XSS Vulnerability report writing 301 (redirect) to Bounty$$$
Overview: The purpose of this report is to document cross-site scripting (XSS) vulnerability discovered in the web application…Continue reading on Medium »
Read more...
Overview: The purpose of this report is to document cross-site scripting (XSS) vulnerability discovered in the web application…Continue reading on Medium »
Read more...
How a Simple IDOR Vulnerability Allowed Retrieving Any User’s PII Information
Dear readers,Continue reading on Medium »
Read more...
Dear readers,Continue reading on Medium »
Read more...
Local File Inclusion Vulnerability in Email Attachment Feature
Dear readers,Continue reading on Medium »
Read more...
Dear readers,Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
A Complete guide on how to learn 5 Phases of Ethical Hacking & Techniques, Tools used in each phase.
https://cdn-images-1.medium.com/max/1170/1*wI2H9WPm-uIz53OWilDwgw.png
Ethical hacking is the process of testing and assessing the security of a system or network by mimicking an attack. The objective is to…
Continue reading on Medium »
A Complete guide on how to learn 5 Phases of Ethical Hacking & Techniques, Tools used in each phase.
https://cdn-images-1.medium.com/max/1170/1*wI2H9WPm-uIz53OWilDwgw.png
Ethical hacking is the process of testing and assessing the security of a system or network by mimicking an attack. The objective is to…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Your next credit card might just land you in Business Class!
https://cdn-images-1.medium.com/max/600/1*N7n2QJ8Y6zHE6Q2R5K9RBg.png
Credit card rewards are great because you can use the points you earn to redeem hotel stays and airline tickets! Sometimes all you might…
Continue reading on Medium »
Your next credit card might just land you in Business Class!
https://cdn-images-1.medium.com/max/600/1*N7n2QJ8Y6zHE6Q2R5K9RBg.png
Credit card rewards are great because you can use the points you earn to redeem hotel stays and airline tickets! Sometimes all you might…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Learn Hackings
there are many legitimate ways to learn and practice ethical hacking skills. Here are a few suggestions
Continue reading on Medium »
Learn Hackings
there are many legitimate ways to learn and practice ethical hacking skills. Here are a few suggestions
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Leaving no trace behind, the “magic” dd command!
https://cdn-images-1.medium.com/max/2600/0*yTuZTwT1efR5gJy1
“dd = disk destroyer?” Just proceed with caution.
Continue reading on System Weakness »
Leaving no trace behind, the “magic” dd command!
https://cdn-images-1.medium.com/max/2600/0*yTuZTwT1efR5gJy1
“dd = disk destroyer?” Just proceed with caution.
Continue reading on System Weakness »
Change Any User Data on NFT Marketplace crosea.io
Kali ini saya mau share bagaimana cara saya menemukan sebuah bug pada NFT Marketplace crosea.io. Pertama selalu saya tegaskan pekerjaan…Continue reading on Medium »
Read more...
Kali ini saya mau share bagaimana cara saya menemukan sebuah bug pada NFT Marketplace crosea.io. Pertama selalu saya tegaskan pekerjaan…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
JWT Authentication
I am trying to get more information about JWT Authentication in Node.js. I am having trouble finding the vulnerabilities, as I have not yet had a ton of experience with JSON or JavaScript, but a link a friend sent me caught my eye. Of course, I have googled, but it still hasn't clicked in my mind. Why/how is it vulnerable? Example: Say I have credentials to a site that uses JWT Auth and sets the cookie as the JWT. Is there an inherent issue with this? My first guess would be MITM but I'm not sure if that applies.
Again, I am fairly new to this, so any help would be appreciated!
submitted by /u/USIntrepid
[link] [comments]
JWT Authentication
I am trying to get more information about JWT Authentication in Node.js. I am having trouble finding the vulnerabilities, as I have not yet had a ton of experience with JSON or JavaScript, but a link a friend sent me caught my eye. Of course, I have googled, but it still hasn't clicked in my mind. Why/how is it vulnerable? Example: Say I have credentials to a site that uses JWT Auth and sets the cookie as the JWT. Is there an inherent issue with this? My first guess would be MITM but I'm not sure if that applies.
Again, I am fairly new to this, so any help would be appreciated!
submitted by /u/USIntrepid
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Easy Way To PrintNightmare CVE-2021–34527 PoC
https://cdn-images-1.medium.com/max/1456/0*Bq6VyRmYQXZERE8y
The print spooler service is started as the system account which is the highest account in windows that you can take over. You will trick…
Continue reading on Medium »
Easy Way To PrintNightmare CVE-2021–34527 PoC
https://cdn-images-1.medium.com/max/1456/0*Bq6VyRmYQXZERE8y
The print spooler service is started as the system account which is the highest account in windows that you can take over. You will trick…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Using ‘CUPP’ tool by Mebus to Generate Customized Wordlists.
https://cdn-images-1.medium.com/max/2600/0*pVzD89rBGNZ1XVwW
Attempting to generate a customized wordlist based on the details of a target using the ‘Common User Password Profiler’ Tool aka CUFF…
Continue reading on Medium »
Using ‘CUPP’ tool by Mebus to Generate Customized Wordlists.
https://cdn-images-1.medium.com/max/2600/0*pVzD89rBGNZ1XVwW
Attempting to generate a customized wordlist based on the details of a target using the ‘Common User Password Profiler’ Tool aka CUFF…
Continue reading on Medium »