Finding XML Vulnerabilities in Code!
https://hackstacksecure.com/blogs/finding-xml-vulnerabilities-in-code
—— Hackstack Security ——
@hackstacksecurity
Follow Us On Twitter: https://twitter.com/hackstacksec
Contact Us: https://hackstacksecure.com/contact
https://hackstacksecure.com/blogs/finding-xml-vulnerabilities-in-code
—— Hackstack Security ——
@hackstacksecurity
Follow Us On Twitter: https://twitter.com/hackstacksec
Contact Us: https://hackstacksecure.com/contact
Hackstacksecure
Blogs (Finding XML Vulnerabilities in Code) • Hackstack Security
Top 10 Tools for Bug Bounty Hunting
Core Tools
1. Burp Suite:
The most essential tool for web application security testing. It offers a comprehensive suite of features for intercepting, modifying, and analyzing web traffic.
2. Nmap: A versatile network scanning tool used for discovering hosts, services, and vulnerabilities on a network.
3. FFUF: A fast web fuzzer that helps in discovering hidden directories, files, and parameters.
Intelligence Gathering
4. Amass: An open-source tool for conducting subdomain enumeration and asset discovery.
5. ReconFTW: Open-source reconnaissance tool for gathering information.
Vulnerability Scanning and Exploitation
6. Nuclei: A fast and lightweight vulnerability scanner for finding vulnerabilities using YAML-based templates.
7. SQLmap: A powerful penetration testing framework for SQL injection and database takeover.
8. WPScan: Specifically designed for WordPress vulnerability scanning.
Additional Tools:
9. Kali Linux: A Debian-based Linux distribution with a pre-installed set of penetration testing tools.
10. Wireshark: A packet analyzer for capturing and analyzing network traffic.
I know these are just few of them! Add more in the comments.
Core Tools
1. Burp Suite:
The most essential tool for web application security testing. It offers a comprehensive suite of features for intercepting, modifying, and analyzing web traffic.
2. Nmap: A versatile network scanning tool used for discovering hosts, services, and vulnerabilities on a network.
3. FFUF: A fast web fuzzer that helps in discovering hidden directories, files, and parameters.
Intelligence Gathering
4. Amass: An open-source tool for conducting subdomain enumeration and asset discovery.
5. ReconFTW: Open-source reconnaissance tool for gathering information.
Vulnerability Scanning and Exploitation
6. Nuclei: A fast and lightweight vulnerability scanner for finding vulnerabilities using YAML-based templates.
7. SQLmap: A powerful penetration testing framework for SQL injection and database takeover.
8. WPScan: Specifically designed for WordPress vulnerability scanning.
Additional Tools:
9. Kali Linux: A Debian-based Linux distribution with a pre-installed set of penetration testing tools.
10. Wireshark: A packet analyzer for capturing and analyzing network traffic.
I know these are just few of them! Add more in the comments.
Android Game Hacking: Increase money in Dude Theft Wars Shooting
https://8ksec.io/hacking-android-games/
https://8ksec.io/hacking-android-games/
8kSec
Hacking Android Games | 8kSec
Learn techniques for hacking Android games and understand the differences between app hacking and game hacking within the Android ecosystem.
The 5 Most Used Security Frameworks
1. ISO 27001:
- Leading in recognition, it offers a comprehensive approach to information security.
2. NIST Cybersecurity Framework:
- More common in the USA to manage cybersecurity risks.
3. CIS Controls:
- Simple and effective best practices for cybersecurity.
4. COBIT:
- Focuses on governance and management of enterprise IT.
5. PCI DSS:
- Essential for all organizations that process credit card transactions.
And Why Does ISO 27001 Certification Stand at the Top?
- Universal Recognition: ISO 27001 is globally recognized and respected.
- Flexibility: Suitable for companies of every size and industry.
- Risk Management: Provides a solid framework for managing security risks.
- Building Trust: Signals to customers and partners that their data is secure.
- Competitive Advantage: Can open the door to new business opportunities.
More: https://www.getronics.com/the-top-five-cyber-security-frameworks/
More: https://complianceforge.com/solutions/nist-csf
1. ISO 27001:
- Leading in recognition, it offers a comprehensive approach to information security.
2. NIST Cybersecurity Framework:
- More common in the USA to manage cybersecurity risks.
3. CIS Controls:
- Simple and effective best practices for cybersecurity.
4. COBIT:
- Focuses on governance and management of enterprise IT.
5. PCI DSS:
- Essential for all organizations that process credit card transactions.
And Why Does ISO 27001 Certification Stand at the Top?
- Universal Recognition: ISO 27001 is globally recognized and respected.
- Flexibility: Suitable for companies of every size and industry.
- Risk Management: Provides a solid framework for managing security risks.
- Building Trust: Signals to customers and partners that their data is secure.
- Competitive Advantage: Can open the door to new business opportunities.
More: https://www.getronics.com/the-top-five-cyber-security-frameworks/
More: https://complianceforge.com/solutions/nist-csf
Getronics
The top five cyber security frameworks
Cyber security frameworks provide an excellent basis for building your cyber strategy. These are five of the best frameworks to get started with.
