Today I will be explaining an XSS (“Cross Site Scripting”) vulnerability I found in a private bug bounty program that allowed me to…Continue reading on Medium » (https://medium.com/@raymond-lind/stored-xss-to-cookie-exfiltration-2cbca6a8c7f0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

SSRF Bug Leads To AWS Metadata Exposure
https://medium.com/@raymond-lind/ssrf-bug-leads-to-aws-metadata-exposure-f2ee7d43c6c3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

How can you leverage an SSRF (“Server Side Request Forgery”) vulnerability to evade filters and leak internal AWS credentials on a web…Continue reading on Medium » (https://medium.com/@raymond-lind/ssrf-bug-leads-to-aws-metadata-exposure-f2ee7d43c6c3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Blind Insecure Direct Object Reference (IDOR) Leads To Export Other User’s Data On Instagram.
https://backup-nobugescapes.medium.com/blind-insecure-direct-object-reference-idor-leads-to-export-other-users-data-on-instagram-7df7efd963b7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Original post: https://nobugescapes.com/blog/blind-insecure-direct-object-reference-idor-leads-to-export-other-users-data/Continue reading on Medium » (https://backup-nobugescapes.medium.com/blind-insecure-direct-object-reference-idor-leads-to-export-other-users-data-on-instagram-7df7efd963b7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

What’s the difference into learning web pentesting vs Application testing why they are many web pentesters but not too much application pentesters ??
https://www.reddit.com/r/Pentesting/comments/ye5bq0/whats_the_difference_into_learning_web_pentesting/

submitted by /u/True-Juice-6203 (https://www.reddit.com/user/True-Juice-6203)
[link] (https://www.reddit.com/r/Pentesting/comments/ye5bq0/whats_the_difference_into_learning_web_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/ye5bq0/whats_the_difference_into_learning_web_pentesting/)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Google Chrome Pays $57K (and Counting) in Bug Bounties for Latest Update

Chrome's Stable Channel 107 rollout includes security fixes from a slew of independent researchers, racking up nearly $60,000 in bounties.

Dark Reading: Attacks/Breaches
GitLab Adds Governance, Software Supply Chain Enhancements

Developers would be able to scan for vulnerabilities in source code, containers, dependencies, and applications in production.

Dark Reading: Attacks/Breaches
Ransomware Gangs Ramp Up Industrial Attacks in US

The manufacturing segment was especially hard hit by cyberattacks in the third quarter of 2022.

Dark Reading: Attacks/Breaches
Why Retail Stores Are More Vulnerable Than Ever to Cybercrime

When we think about cybercrime and retail it is natural to focus on websites being targeted with attacks. Indeed, there has been a shocking rise in the number of cyberattacks perpetrated against online retailers in the past year. Dakota Murphey explains why store owners and security managers need to also protect their physical locations from the cyber threat, too, however.

Dark Reading: Attacks/Breaches
Cisco Warns AnyConnect VPNs Under Active Cyberattack

Older bugs in the AnyConnect Secure Mobility Client are being targeted in the wild, showcasing patch-management failures.

Dark Reading: Attacks/Breaches
Dark Reading Launches New Section Dedicated to ICS/OT Security

ICS/OT Security joins the lineup of 14 cybersecurity topic sections on the media site.

Dark Reading: Attacks/Breaches
4 Reasons Open Source Matters for Cloud Security

When we depend on an open commons as our computing foundation, we need it to be secure, and the most effective way to do that is through open solutions.

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Blind Insecure Direct Object Reference (IDOR) Leads To Export Other User’s Data On Instagram.

https://cdn-images-1.medium.com/max/1000/0*2MjXSePPPxH6lmuE.jpg
Original post: https://nobugescapes.com/blog/blind-insecure-direct-object-reference-idor-leads-to-export-other-users-data/

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
SSRF Bug Leads To AWS Metadata Exposure

https://cdn-images-1.medium.com/max/700/0*NutgJr8igfIlNWtV.jpeg
How can you leverage an SSRF (“Server Side Request Forgery”) vulnerability to evade filters and leak internal AWS credentials on a web…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video