I can't beka😁😁

ye beteseb weyeyet yilal

#RandomThought

2026 is going to bad in the cyber world😩, starting with react2shell, mongobleed, cPanel bug, CopyFail, axios and other npm supplychains and now dirtyFrag 💀. Even Vercel is getting hacked is insane😂.
May God protect our country; These sysadmins and devs dont even know what's going on 😭

#geeztech @geeztechgroup

That's all we know😁.

ayyyyy, DBU The most internet exposed device migegnebet dbu new👻👻

For hacking music ylal for blue and red team 😁😁😁

⚡️What a powerfull PODCAST!⚡️

https://youtu.be/TUaTZdvlUsI?si=nMq_-m3A1PFblEuT

#Memory

once upon a time,...🥲

#geeztech @geeztechgroup

Hey Hunters,

Bounty Hub here back again!

out-of-scope target can lead to an in-scope critical vulnerability!
The story starts from a normal endpoint. When I clicked it, it redirected me somewhere else, and after resolving something, it returned the content. To check further what’s going on, I opened the request in Burp Suite. The endpoint performed a 302 redirect to an external domain, which was out of scope.

But here’s the twist—it was still showing the content from the original website I had requested. So I thought, maybe it’s working like a proxy?

Here comes the real mastery. Most bug hunters ignore this kind of behavior, but I decided to dig deeper. And yeah, I found a file: backup.zip
I instantly unzipped it and noticed a config/ folder, and inside it—a config.php file.

Guess what?
I found MySQL database credentials, and the most interesting part? The database URL was publicly accessible—not just localhost!

I tried connecting… and boom! I was successfully connected.
But wait—this domain is out of scope, right?

That’s what I thought too… until I started reading there massive database and was shocked—
It was the target's database, exposed through their proxy server, which had the hardcoded credentials in the config file.

At that moment, I was really excited.
Then I thought: What if I create a new user with admin role?
So I did exactly that—added an admin user to the database.

Now, on the target website, there’s a normal login page (not labeled as admin login), but I tried logging in with the new credentials and guess what?

BOOM! 💥
It logged me into the admin dashboard.

And just like that, I turned an out-of-scope target into a critical in-scope auth bypass vulnerability.✅


So guys, if you enjoyed this method, don’t forget to show some love—and please, pray for me, I’m really sick right now.


#bugbountytips #infosec

እኔ እኮ በ ሰላም MB ልገዛ በሰላም ገብቼ ምን ላደርግ እንደገባሁ ረስቼ ሌላ ፍልስፍና:አልፎ አልፎ ጤና አጣለሁ መስለኝ, የማይሆን ነገር ሞክር ሞክር ይለኛል 😁:: እኔ ብሎ Command injector 😏

Your mission is simple: Become the System Administrator.

Love it😂

Yes cybersecurity is Green life😭😁

For me : )

ይድረስ ለ_🤪

That is what a transparency is🤣

My current situation 😭

@naol_builds