Todays's Bug Bounty Blogs #9
1)Stored XSS in LibreOffice
https://bunny0417.medium.com/stored-xss-in-libreoffice-ed4ad22e0f56
2)FIRST CTF Forensics
https://systemweakness.com/first-ctf-forensics-d0cb0ebf59b7
3)The “Filing Problem”: DoD Cyber Sentinel Challenge (May 2024 CTF Writeup)
https://medium.com/@sagemd/the-filing-problem-dod-cyber-sentinel-challenge-may-2024-ctf-writeup-2e3e1e5fb10b
4)CyberTalents Penetration Testing Internship Program 2024 [CTF]
https://medium.com/@Zero-Ray/cybertalents-penetration-testing-internship-program-2024-ctf-64167ecc51ff
5)Fixme1.py-Beginner PicoMini 2022
https://medium.com/@bridget4/fixme-py-beginner-picomini-2022-ab7222d848f5
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
1)Stored XSS in LibreOffice
https://bunny0417.medium.com/stored-xss-in-libreoffice-ed4ad22e0f56
2)FIRST CTF Forensics
https://systemweakness.com/first-ctf-forensics-d0cb0ebf59b7
3)The “Filing Problem”: DoD Cyber Sentinel Challenge (May 2024 CTF Writeup)
https://medium.com/@sagemd/the-filing-problem-dod-cyber-sentinel-challenge-may-2024-ctf-writeup-2e3e1e5fb10b
4)CyberTalents Penetration Testing Internship Program 2024 [CTF]
https://medium.com/@Zero-Ray/cybertalents-penetration-testing-internship-program-2024-ctf-64167ecc51ff
5)Fixme1.py-Beginner PicoMini 2022
https://medium.com/@bridget4/fixme-py-beginner-picomini-2022-ab7222d848f5
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
Windows Malware Development
https://0xpat.github.io/Malware_development_part_1/
https://0xpat.github.io/Malware_development_part_2/
https://0xpat.github.io/Malware_development_part_3/
https://0xpat.github.io/Malware_development_part_4/
https://0xpat.github.io/Malware_development_part_5/
https://0xpat.github.io/Malware_development_part_6/
https://0xpat.github.io/Malware_development_part_7/
https://0xpat.github.io/Malware_development_part_8/
https://0xpat.github.io/Malware_development_part_9/
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
https://0xpat.github.io/Malware_development_part_1/
https://0xpat.github.io/Malware_development_part_2/
https://0xpat.github.io/Malware_development_part_3/
https://0xpat.github.io/Malware_development_part_4/
https://0xpat.github.io/Malware_development_part_5/
https://0xpat.github.io/Malware_development_part_6/
https://0xpat.github.io/Malware_development_part_7/
https://0xpat.github.io/Malware_development_part_8/
https://0xpat.github.io/Malware_development_part_9/
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
0xpat.github.io
Malware development part 1 - basics
Introduction
This is the first post of a series which regards development of malicious software. In this series we will explore and try to implement multiple techniques used by malicious applications to execute code, hide from defenses and persist.
Let’s…
This is the first post of a series which regards development of malicious software. In this series we will explore and try to implement multiple techniques used by malicious applications to execute code, hide from defenses and persist.
Let’s…
Forwarded from 100xSecurity
Todays's Bug Bounty Blogs #10
1)“My Journey to Earning the First Bounty”
https://medium.com/@asharm.khan7/my-journey-to-earning-the-first-bounty-5314d1780f84
2)Git Exposure: How a Simple Oversight Led to a Critical Security Flaw
https://blog.lohigowda.in/git-exposure-led-to-critical-security-flaw
3)TryHackMe: Wireshark Basics
https://medium.com/@manish0x/tryhackme-wireshark-basics-d01a73297870
4)Day Four — DailyCTF Challenge Writeup
https://medium.com/@erichdryn/day-four-dailyctf-challenge-writeup-7bdba9f6310f
5)FixMe2.py - Beginner PicoMini 2022
https://medium.com/@bridget4/fixme2-py-beginner-picomini-2022-65b7256ced3b
6)Packet Operations with Wireshark
https://medium.com/@manish0x/packet-operations-with-wireshark-d1ef41b1dba9
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@thecybersecuritychannel
@HackstackSecurity
1)“My Journey to Earning the First Bounty”
https://medium.com/@asharm.khan7/my-journey-to-earning-the-first-bounty-5314d1780f84
2)Git Exposure: How a Simple Oversight Led to a Critical Security Flaw
https://blog.lohigowda.in/git-exposure-led-to-critical-security-flaw
3)TryHackMe: Wireshark Basics
https://medium.com/@manish0x/tryhackme-wireshark-basics-d01a73297870
4)Day Four — DailyCTF Challenge Writeup
https://medium.com/@erichdryn/day-four-dailyctf-challenge-writeup-7bdba9f6310f
5)FixMe2.py - Beginner PicoMini 2022
https://medium.com/@bridget4/fixme2-py-beginner-picomini-2022-65b7256ced3b
