Hacking on Medium
Internal CTF — Web-Header-Modification: Header #3

https://cdn-images-1.medium.com/max/600/1*KJy7jG5fuRSbh1LQNAfxUA.png
Header #3 takes me back to my X-Forwarded-For attacks in previous challenges simply asking to find more. This time I wrote the following…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Web: Screenshot 9000

https://cdn-images-1.medium.com/max/600/1*nHYOsXiLcIshQNBgmrbNew.png
This time around it seems like the screenshot tool has a specific allow list that it can target and it’s a safe bet that the many…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF 2023 — Web-Header-Modification: Header #1

https://cdn-images-1.medium.com/max/600/1*rgS5V6i4c02B7krh_BIGdw.png
For this challenge, I used Burp Suite CE instead of the built in browser dev tools. I started off by examining the request and response…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Stego: Precise Pixels

https://cdn-images-1.medium.com/max/600/1*HNCA3hqiYXQHg7l3n8zgcA.png
For this challenge, the provided .bmp file can be opened in Photoshop/GIMP where I can adjust different qualities of the image. In this…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Web: Magic

https://cdn-images-1.medium.com/max/600/1*Psg6emL5TEIlrZ4xlGJURQ.png
The web application at the provide link provides an input for the password, a submit button and a link to the code of the back end…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Web-Header-Modification: As Fast As You Can

https://cdn-images-1.medium.com/max/600/1*XGqZ4efT3Nj4s8dkUAp9nA.png
For this challenge, I’m presented with a web app that has an input field, submit button, and the instructions to “Decode as fast as you…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Web: Screenshot 2

https://cdn-images-1.medium.com/max/600/1*jAHVgYyOswcWPAm1Bf_xVA.png
The next iteration of the screenshot challenge explains that the developers added some controls to prevent me from telling the server to…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Internal CTF — Web: Open Book

https://cdn-images-1.medium.com/max/600/1*fEGcIpceno6bEUCtahIAwA.png
For this challenge, the web application at the provided link simply presents some text and loads a picture of cute sleeping cat. After…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

A $500+ Open Redirect Bounty in Under 10 Minutes
https://grahamzemel.medium.com/a-500-open-redirect-bounty-in-under-10-minutes-fbb1cce063e5?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This post is a quick guide on how to utilize the Open Redirect bug on any sites you test, including a real-world step-by-step.Continue reading on Medium » (https://grahamzemel.medium.com/a-500-open-redirect-bounty-in-under-10-minutes-fbb1cce063e5?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Facebook SMS Captcha Was Vulnerable to CSRF Attack
https://lokeshdlk77.medium.com/facebook-sms-captcha-was-vulnerable-to-csrf-attack-8db537b1e980?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This post is about an bug that I found on Meta (aka Facebook) which allows to make any Endpoint as POST request in SMS Captcha flow which…Continue reading on Medium » (https://lokeshdlk77.medium.com/facebook-sms-captcha-was-vulnerable-to-csrf-attack-8db537b1e980?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video