f/rest_api_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/ww6t2f/rest_api_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

Rest API Pentesting

Hi there! I currently need to learn about how to do a pentest on a rest api web application. I was wondering if someone can recommend me a lab to...

7 viewsedited 02:22

Hacking Articles Tips Tricks Videos Tutorials

Break the Logic: Insecure Parameters (€300)
https://canmustdie.medium.com/break-the-logic-insecure-parameters-300-e655cc4fcc42?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Break the Logic: Insecure Parameters (€300)

Hello everyone. Today, I’m going to talk about two minor vulnerabilities based on insecure parameters that I discovered in the same…

9 viewsedited 03:08

Hacking Articles Tips Tricks Videos Tutorials

10 views03:08

Hacking Articles Tips Tricks Videos Tutorials

Hello everyone. Today, I’m going to talk about two minor vulnerabilities based on insecure parameters that I discovered in the same…Continue reading on Medium » (https://canmustdie.medium.com/break-the-logic-insecure-parameters-300-e655cc4fcc42?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Break the Logic: Insecure Parameters (€300)

Hello everyone. Today, I’m going to talk about two minor vulnerabilities based on insecure parameters that I discovered in the same…

10 viewsedited 03:08

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Recommended reverse engineering book

Hello, A while ago I read most of "Hacking, the art of exploitation" by Jon Erickson and it kind of blew my mind with how in depth it went into buffer overflows and how easy it was to exploit badly written software. I still need to finish the book but I have been looking into what to read after this.

I was looking for a book recommendation for coding malware, reverse engineering malware, writing exploits, or things of that nature.

submitted by /u/arcticface442
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit

Explore this post and more from the hacking community

9 viewsedited 05:23

Hacking Articles Tips Tricks Videos Tutorials

7 views05:23

Hacking Articles Tips Tricks Videos Tutorials

https://b.thumbs.redditmedia.com/fLWr_A_iWv4cAybDdOpDW78-Ds9S6SfIGYsayjc30lA.jpg I found a vulnerability in yahoo that allows you to perfectly impersonate a brand. You give yahoo the right input and they give you the profile pic of the brand and a link to their website as you can see in the attached pictures (I personally moved freelancer.com to the spam folder before), as you can see those emails would never be sent by a reputable organization I sent them to myself durring testing.

https://preview.redd.it/ypcftel4kkj91.png?width=1620&format=png&auto=webp&s=ddc877ff5462b4fdd14c453b829908876fee5dfe

https://preview.redd.it/2n8jyt76kkj91.png?width=1599&format=png&auto=webp&s=957e25ab73b9b8760b122a0c24077edf620731c2

However this vulnerability no longer works because, I reported it to hackerone, along with the python script that I wrote to run the exploit, and they reported it to yahoo to patch it and finally, they closed my report without paying me as it is social engineering and is out of the scope of the program. Why did they report it to yahoo if it is out of the scope of their shitty program, or is the scope for the payments only ? For those sleazy bounty hunters ? For those who wasted their time to find a vulnerability and decided to do the right thing and report it to the right people ? Except those people are the worst of the worst.

This is obviously a vulnerability in yahoo, they rely on untrusted input and have improper authentication.

Do not submit your reports to hackerone, go ANYWHERE else, they work for the corporates, they do their best to save their precious money while keeping them secure, this makes sense because the corporates are the ones paying them after all.

I am never reporting anything to hackerone ever again, please spread this as much as you can.

submitted by /u/Iam_cool_asf
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit: Hackerone fucked me over

Explore this post and more from the hacking community

7 viewsedited 05:23

Hacking Articles Tips Tricks Videos Tutorials

3 views05:23

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email Accounts

https://external-preview.redd.it/HMH88PtiorL0UnRh7je2fQtzwnJ0blu4o9fASve2zLM.jpg?width=640&crop=smart&auto=webp&s=be5b8b455e057308c07aaca780411da5a586acc3 submitted by /u/Glad_Living3908
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Google Uncovers Tool Used by Iranian Hackers to Steal Data from...

Posted in r/hacking by u/Glad_Living3908 • 1 point and 0 comments

3 viewsedited 05:23

Hacking Articles Tips Tricks Videos Tutorials