6)Packet Operations with Wireshark
https://medium.com/@manish0x/packet-operations-with-wireshark-d1ef41b1dba9
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@thecybersecuritychannel
@HackstackSecurity
Today's Bug Bounty Blogs #11
1)Account takeover on 8 years old public program
https://medium.com/@pranshux0x/account-takeover-on-8-years-old-public-program-c0c0a30cfdd2
2)New Reconnaissance Methodologies/Tools for Bug Bounty Hunting & Ethical Hacking
https://medium.com/@retr0x/new-reconnaissance-methodologies-tools-for-bug-bounty-hunting-ethical-hacking-be7ca14a7ae2
3)Beginners guide to solving Image Based CTF Challenges
https://blog.pannagkumaar.live/beginners-guide-to-solving-image-based-ctf-challenges-9e998a92167d
4)Matrix: 1 Vulnhub Walkthrough
https://medium.com/@z6157881/matrix-1-vulnhub-walkthrough-36f832d14f57
5)ROAD — CTF Full Walkthrough -TryHackMe
https://medium.com/@lidorrocah123/road-ctf-full-walkthrough-tryhackme-8ffb97d700f4
6)Headers? — DailyCTF Challenge Writeup
https://medium.com/@erichdryn/headers-dailyctf-challenge-writeup-a4d4e195e808
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
1)Account takeover on 8 years old public program
https://medium.com/@pranshux0x/account-takeover-on-8-years-old-public-program-c0c0a30cfdd2
2)New Reconnaissance Methodologies/Tools for Bug Bounty Hunting & Ethical Hacking
https://medium.com/@retr0x/new-reconnaissance-methodologies-tools-for-bug-bounty-hunting-ethical-hacking-be7ca14a7ae2
3)Beginners guide to solving Image Based CTF Challenges
https://blog.pannagkumaar.live/beginners-guide-to-solving-image-based-ctf-challenges-9e998a92167d
4)Matrix: 1 Vulnhub Walkthrough
https://medium.com/@z6157881/matrix-1-vulnhub-walkthrough-36f832d14f57
5)ROAD — CTF Full Walkthrough -TryHackMe
https://medium.com/@lidorrocah123/road-ctf-full-walkthrough-tryhackme-8ffb97d700f4
6)Headers? — DailyCTF Challenge Writeup
https://medium.com/@erichdryn/headers-dailyctf-challenge-writeup-a4d4e195e808
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
Free Cybersecurity Certifications in 2024
Those who are starting out in cybersecurity, these courses and certifications might help you a lot!
https://x.com/hetmehtaa/status/1826108930533253624
Those who are starting out in cybersecurity, these courses and certifications might help you a lot!
https://x.com/hetmehtaa/status/1826108930533253624
X (formerly Twitter)
Het Mehta (@hetmehtaa) on X
(Free) Cybersecurity Certifications in 2024
#Infosec Thread👇
#Infosec Thread👇
👨💻👉40 Commonly Targeted Ports by Hackers:
🔒 Port 21 (FTP)
🚪 Port 22 (SSH)
💻 Port 23 (Telnet)
📧 Port 25 (SMTP)
🌐 Port 53 (DNS)
🌐 Port 80 (HTTP)
🔒 Port 443 (HTTPS)
🎮 Port 3074 (Xbox Live)
📲 Port 5060 (SIP)
🎲 Port 8080 (Proxy)
📁 Port 135 (RPC)
🖥️ Port 139 (NetBIOS)
🔓 Port 1433 (MSSQL)
🎲 Port 1521 (Oracle)
🔓 Port 1723 (PPTP)
📤 Port 1900 (UPnP)
🎮 Port 2302 (DayZ)
🖨️ Port 3389 (RDP)
🔒 Port 3306 (MySQL)
🕸️ Port 4000 (Elasticsearch)
📂 Port 4444 (Metasploit)
📤 Port 5000 (Python Flask)
🎮 Port 5555 (Android Debug Bridge)
📤 Port 5900 (VNC)
🖥️ Port 6667 (IRC)
📧 Port 6697 (IRC SSL)
📂 Port 8000 (HTTP Alt)
🖥️ Port 8081 (HTTP Proxy)
🔓 Port 9100 (Printer)
📂 Port 9090 (Web Debugging)
📁 Port 445 (SMB)
💻 Ports 5985/5986 (WinRM)
🔄 Port 6379 (Redis)
📂 Port 6666 (IRC)
📧 Port 993 (IMAP SSL)
🔒 Port 995 (POP3 SSL)
🎲 Port 1434 (Microsoft SQL Monitor)
📂 Port 27017 (MongoDB)
🌐 Port 28017 (MongoDB HTTP Interface)
🔒 Port 21 (FTP)
🚪 Port 22 (SSH)
💻 Port 23 (Telnet)
📧 Port 25 (SMTP)
🌐 Port 53 (DNS)
🌐 Port 80 (HTTP)
🔒 Port 443 (HTTPS)
🎮 Port 3074 (Xbox Live)
📲 Port 5060 (SIP)
🎲 Port 8080 (Proxy)
📁 Port 135 (RPC)
🖥️ Port 139 (NetBIOS)
🔓 Port 1433 (MSSQL)
🎲 Port 1521 (Oracle)
🔓 Port 1723 (PPTP)
📤 Port 1900 (UPnP)
🎮 Port 2302 (DayZ)
🖨️ Port 3389 (RDP)
🔒 Port 3306 (MySQL)
🕸️ Port 4000 (Elasticsearch)
📂 Port 4444 (Metasploit)
📤 Port 5000 (Python Flask)
🎮 Port 5555 (Android Debug Bridge)
📤 Port 5900 (VNC)
🖥️ Port 6667 (IRC)
📧 Port 6697 (IRC SSL)
📂 Port 8000 (HTTP Alt)
🖥️ Port 8081 (HTTP Proxy)
🔓 Port 9100 (Printer)
📂 Port 9090 (Web Debugging)
📁 Port 445 (SMB)
💻 Ports 5985/5986 (WinRM)
🔄 Port 6379 (Redis)
📂 Port 6666 (IRC)
📧 Port 993 (IMAP SSL)
🔒 Port 995 (POP3 SSL)
🎲 Port 1434 (Microsoft SQL Monitor)
📂 Port 27017 (MongoDB)
🌐 Port 28017 (MongoDB HTTP Interface)
Today's Bug Bounty Blogs #12
1)Breaking the Barrier: Admin Panel Takeover Worth $3500
https://assassin-marcos.medium.com/breaking-the-barrier-admin-panel-takeover-worth-3500-78da79089ca3
