Forwarded from Ge'ez Tech® ግዕዝ ቴክ
Forwarded from ITZ BOUNTY HUB
Hey Hunters,
Bounty Hub here back again!
out-of-scope target can lead to an in-scope critical vulnerability!
The story starts from a normal endpoint. When I clicked it, it redirected me somewhere else, and after resolving something, it returned the content. To check further what’s going on, I opened the request in Burp Suite. The endpoint performed a 302 redirect to an external domain, which was out of scope.
But here’s the twist—it was still showing the content from the original website I had requested. So I thought, maybe it’s working like a proxy?
Here comes the real mastery. Most bug hunters ignore this kind of behavior, but I decided to dig deeper. And yeah, I found a file: backup.zip
I instantly unzipped it and noticed a config/ folder, and inside it—a config.php file.
Guess what?
I found MySQL database credentials, and the most interesting part? The database URL was publicly accessible—not just localhost!
I tried connecting… and boom! I was successfully connected.
But wait—this domain is out of scope, right?
That’s what I thought too… until I started reading there massive database and was shocked—
It was the target's database, exposed through their proxy server, which had the hardcoded credentials in the config file.
At that moment, I was really excited.
Then I thought: What if I create a new user with admin role?
So I did exactly that—added an admin user to the database.
Now, on the target website, there’s a normal login page (not labeled as admin login), but I tried logging in with the new credentials and guess what?
BOOM! 💥
It logged me into the admin dashboard.
And just like that, I turned an out-of-scope target into a critical in-scope auth bypass vulnerability.✅
So guys, if you enjoyed this method, don’t forget to show some love—and please, pray for me, I’m really sick right now.
#bugbountytips #infosec
Bounty Hub here back again!
out-of-scope target can lead to an in-scope critical vulnerability!
The story starts from a normal endpoint. When I clicked it, it redirected me somewhere else, and after resolving something, it returned the content. To check further what’s going on, I opened the request in Burp Suite. The endpoint performed a 302 redirect to an external domain, which was out of scope.
But here’s the twist—it was still showing the content from the original website I had requested. So I thought, maybe it’s working like a proxy?
Here comes the real mastery. Most bug hunters ignore this kind of behavior, but I decided to dig deeper. And yeah, I found a file: backup.zip
I instantly unzipped it and noticed a config/ folder, and inside it—a config.php file.
Guess what?
I found MySQL database credentials, and the most interesting part? The database URL was publicly accessible—not just localhost!
I tried connecting… and boom! I was successfully connected.
But wait—this domain is out of scope, right?
That’s what I thought too… until I started reading there massive database and was shocked—
It was the target's database, exposed through their proxy server, which had the hardcoded credentials in the config file.
At that moment, I was really excited.
Then I thought: What if I create a new user with admin role?
So I did exactly that—added an admin user to the database.
Now, on the target website, there’s a normal login page (not labeled as admin login), but I tried logging in with the new credentials and guess what?
BOOM! 💥
It logged me into the admin dashboard.
And just like that, I turned an out-of-scope target into a critical in-scope auth bypass vulnerability.✅
So guys, if you enjoyed this method, don’t forget to show some love—and please, pray for me, I’m really sick right now.
#bugbountytips #infosec
Forwarded from Naol.Builds (Elliot 🎯)
This media is not supported in your browser
VIEW IN TELEGRAM
Forwarded from The Hacker News
🛑 A fake support SMS was the entry point.
Ukraine’s SSU and the FBI say Russian intelligence services targeted messaging accounts used by officials, military personnel, politicians, and activists.
The goal: steal credentials and sensitive information.
How the campaign worked: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html
Ukraine’s SSU and the FBI say Russian intelligence services targeted messaging accounts used by officials, military personnel, politicians, and activists.
The goal: steal credentials and sensitive information.
How the campaign worked: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html
Some one said when u are a designer u want to redesign every post u see, when u are a programmer u want to build what u see, when u are hacker u want to hack everything, got it.
Yesterday, i was watching a movie and i see the TV number u see above, and 🤔the idea coming to mind is how to hack the TV using this number, ooooo lalala,🤣🤣 then i searched how to blog, ayyy mekera
Yesterday, i was watching a movie and i see the TV number u see above, and 🤔the idea coming to mind is how to hack the TV using this number, ooooo lalala,🤣🤣 then i searched how to blog, ayyy mekera
😁5
Forwarded from Ge'ez Tech® ግዕዝ ቴክ
በዚህ ሳምንት ከአርብ ሃምሌ 3 ጀምሮ ለሶስት ተከታታይ ቀናት ነጻ የEthical Hacking ስልጠና አዘጋጅተናል!
ለመመዝገብ
https://course.geezsecurity.com/event
#freetraining #cybersecurity #redteaming #blueteaming #thisfriday @geezsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM