Hacking on Medium
Why Every Bug Hunter Should Perfect Their Vulnerability Reports

https://cdn-images-1.medium.com/max/813/0*pngmdFSNdNITCiz9.png
TL;DR- Today, we’ll take a look at some steps and examples of phenomenal bug hunting write-ups that are used to get even higher bounties.

Continue reading on The Gray Area »

Hacking on Medium
Telegram OSINT

https://cdn-images-1.medium.com/max/600/1*YRhKVh2dCcoOedf69KE6xA.jpeg
This is just an introduction, follow for the up comming series on hacking .

Continue reading on Medium »

Hacking on Medium
Bounty Hunter | TryHackMe CTF

https://cdn-images-1.medium.com/max/700/0*5hUFpN8t0AeomSfc.jpeg
Task 1 (Living up to the title)

Continue reading on Medium »

Hacking on Medium
[Write Up — Bahasa Indonesia] Anonymous— Tryhackme

https://cdn-images-1.medium.com/max/755/1*f-OTtuo7ShKzqxaEa_pI8A.png
Ini merupakan writeup saya untuk Tryhackme Anonymous room.

Continue reading on Medium »

Easy XSSHunter Express Setup Script

With xsshunter.com shutting down setting up your own xsshunter will be more important. This script will make it a lot easierContinue reading on InfoSec Write-ups »
Read more...

Easy XSSHunter Discord Alerts

This will be a setup guide for XSSHunter and integrating it with DiscordContinue reading on InfoSec Write-ups »
Read more...

DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation
https://www.reddit.com/r/redteamsec/comments/10mf7xi/dragonspark_attacks_evade_detection_with_sparkrat/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.sentinelone.com/labs/dragonspark-attacks-evade-detection-with-sparkrat-and-golang-source-code-interpretation/) [comments] (https://www.reddit.com/r/redteamsec/comments/10mf7xi/dragonspark_attacks_evade_detection_with_sparkrat/)

U.S. Department of Justice Disrupts Hive Ransomware Variant
https://www.reddit.com/r/redteamsec/comments/10mf8vn/us_department_of_justice_disrupts_hive_ransomware/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://www.justice.gov/opa/pr/us-department-justice-disrupts-hive-ransomware-variant) [comments] (https://www.reddit.com/r/redteamsec/comments/10mf8vn/us_department_of_justice_disrupts_hive_ransomware/)

Is Bug Bounty Worth The Hype?
https://hackerpurse.medium.com/is-bug-bounty-worth-the-hype-74f5fc023c2c?source=rss------bug_bounty-5

This article discusses the pros and cons of bug bounty programs and how they can be useful for organizations.Continue reading on Medium » (https://hackerpurse.medium.com/is-bug-bounty-worth-the-hype-74f5fc023c2c?source=rss------bug_bounty-5)

Is Bug Bounty Worth The Hype?

This article discusses the pros and cons of bug bounty programs and how they can be useful for organizations.Continue reading on Medium »
Read more...

Few question about pentesting
https://www.reddit.com/r/Pentesting/comments/10mg6me/few_question_about_pentesting/

<!-- SC_OFF -->Hello, I recently gain interest over cybersecurity and espcially pentesting and I have a few questions about it. When a pentester found out that a system is vulnerable, will he allways try to exploit this vulnerability ? Or will he just report it to his client ? If he tries to exploit this vulnerability, how can he know that the exploits, that can be found on github for example, are verified and safe to use ? If he tries to exploit this vulnerability, how can he find an exploit (except from using github) and is it hard to found one ? Thank you. <!-- SC_ON --> submitted by /u/RincoDTR (https://www.reddit.com/user/RincoDTR)
[link] (https://www.reddit.com/r/Pentesting/comments/10mg6me/few_question_about_pentesting/) [comments] (https://www.reddit.com/r/Pentesting/comments/10mg6me/few_question_about_pentesting/)