2bugbounty #bugbountytip #bugbountytipsead to a Staging Environment with User Enumeration
https://ay0ub-n0uri.medium.com/a-critical-403-bypass-vulnerability-lead-to-a-staging-environment-with-user-enumeration-25b94ebadcfa
3)Reverse Engineering 101 : Transformation
https://medium.com/@krizzsrivastava/reverse-engineering-101-transformation-04de05821bb9
4)10 Essential OSINT CTF Challenges for Every Investigator
https://medium.com/@ninamaelainine/10-essential-osint-ctf-challenges-for-every-investigator-c573d75dc4cd
5)Cybersploit :1 vulnhub walkthrough
https://medium.com/@z6157881/cybersploit-1-vulnhub-walkthrough-8537c7b71dcf
1)Breaking the Barrier: Admin Panel Takeover Worth $3500
https://assassin-marcos.medium.com/breaking-the-barrier-admin-panel-takeover-worth-3500-78da79089ca3
2bugbounty #bugbountytip #bugbountytipsead to a Staging Environment with User Enumeration
https://ay0ub-n0uri.medium.com/a-critical-403-bypass-vulnerability-lead-to-a-staging-environment-with-user-enumeration-25b94ebadcfa
3)Reverse Engineering 101 : Transformation
https://medium.com/@krizzsrivastava/reverse-engineering-101-transformation-04de05821bb9
4)10 Essential OSINT CTF Challenges for Every Investigator
https://medium.com/@ninamaelainine/10-essential-osint-ctf-challenges-for-every-investigator-c573d75dc4cd
5)Cybersploit :1 vulnhub walkthrough
https://medium.com/@z6157881/cybersploit-1-vulnhub-walkthrough-8537c7b71dcf
Top 100+ Web Vulnerabilities, Categorised Into Various Types:
> Injection Vulnerabilities
1. SQL Injection (SQLi)
2. Cross-Site Scripting (XSS)
3. Cross-Site Request Forgery (CSRF)
4. Remote Code Execution (RCE)
5. Command Injection
6. XML Injection
7. LDAP Injection
8. XPath Injection
9. HTML Injection
10. Server-Side Includes (SSI) Injection
11. OS Command Injection
12. Blind SQL Injection
13. Server-Side Template Injection (SSTI)
14. CRLF Injection
15. NoSQL Injection
16. HQL Injection
> Broken Authentication and Session Management
17. Session Fixation
18. Brute Force Attack
19. Session Hijacking
20. Password Cracking
21. Weak Password Storage
22. Insecure Authentication
23. Cookie Theft
24. Credential Reuse
25. Insecure Login Pages
26. Insecure Session IDs
27. Predictable Login Credentials
> Sensitive Data Exposure
28. Inadequate Encryption
29. Insecure Direct Object References (IDOR)
30. Unencrypted Data Storage
31. Missing Security Headers
32. Insecure File Handling
33. Information Leakage in Logs
34. Hardcoded Secrets
> Security Misconfiguration
35. Default Passwords
36. Directory Listing
37. Unprotected API Endpoints
38. Open Ports and Services
39. Misconfigured Error Handling
40. Stack Traces Exposed
41. Verbose Error Messages
42. Insecure Default Configurations
43. Insufficient Backup Procedures
44. Misconfigured Security Headers (e.g., X-Frame-Options)
> Improper Access Controls
45. Information Disclosure
46. Unpatched Software
47. Misconfigured CORS
48. HTTP Security Headers Misconfiguration
49. Lack of Access Control on Administrative Interfaces
50. Directory Traversal
51. Weak File Permissions
> XML-Related Vulnerabilities
52. XML External Entity (XXE) Injection
53. XML Entity Expansion (XEE)
54. XML Bomb
55. XML Signature Wrapping
> Broken Access Control
56. Inadequate Authorization
57. Privilege Escalation
58. Forceful Browsing
59. Missing Function-Level Access Control
60. Unvalidated Redirects and Forwards
61. Excessive Data Exposure
> Insecure Deserialization
62. Remote Code Execution via Deserialization
63. Data Tampering
64. Object Injection
65. Type Confusion
> API Security Issues
66. Insecure API Endpoints
67. API Key Exposure
68. Lack of Rate Limiting
69. Inadequate Input Validation
70. Lack of Proper Authentication
71. Improper API Endpoint Security
> Insecure Communication
72. Man-in-the-Middle (MITM) Attack
73. Insufficient Transport Layer Security (TLS)
74. Insecure SSL/TLS Configuration
75. Insecure Communication Protocols
76. Deprecated Cryptographic Algorithms
77. Lack of Encryption in Transit
> Client-Side Vulnerabilities
78. DOM-based XSS
79. Insecure Cross-Origin Communication
80. Browser Cache Poisoning
81. Clickjacking
82. HTML5 Security Issues
83. Client-Side URL Redirection
84. Form Hijacking
85. WebSocket Security Issues
> Denial of Service (DoS)
86. Distributed Denial of Service (DDoS)
87. Application Layer DoS
88. Resource Exhaustion
89. Slowloris Attack
90. XML Denial of Service
91. HTTP Flood Attack
92. UDP Amplification Attack
> Other Web Vulnerabilities
93. Server-Side Request Forgery (SSRF)
