Hacking Articles Tips Tricks Videos Tutorials

Everything About Path Traversal Vulnerability
https://infosecwriteups.com/everything-about-path-traversal-vulnerability-c40ba5465bc4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Everything About Path Traversal Vulnerability

Introduction

9 viewsedited 17:11

Hacking Articles Tips Tricks Videos Tutorials

7 views17:11

Hacking Articles Tips Tricks Videos Tutorials

IntroductionContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/everything-about-path-traversal-vulnerability-c40ba5465bc4?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Everything About Path Traversal Vulnerability

Introduction

7 viewsedited 17:11

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Using the undo-feature of Tinder for free (Tinder in "Grid Mode")

Hello everyone,

in my previous post I shared how you can unblur people that liked you on Tinder for free (bypassing their previous fix). In this guide, I will explain how one can achieve the functionality of the undo-feature for free. It's neither difficult nor very sophisticated but it works anyways.

TL;DR

Tinder doesn't check if you swiped left on a person. So if you've saved the profile data before you do so, you can still send a "Like" request to Tinder's API afterwards hence emulating the undo-feature which usually costs money.

A script that does this automatically as a proof of concept is at the end of this post at "Automated script for this"

What is the undo-feature?

When you dislike/swipe-left on a person you can't just change your mind and revoke that action. There is an undo button but you have to pay in order to use it. This feature is useful when you disliked someone by accident or changed your mind afterwards because e.g. Tinder told you "oops, you just missed a match".

How to undo for free?

A "Like" is a POST request to a specific URL with a specific body and your X-Auth-Token as a header. If you have the URL and body you can hence send a "Like" manually. But after swiping left you can't get this data afaik. So you just save it beforehand. That's all! Nothing fancy, just exploiting the fact that Tinder doesn't enforce any checks if you already swiped a profile.
The URL schema is the following: https://api.gotinder.co/like/** s_number mapping is saved as well.
2. If you put your x-auth-token and the path to an image (copy+paste or drag+drop) as arguments, it will send a "Like" to the profile the image belongs to. This is done by parsing the information from the file path and looking up the s_number.

So the usage would be like this:

* `python3 ./tinder-grid.py X-AUTH-TOKEN` - to download some profiles and
* `python3 ./tinder-grid.py X-AUTH-TOKEN "/path/to/an/image.jpeg"` - to like a person.

Link to the script: https://pastebin.com/tk8ykGjb

Disclaimer

I used it only on debian 11 but since it's python I guess it works elsewhere too...

submitted by /u/nachfarbensortiert [link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Using the undo-feature of Tinder for free (Tinder in "Grid Mode")

Hello everyone, in my previous post I shared how you can unblur people that liked you on Tinder for free (bypassing their previous fix). In this...

7 viewsedited 19:08

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Are password manager on mobile safe?

Hey guys,

so until now i always used the good ol' paper and pen to write down and save my password but now i'm struggling accessing them if i'm not at home. My question is: are password manager on mobile "safe"?

If yes, what's the best application for password managing for android?

submitted by /u/Valrion06
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Are password manager on mobile safe?

Hey guys, so until now i always used the good ol' paper and pen to write down and save my password but now i'm struggling accessing them if i'm...

7 viewsedited 19:09

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
looking for an apk editor, either for android or windows

As the title says, I am looking for an apk editor. Essentially I just need to edit the manifest of an app, kiwi browser. The last update allows only to be installed from android 6+. I need to install it on Android 5.

submitted by /u/FarVehicle5333
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

looking for an apk editor, either for android or windows

As the title says, I am looking for an apk editor. Essentially I just need to edit the manifest of an app, kiwi browser. The last update allows...

7 viewsedited 19:11

Hacking Articles Tips Tricks Videos Tutorials

7 views19:53

Hacking Articles Tips Tricks Videos Tutorials

7 views19:53

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
RazorBlack TryHackMe Writeup/Walkthrough

https://cdn-images-1.medium.com/max/938/1*wIAtLMHRaWLR39cz9gnUBQ.png
RazorBlack

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

RazorBlack TryHackMe Writeup/Walkthrough