Hacking on Medium
HackTheBox RedPanda Writeup

https://cdn-images-1.medium.com/max/1400/1*xVzfN7B4ieimQILgPxW49g.png
Machine Information

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Haxxoring messenger group admin via html

So yeah basically I have been testing fbs messenger for a way to get round the dead (deleted accounts) admin in a chat. I managed to manipulate enough to get a "make admin button" and "remove member (scary sounding lol)" button, but I just haven't had the chance to locate a way to spoof admin privileges. I was wondering if anyone else has tried this or came across a workaround?

submitted by /u/Meatpoleexposer
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Unique Rate limit bypass worth 1800$

Proving the organization statement wrong with OOS Rate limit bypass.Continue reading on Medium »
Read more...

Active Directory Pentesting mind map by Orange Cyberdefense
https://www.reddit.com/r/Pentesting/comments/z64wox/active_directory_pentesting_mind_map_by_orange/

___________________________
@hacking_Attack
@Hacking_Video

An Active Directory Pentesting mind map that was deleted by the original author from Xmind (https://github.com/esidate/pentesting-active-directory) https://preview.redd.it/ag30y5c9oi2a1.png?width=913&format=png&auto=webp&s=88805982a8b5d666e4ca2013adc508fcf972d7f8 submitted by /u/thehunckerma (https://www.reddit.com/user/thehunckerma)
[link] (https://www.reddit.com/r/Pentesting/comments/z64wox/active_directory_pentesting_mind_map_by_orange/) [comments] (https://www.reddit.com/r/Pentesting/comments/z64wox/active_directory_pentesting_mind_map_by_orange/)

___________________________
@hacking_Attack
@Hacking_Video

Unique Rate limit bypass worth 1800$
https://medium.com/@manavbankatwala29/unique-rate-limit-bypass-worth-1800-6e2947c7d972?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Proving the organization statement wrong with OOS Rate limit bypass.Continue reading on Medium » (https://medium.com/@manavbankatwala29/unique-rate-limit-bypass-worth-1800-6e2947c7d972?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

First Bug Bounty For Homeland Security Uncovers 122 Vulnerabilities
https://blog.bugzero.io/first-bug-bounty-for-homeland-security-uncovers-122-vulnerabilities-f5184235a637?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

What exactly is the Hack DHS Program?Continue reading on Bug Zero » (https://blog.bugzero.io/first-bug-bounty-for-homeland-security-uncovers-122-vulnerabilities-f5184235a637?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Blockchain Books​
https://wefuzz.medium.com/blockchain-books-b7a6717e504a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We at WeFuzz, have created a collection of fantastic books for you if you’re looking to go further down the rabbit hole of #Web3. 🐰🐇Continue reading on Medium » (https://wefuzz.medium.com/blockchain-books-b7a6717e504a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Firebase Exploit bug bounty
https://medium.com/@damaidec/firebase-exploit-bug-bounty-be63f4dc1e4a?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Recently I manage to exploit a read/write permission on firebase but unfortunately it was marked as not applicable honestly it was also…Continue reading on Medium » (https://medium.com/@damaidec/firebase-exploit-bug-bounty-be63f4dc1e4a?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video