94. HTTP Parameter Pollution (HPP)
95. Insecure Redirects and Forwards
96. File Inclusion Vulnerabilities (LFI/RFI)
97. Security Header Bypass
98. Inadequate Session Timeout
99. Insufficient Logging and Monitoring
100. Business Logic Vulnerabilities
101. API Abuse
102. JSON Web Token (JWT) Security Issues
103. Insufficient Anti-Automation Measures
> Mobile Web Vulnerabilities
104. Insecure Data Storage on Mobile Devices
105. Insecure Data Transmission on Mobile Devices
106. Insecure Mobile API Endpoints
107. Mobile App Reverse Engineering
108. Weak Mobile Authentication and Authorization
Missed anything? Comment & let everyone know!
Do you want a detailed blog on any vulnerability? let me know in a comments and I'll share!
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
> Injection Vulnerabilities
1. SQL Injection (SQLi)
2. Cross-Site Scripting (XSS)
3. Cross-Site Request Forgery (CSRF)
4. Remote Code Execution (RCE)
5. Command Injection
6. XML Injection
7. LDAP Injection
8. XPath Injection
9. HTML Injection
10. Server-Side Includes (SSI) Injection
11. OS Command Injection
12. Blind SQL Injection
13. Server-Side Template Injection (SSTI)
14. CRLF Injection
15. NoSQL Injection
16. HQL Injection
> Broken Authentication and Session Management
17. Session Fixation
18. Brute Force Attack
19. Session Hijacking
20. Password Cracking
21. Weak Password Storage
22. Insecure Authentication
23. Cookie Theft
24. Credential Reuse
25. Insecure Login Pages
26. Insecure Session IDs
27. Predictable Login Credentials
> Sensitive Data Exposure
28. Inadequate Encryption
29. Insecure Direct Object References (IDOR)
30. Unencrypted Data Storage
31. Missing Security Headers
32. Insecure File Handling
33. Information Leakage in Logs
34. Hardcoded Secrets
> Security Misconfiguration
35. Default Passwords
36. Directory Listing
37. Unprotected API Endpoints
38. Open Ports and Services
39. Misconfigured Error Handling
40. Stack Traces Exposed
41. Verbose Error Messages
42. Insecure Default Configurations
43. Insufficient Backup Procedures
44. Misconfigured Security Headers (e.g., X-Frame-Options)
> Improper Access Controls
45. Information Disclosure
46. Unpatched Software
47. Misconfigured CORS
48. HTTP Security Headers Misconfiguration
49. Lack of Access Control on Administrative Interfaces
50. Directory Traversal
51. Weak File Permissions
> XML-Related Vulnerabilities
52. XML External Entity (XXE) Injection
53. XML Entity Expansion (XEE)
54. XML Bomb
55. XML Signature Wrapping
> Broken Access Control
56. Inadequate Authorization
57. Privilege Escalation
58. Forceful Browsing
59. Missing Function-Level Access Control
60. Unvalidated Redirects and Forwards
61. Excessive Data Exposure
> Insecure Deserialization
62. Remote Code Execution via Deserialization
63. Data Tampering
64. Object Injection
65. Type Confusion
> API Security Issues
66. Insecure API Endpoints
67. API Key Exposure
68. Lack of Rate Limiting
69. Inadequate Input Validation
70. Lack of Proper Authentication
71. Improper API Endpoint Security
> Insecure Communication
72. Man-in-the-Middle (MITM) Attack
73. Insufficient Transport Layer Security (TLS)
74. Insecure SSL/TLS Configuration
75. Insecure Communication Protocols
76. Deprecated Cryptographic Algorithms
77. Lack of Encryption in Transit
> Client-Side Vulnerabilities
78. DOM-based XSS
79. Insecure Cross-Origin Communication
80. Browser Cache Poisoning
81. Clickjacking
82. HTML5 Security Issues
83. Client-Side URL Redirection
84. Form Hijacking
85. WebSocket Security Issues
> Denial of Service (DoS)
86. Distributed Denial of Service (DDoS)
87. Application Layer DoS
88. Resource Exhaustion
89. Slowloris Attack
90. XML Denial of Service
91. HTTP Flood Attack
92. UDP Amplification Attack
> Other Web Vulnerabilities
93. Server-Side Request Forgery (SSRF)
94. HTTP Parameter Pollution (HPP)
95. Insecure Redirects and Forwards
96. File Inclusion Vulnerabilities (LFI/RFI)
97. Security Header Bypass
98. Inadequate Session Timeout
99. Insufficient Logging and Monitoring
100. Business Logic Vulnerabilities
101. API Abuse
102. JSON Web Token (JWT) Security Issues
103. Insufficient Anti-Automation Measures
> Mobile Web Vulnerabilities
104. Insecure Data Storage on Mobile Devices
105. Insecure Data Transmission on Mobile Devices
106. Insecure Mobile API Endpoints
107. Mobile App Reverse Engineering
108. Weak Mobile Authentication and Authorization
Missed anything? Comment & let everyone know!
