Forwarded from ITZ BOUNTY HUB
Hey Hunters,
Bounty Hub here back again!
out-of-scope target can lead to an in-scope critical vulnerability!
The story starts from a normal endpoint. When I clicked it, it redirected me somewhere else, and after resolving something, it returned the content. To check further what’s going on, I opened the request in Burp Suite. The endpoint performed a 302 redirect to an external domain, which was out of scope.
But here’s the twist—it was still showing the content from the original website I had requested. So I thought, maybe it’s working like a proxy?
Here comes the real mastery. Most bug hunters ignore this kind of behavior, but I decided to dig deeper. And yeah, I found a file: backup.zip
I instantly unzipped it and noticed a config/ folder, and inside it—a config.php file.
Guess what?
I found MySQL database credentials, and the most interesting part? The database URL was publicly accessible—not just localhost!
I tried connecting… and boom! I was successfully connected.
But wait—this domain is out of scope, right?
That’s what I thought too… until I started reading there massive database and was shocked—
It was the target's database, exposed through their proxy server, which had the hardcoded credentials in the config file.
At that moment, I was really excited.
Then I thought: What if I create a new user with admin role?
So I did exactly that—added an admin user to the database.
Now, on the target website, there’s a normal login page (not labeled as admin login), but I tried logging in with the new credentials and guess what?
BOOM! 💥
It logged me into the admin dashboard.
And just like that, I turned an out-of-scope target into a critical in-scope auth bypass vulnerability.✅
So guys, if you enjoyed this method, don’t forget to show some love—and please, pray for me, I’m really sick right now.
#bugbountytips #infosec
Bounty Hub here back again!
out-of-scope target can lead to an in-scope critical vulnerability!
The story starts from a normal endpoint. When I clicked it, it redirected me somewhere else, and after resolving something, it returned the content. To check further what’s going on, I opened the request in Burp Suite. The endpoint performed a 302 redirect to an external domain, which was out of scope.
But here’s the twist—it was still showing the content from the original website I had requested. So I thought, maybe it’s working like a proxy?
Here comes the real mastery. Most bug hunters ignore this kind of behavior, but I decided to dig deeper. And yeah, I found a file: backup.zip
I instantly unzipped it and noticed a config/ folder, and inside it—a config.php file.
Guess what?
I found MySQL database credentials, and the most interesting part? The database URL was publicly accessible—not just localhost!
I tried connecting… and boom! I was successfully connected.
But wait—this domain is out of scope, right?
That’s what I thought too… until I started reading there massive database and was shocked—
It was the target's database, exposed through their proxy server, which had the hardcoded credentials in the config file.
At that moment, I was really excited.
Then I thought: What if I create a new user with admin role?
So I did exactly that—added an admin user to the database.
Now, on the target website, there’s a normal login page (not labeled as admin login), but I tried logging in with the new credentials and guess what?
BOOM! 💥
It logged me into the admin dashboard.
And just like that, I turned an out-of-scope target into a critical in-scope auth bypass vulnerability.✅
So guys, if you enjoyed this method, don’t forget to show some love—and please, pray for me, I’m really sick right now.
#bugbountytips #infosec
Forwarded from Naol.Builds (Elliot 🎯)
This media is not supported in your browser
VIEW IN TELEGRAM
Forwarded from The Hacker News
🛑 A fake support SMS was the entry point.
Ukraine’s SSU and the FBI say Russian intelligence services targeted messaging accounts used by officials, military personnel, politicians, and activists.
The goal: steal credentials and sensitive information.
How the campaign worked: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html
Ukraine’s SSU and the FBI say Russian intelligence services targeted messaging accounts used by officials, military personnel, politicians, and activists.
The goal: steal credentials and sensitive information.
How the campaign worked: https://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.html
Some one said when u are a designer u want to redesign every post u see, when u are a programmer u want to build what u see, when u are hacker u want to hack everything, got it.
Yesterday, i was watching a movie and i see the TV number u see above, and 🤔the idea coming to mind is how to hack the TV using this number, ooooo lalala,🤣🤣 then i searched how to blog, ayyy mekera
Yesterday, i was watching a movie and i see the TV number u see above, and 🤔the idea coming to mind is how to hack the TV using this number, ooooo lalala,🤣🤣 then i searched how to blog, ayyy mekera
😁5
Forwarded from Ge'ez Tech® ግዕዝ ቴክ
በዚህ ሳምንት ከአርብ ሃምሌ 3 ጀምሮ ለሶስት ተከታታይ ቀናት ነጻ የEthical Hacking ስልጠና አዘጋጅተናል!
ለመመዝገብ
https://course.geezsecurity.com/event
#freetraining #cybersecurity #redteaming #blueteaming #thisfriday @geezsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from Day of Exploits (B. Icon)
dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS queries, user supplied resolvers, DNS wildcard filtering like shuffledns etc.
Resource: https://github.com/projectdiscovery/dnsx
Resource: https://github.com/projectdiscovery/dnsx
👍1
Forwarded from programming memes
Please open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from Kebium
Hello, Its Kebi talking
I've been thinking about creating this channel for a while, and I finally decided to do it.⚡️
This aint a flex page (and im def not larping lmao). I'm not here to act like I know everything and I definitely don't need validation for every achievement. If this channel never existed, I'd still be the same Kebi learning, failing, improving, and chasing my goals lol.
The sole purpose of this channel is to document my growth and inspire.🗒
I could've kept a private journal and documented everything for myself , but I decided to make it public. like not for attention, but i think maybe someone who is just starting out will realize that growth takes time. Maybe they'll learn something from my journey, just as I'm eager to learn from theirs ^_^.
I'm a high school student, still learning and still cooking.
Years from now, I want to look back at this channel and say, "Damn, this was me back in 2026."
And if, along the way, I can inspire a few people, learn from others, and contribute something positive to the cybersecurity community, that'll be more than enough fr.
This is just the beginning.🔥
I've been thinking about creating this channel for a while, and I finally decided to do it.⚡️
This aint a flex page (and im def not larping lmao). I'm not here to act like I know everything and I definitely don't need validation for every achievement. If this channel never existed, I'd still be the same Kebi learning, failing, improving, and chasing my goals lol.
The sole purpose of this channel is to document my growth and inspire.🗒
I could've kept a private journal and documented everything for myself , but I decided to make it public. like not for attention, but i think maybe someone who is just starting out will realize that growth takes time. Maybe they'll learn something from my journey, just as I'm eager to learn from theirs ^_^.
I'm a high school student, still learning and still cooking.
Years from now, I want to look back at this channel and say, "Damn, this was me back in 2026."
And if, along the way, I can inspire a few people, learn from others, and contribute something positive to the cybersecurity community, that'll be more than enough fr.
This is just the beginning.🔥
🔥4