Hacking on Medium
The Top 6 Most Dangerous Malware Types

https://cdn-images-1.medium.com/max/2600/0*xgcAkyxqDELxRpGd.png
TL;DR- The most dangerous malware types out there are lurking in the shadows…

Continue reading on The Gray Area »

Hacking on Medium
Agent Sudo | TryHackMe

https://cdn-images-1.medium.com/max/1366/1*m3fWCzVivJPpjATRP0CWzg.png
We Started with Nmap Scan to know the open ports.

Continue reading on Medium »

Hacking on Medium
No-Fly List Hacked by a Furry

https://cdn-images-1.medium.com/max/1280/0*wiBxBqn87wvTvLtH.jpg
I don’t suggest reading the source material unless you’re brain has melted already

Continue reading on Medium »

Dark Reading: Attacks/Breaches
Enterprises Need to Do More to Assure Consumers About Privacy

Organizations care about data privacy, but their priorities appear to be different from what their customers think are important.

XSS, Flash Cross-Domain Policy, and CSRF Vulnerabilities Discovered on a Single Website

Hello everyone, my name is Koroush, (aka whiteOwl).  In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium »
Read more...

XSS, Flash Cross-Domain Policy, and CSRF Vulnerabilities Discovered on a Single Website
https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5

Hello everyone, my name is Koroush, (aka whiteOwl). 
In this write-up, I will be discussing the methods I used to bypass the site’s input…Continue reading on Medium » (https://medium.com/@koroush.pub/xss-flash-cross-domain-policy-and-csrf-vulnerabilities-discovered-on-a-single-website-4948dff4ec11?source=rss------bug_bounty-5)

Fintech bank app won’t respond to a really bad exploit
https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/

<!-- SC_OFF -->I found a bug in an iOS app of a financial institution! This bug is actually hilariously bad. Basically if you have a phone number you have that person credentials. No 2FA. It's literally driving me mad how this even happens. I'm talking this will give you SSN of the user EVERYTHING! This company I added Software engineers on Linkedln. Nothing ignored. I don't really know my next steps. I've done bug bounty a long time ago. This was stumbled on accident, and it's been over 2 weeks it's still works. This is pretty big "fintech bank" apps. What do I do should I just leave it, or disclose it publicly and watch the company burn to the ground like it should. <!-- SC_ON --> submitted by /u/Ehh8me (https://www.reddit.com/user/Ehh8me)
[link] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/) [comments] (https://www.reddit.com/r/Pentesting/comments/10n9z1t/fintech_bank_app_wont_respond_to_a_really_bad/)

Security jobs for junior positions
https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/

<!-- SC_OFF -->Hi everybody, I'm trying to find some open roles in security positions. I'm not starting from the scratch, I will get a master degree in cybersecurity in 3 months, I've experience with coding, open source on Github, bug bounty, CTFs, 2 CVEs, eJPT... The problem is that 99% of the roles companies are looking for are for highly skilled / experienced people (senior, staff, VC, manager etc..). Where I can find junior positions? Are there companies looking for those roles? Thanks. ​ (advices from experts are welcome :-) ) <!-- SC_ON --> submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/) [comments] (https://www.reddit.com/r/Pentesting/comments/10nawtm/security_jobs_for_junior_positions/)

Ödül Avcılığı — 403 Forbidden Bypass
https://medium.com/@el-cezeri/%C3%B6d%C3%BCl-avc%C4%B1l%C4%B1%C4%9F%C4%B1-403-forbidden-bypass-f8904345678?source=rss------bug_bounty-5

Merhaba arkadaşlar , bu yazımızda 403 kısıtlamasını aşmak için ne tür teknikler uygulayabiliriz ? Ve 403bypass aracını kullanarak hızlı…Continue reading on Medium » (https://medium.com/@el-cezeri/%C3%B6d%C3%BCl-avc%C4%B1l%C4%B1%C4%9F%C4%B1-403-forbidden-bypass-f8904345678?source=rss------bug_bounty-5)

Hacking on Medium
TryHackMe DNS In Detail Walkthrough

https://cdn-images-1.medium.com/max/663/1*ZlvtJsY2sqIjIx2k-2WMFA.png
One of the rooms found in the Pre Security ==>> How The Web Works path is DNS in Detail in which Learn how DNS works and how it helps you…

Continue reading on InfoSec Write-ups »

Hacking on Medium
Stay Ahead of the Curve: The Top Cybersecurity Skills in Demand for 2023

Cybersecurity is an ever-evolving field, and staying ahead of the curve is essential for professionals in this field. As we move into 2023…

Continue reading on Medium »

Security jobs for junior positions
https://www.reddit.com/r/redteamsec/comments/10naw90/security_jobs_for_junior_positions/

<!-- SC_OFF -->Hi everybody, I'm trying to find some open roles in security positions. I'm not starting from the scratch, I will get a master degree in cybersecurity in 3 months, I've experience with coding, open source on Github, bug bounty, CTFs, 2 CVEs, eJPT... The problem is that 99% of the roles companies are looking for are for highly skilled / experienced people (senior, staff, VC, manager etc..). Where I can find junior positions? Are there companies looking for those roles? Thanks. ​ (advices from experts are welcome :-) ) <!-- SC_ON --> submitted by /u/edoardottt (https://www.reddit.com/user/edoardottt)
[link] (https://www.reddit.com/r/redteamsec/comments/10naw90/security_jobs_for_junior_positions/) [comments] (https://www.reddit.com/r/redteamsec/comments/10naw90/security_jobs_for_junior_positions/)