Do you want a detailed blog on any vulnerability? let me know in a comments and I'll share!
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
Today's Bug Bounty Blogs #13
1) Full Account Takeover | H1 Report
https://hackerone.com/reports/2542372
2) Open S3 Buckets Through Reconnaissance
https://offsec01.medium.com/open-s3-buckets-through-reconnaissance-920f8b35be47
3) My journey towards Bug Bounty and Ambassador World Cup 2023 Recap
https://g0ndaar.medium.com/my-journey-towards-bug-bounty-and-ambassador-world-cup-2023-recap-bc5fc1d00e72
4) Sauna Walkthrough — Hack The Box
https://systemweakness.com/sauna-walkthrough-hack-the-box-2cdc5d3c4a56
5) Sunset vulnhub-CTF Challenge
https://medium.com/@far44hana22/sunset-vulnhub-walkthrough-48cd1459113d
6) Broker Tryhackme Writeup
https://bevijaygupta.medium.com/broker-tryhackme-writeup-b77b503e6a71
1) Full Account Takeover | H1 Report
https://hackerone.com/reports/2542372
2) Open S3 Buckets Through Reconnaissance
https://offsec01.medium.com/open-s3-buckets-through-reconnaissance-920f8b35be47
3) My journey towards Bug Bounty and Ambassador World Cup 2023 Recap
https://g0ndaar.medium.com/my-journey-towards-bug-bounty-and-ambassador-world-cup-2023-recap-bc5fc1d00e72
4) Sauna Walkthrough — Hack The Box
https://systemweakness.com/sauna-walkthrough-hack-the-box-2cdc5d3c4a56
5) Sunset vulnhub-CTF Challenge
https://medium.com/@far44hana22/sunset-vulnhub-walkthrough-48cd1459113d
6) Broker Tryhackme Writeup
https://bevijaygupta.medium.com/broker-tryhackme-writeup-b77b503e6a71
🔥1
Today's Bug Bounty Blogs #14
1)2FA Bypass - IDN Mischief
https://shahjerry33.medium.com/2fa-bypass-idn-mischief-157f06cb6904
2)Two Factor Authentication Bypass via using Victim’s DeviceID
https://medium.com/@cyberpro151/two-factor-authentication-bypass-via-using-victims-deviceid-b46afb4fe7a5
3)Burp Suite Filtering Trick — Reducing Log Noise with TLS Pass-Through
https://theshaco.com/burp-suite-filtering-trick-reducing-log-noise-with-tls-pass-through-468d00fbc7dc
4)Hacking Large Corporations: The Art and Science of Reconnaissance
https://harshit3.medium.com/hacking-large-corporations-the-art-and-science-of-reconnaissance-1a6fc8f90616
More 4 Blogs to Read:
https://x.com/hetmehtaa/status/1827590184881598843
1)2FA Bypass - IDN Mischief
https://shahjerry33.medium.com/2fa-bypass-idn-mischief-157f06cb6904
2)Two Factor Authentication Bypass via using Victim’s DeviceID
https://medium.com/@cyberpro151/two-factor-authentication-bypass-via-using-victims-deviceid-b46afb4fe7a5
3)Burp Suite Filtering Trick — Reducing Log Noise with TLS Pass-Through
https://theshaco.com/burp-suite-filtering-trick-reducing-log-noise-with-tls-pass-through-468d00fbc7dc
4)Hacking Large Corporations: The Art and Science of Reconnaissance
https://harshit3.medium.com/hacking-large-corporations-the-art-and-science-of-reconnaissance-1a6fc8f90616
More 4 Blogs to Read:
https://x.com/hetmehtaa/status/1827590184881598843
Google Dorks for Bug Bounty | Find Sensitive Information
1. Discovering Exposed Files:
- intitle:"index of" "site:http://site.com"
- filetype:log inurl:log site:http://site.com
- filetype:sql inurl:sql site:http://site.com
- filetype:env inurl:.env site:http://site.com
2. Finding Sensitive Directories:
- inurl:/phpinfo.php site:http://site.com
- inurl:/admin site:http://site.com
- inurl:/backup site:http://site.com
- inurl:wp- site:http://site.com
3. Exposed Configuration Files:
- filetype:config inurl:config site:http://site.com
- filetype:ini inurl:wp-config.php site:http://site.com
- filetype:json inurl:credentials site:http://site.com
