WordPress: Multiple Vulnerabilities in Simple Login Log Plugin

TL; DR Spoof SSDP replies and creates fake UPnP devices to phish for credentials and NetNTLM challenge/response. Disclaimer Table of Content Introduction What is SSDP?

Tools that i personally use for Bug Bounty Hunting and web assessments. - GitHub - AlexisAhmed/BugBountyTools: Tools that i personally use for Bug Bounty Hunting and web assessments.

You Know, For WEB Fuzzing ! 日站用的字典。. Contribute to TheKingOfDuck/fuzzDicts development by creating an account on GitHub.

Hey hunters ! Recently I discovered a Unicode-Case Mapping Collision vulnerability on a private program.

Recon with waybackmachine for BugBounty!

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network - m0rtem/CloudFail

Note: i have already covered this vulnerability previously 2 times on my blogs so you can check that out.

articles. Contribute to blaCCkHatHacEEkr/PENTESTING-BIBLE development by creating an account on GitHub.

Been in the bug bounty and/or ethical hacking scene for more than 2 years now and this is my first write-up (I hope you bear with me)…

Vscan puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features that NSE scripts

It’s been so long since I posted any article, partially because I was tired and taking a pleasant summer break. I was reading this…

Form submission for vulnerability in livezilla. Contribute to ari034/CVE-2020-9758 development by creating an account on GitHub.

Lately, we came across a remote code execution in a Tomcat web service by utilizing Expression Language. The vulnerable POST body field expected a number. When sending ${1+2} instead, the web site included a Java error message about a failed conversion to…

Dorks for Google, Shodan and BinaryEdge. Contribute to iGotRootSRC/Dorkers development by creating an account on GitHub.