4. Discovering Usernames and Passwords:
- intext:"password" filetype:log site:http://site.com
- intext:"username" filetype:log site:http://site.com
- filetype:sql "password" site:http://site.com
5. Finding Database Files:
- filetype:sql inurl:db site:http://site.com
- filetype:sql inurl:dump site:http://site.com
- filetype:bak inurl:db site:http://site.com
6. Exposed Git Repositories:
- inurl:".git" site:http://site.com
- inurl:"/.git/config" site:http://site.com
- intitle:"index of" ".git" site:http://site.com
7. Finding Publicly Exposed Emails:
- intext:"email" site:http://site.com
- inurl:"contact" intext:"
@site
.com" -www.site.com
- filetype:xls inurl:"email" site:http://site.com
8. Discovering Vulnerable Web Servers:
- intitle:"Apache2 Ubuntu Default Page: It works" site:http://site.com
- intitle:"Index of /" "Apache Server" site:http://site.com
- intitle:"Welcome to nginx" site:http://site.com
9. Finding API Keys:
- filetype:env "DB_PASSWORD" site:http://site.com
- intext:"api_key" filetype:env site:http://site.com
- intext:"AWS_ACCESS_KEY_ID" filetype:env site:http://site.com
10. Exposed Backup Files:
- filetype:bak inurl:backup site:http://site.com
- filetype:bak inurl:backup site:http://site.com
- filetype:zip inurl:backup site:http://site.com
- filetype:tgz inurl:backup site:http://site.com
#infosec #bugbounty #bugbountytips #100xSecurity #Hacking
1. Discovering Exposed Files:
- intitle:"index of" "site:http://site.com"
- filetype:log inurl:log site:http://site.com
- filetype:sql inurl:sql site:http://site.com
- filetype:env inurl:.env site:http://site.com
2. Finding Sensitive Directories:
- inurl:/phpinfo.php site:http://site.com
- inurl:/admin site:http://site.com
- inurl:/backup site:http://site.com
- inurl:wp- site:http://site.com
3. Exposed Configuration Files:
- filetype:config inurl:config site:http://site.com
- filetype:ini inurl:wp-config.php site:http://site.com
- filetype:json inurl:credentials site:http://site.com
4. Discovering Usernames and Passwords:
- intext:"password" filetype:log site:http://site.com
- intext:"username" filetype:log site:http://site.com
- filetype:sql "password" site:http://site.com
5. Finding Database Files:
- filetype:sql inurl:db site:http://site.com
- filetype:sql inurl:dump site:http://site.com
- filetype:bak inurl:db site:http://site.com
6. Exposed Git Repositories:
- inurl:".git" site:http://site.com
- inurl:"/.git/config" site:http://site.com
- intitle:"index of" ".git" site:http://site.com
7. Finding Publicly Exposed Emails:
- intext:"email" site:http://site.com
- inurl:"contact" intext:"
@site
.com" -www.site.com
- filetype:xls inurl:"email" site:http://site.com
8. Discovering Vulnerable Web Servers:
- intitle:"Apache2 Ubuntu Default Page: It works" site:http://site.com
- intitle:"Index of /" "Apache Server" site:http://site.com
- intitle:"Welcome to nginx" site:http://site.com
9. Finding API Keys:
- filetype:env "DB_PASSWORD" site:http://site.com
- intext:"api_key" filetype:env site:http://site.com
- intext:"AWS_ACCESS_KEY_ID" filetype:env site:http://site.com
10. Exposed Backup Files:
- filetype:bak inurl:backup site:http://site.com
- filetype:bak inurl:backup site:http://site.com
- filetype:zip inurl:backup site:http://site.com
- filetype:tgz inurl:backup site:http://site.com
#infosec #bugbounty #bugbountytips #100xSecurity #Hacking
👍1
Today's Bug Bounty Blogs #16
1)How I Bypassed 2FA and Earned My First Bounty $$$
https://anonysm.medium.com/how-i-bypassed-2fa-and-earned-my-first-bounty-3fdc58938347
2)Information Disclosure : 80+ Emails and LongID Disclosed !!
https://pushkarhax.medium.com/information-disclosure-80-emails-and-longid-disclosed-8952e2c6978b
3)Bug Bounty Methodology — Step By Step Guide To Find Subdomains And Vulnerable URLs
https://medium.com/@shaikhminhaz1975/bug-bounty-methodology-step-by-step-guide-to-find-subdomains-and-vulnerable-urls-18bdd76e979f
4)Exposing Database Creds via SVN: A $400 Discovery
https://infosecwriteups.com/exposing-source-code-via-svn-a-400-discovery-9fc54b3f3f31
5)Blind SSRF vulnerability on 'cz.acronis.com'
https://hackerone.com/reports/1086206
6)Hack Your First PC: Ep.7 — Demonstrate Your Skills
https://medium.com/@joshuapiesta/hack-your-first-pc-ep-7-demonstrate-your-skills-96930dea103d
7)Free CTF Challenge Pack: Easy Setup, Big Impact
https://medium.com/@josh.beck2006/free-ctf-challenge-pack-easy-setup-big-impact-142aee19b78e
8)IO Netgarage Levels 1 and 2 Walkthrough
https://systemweakness.com/io-netgarage-levels-1-and-2-walkthrough-66b60fb9e16e
9)picoCTF writeup: repetitions
https://medium.com/@omstaendlig/picoctf-writeup-repetitions-e37aa158416d
Hope you'll enjoy reading these blogs on Bug Bounty and CTFs, Keep Sharing!
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
1)How I Bypassed 2FA and Earned My First Bounty $$$
https://anonysm.medium.com/how-i-bypassed-2fa-and-earned-my-first-bounty-3fdc58938347
2)Information Disclosure : 80+ Emails and LongID Disclosed !!
https://pushkarhax.medium.com/information-disclosure-80-emails-and-longid-disclosed-8952e2c6978b
3)Bug Bounty Methodology — Step By Step Guide To Find Subdomains And Vulnerable URLs
https://medium.com/@shaikhminhaz1975/bug-bounty-methodology-step-by-step-guide-to-find-subdomains-and-vulnerable-urls-18bdd76e979f
4)Exposing Database Creds via SVN: A $400 Discovery
https://infosecwriteups.com/exposing-source-code-via-svn-a-400-discovery-9fc54b3f3f31
5)Blind SSRF vulnerability on 'cz.acronis.com'
https://hackerone.com/reports/1086206
6)Hack Your First PC: Ep.7 — Demonstrate Your Skills
https://medium.com/@joshuapiesta/hack-your-first-pc-ep-7-demonstrate-your-skills-96930dea103d
7)Free CTF Challenge Pack: Easy Setup, Big Impact
https://medium.com/@josh.beck2006/free-ctf-challenge-pack-easy-setup-big-impact-142aee19b78e
8)IO Netgarage Levels 1 and 2 Walkthrough
https://systemweakness.com/io-netgarage-levels-1-and-2-walkthrough-66b60fb9e16e
9)picoCTF writeup: repetitions
https://medium.com/@omstaendlig/picoctf-writeup-repetitions-e37aa158416d
Hope you'll enjoy reading these blogs on Bug Bounty and CTFs, Keep Sharing!
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
Medium
How I Bypassed 2FA and Earned My First Bounty $$$
Hacker Summary:
👍1
Today's Bug Bounty Blogs #17 | Series of Bug Bounty & CTF Blogs
1)Bypassed an Admin Panel Using SQL Payloads
https://th3m4rk5man.medium.com/bypassed-an-admin-panel-using-sql-4452a3f005d0
2)Bypassing airport security via SQL injection
https://ian.sh/tsa
3)Authorization bypass due to cache misconfiguration
https://rikeshbaniya.medium.com/authorization-bypass-due-to-cache-misconfiguration-fde8b2332d2d
4)My first XSS: Reflected XSS in hidden parameter
https://anonysm.medium.com/my-first-xss-reflected-xss-in-hidden-parameter-4142a02edfb1
5)Lord Of The Root: 1.0.1 Vulnhub Walkthrough
https://medium.com/@z6157881/lord-of-the-root-1-0-1-vulnhub-walkthrough-25f7161c7e7b
6)Solving the Prompt Airlines CTF
https://infosecwriteups.com/solving-the-prompt-airlines-ctf-2235c725050b
7)Crack The Hash Level 2 Tryhackme Writeup
https://bevijaygupta.medium.com/crack-the-hash-level-2-tryhackme-writeup-fb8eeb9edbfa
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel
1)Bypassed an Admin Panel Using SQL Payloads
https://th3m4rk5man.medium.com/bypassed-an-admin-panel-using-sql-4452a3f005d0
2)Bypassing airport security via SQL injection
https://ian.sh/tsa
3)Authorization bypass due to cache misconfiguration
https://rikeshbaniya.medium.com/authorization-bypass-due-to-cache-misconfiguration-fde8b2332d2d
4)My first XSS: Reflected XSS in hidden parameter
https://anonysm.medium.com/my-first-xss-reflected-xss-in-hidden-parameter-4142a02edfb1
5)Lord Of The Root: 1.0.1 Vulnhub Walkthrough
https://medium.com/@z6157881/lord-of-the-root-1-0-1-vulnhub-walkthrough-25f7161c7e7b
6)Solving the Prompt Airlines CTF
https://infosecwriteups.com/solving-the-prompt-airlines-ctf-2235c725050b
7)Crack The Hash Level 2 Tryhackme Writeup
https://bevijaygupta.medium.com/crack-the-hash-level-2-tryhackme-writeup-fb8eeb9edbfa
Join These Channels For More:
@TheCyberMonks
@HundredxSecurity
@HackstackSecurity
@thecybersecuritychannel