World Of Security
@world_of_security
4.65K subscribers
39 photos
9 videos
21 files
599 links
Contactus:
@nashenas_tm
@cyberknight0_0
Download Telegram
About
Blog
Apps
Platform
Join
World Of Security
4.65K subscribers
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
Channel name was changed to «World_of_Securuty»
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
World Of Security pinned Deleted message
World Of Security
Google Dork: inurl:/help/index.jsp?view=

The above view parameter is vulnerable to reflected XSS.

Payload: <script>alert("xss")</script>

Enjoy ;)Nerd face
853 views
World Of Security
https://santuysec.com/2020/02/11/tokopedia-bug-bounty-users-private-information-disclosure/
857 views
World Of Security
https://medium.com/@hspro9x/ch%C3%A9m-gi%C3%B3-ng%C3%A0y-d%E1%BB%8Bch-xss-bypass-cloudflare-waf-e89d86417b39
Medium
Chém gió ngày dịch <XSS bypass Cloudflare WAF>
Đang lướt facebook thì mình thấy có nhân vật X đăng tin tuyển dụng trong group Y kèm link https://career.Z.com/. Bỗng tính tò mò của mình…
968 views
World Of Security
https://hackerone.com/reports/826361

#Bugbounty
#bugbountytips
HackerOne
GitLab disclosed on HackerOne: SSRF on project import via the...
### Summary

The Note model has an `attachment` which is provided by a CarrierWave uploader:

```ruby
mount_uploader :attachment, AttachmentUploader
```

One of the features this provides is the...
868 views
World Of Security
https://medium.com/@hgreal/how-i-hacked-a-bank-their-application-using-it-for-hacking-another-bank-company-10-k-xss-b9cc801a675
Medium
How I hacked a bank their application using it for hacking another bank company — 10K XSS
Bug Bounty Write-Up
858 views
World Of Security
Bug Bounty tip Automating SSRF
https://dant0x65.medium.com/bug-bounty-tip-automating-ssrf-ea344ec59962

#mehran_p51
#Bounty
Medium
Bug Bounty tip Automating SSRF
First of all, I want to clarify that I am not fluent in English, so mistakes will happen during the reading :) If tou have some question…
406 viewsedited  
World Of Security
Modern attacks on the Chrome browser : optimizations and deoptimizations https://doar-e.github.io/blog/2020/11/17/modern-attacks-on-the-chrome-browser-optimizations-and-deoptimizations/
#mehran_p51
doar-e.github.io
Modern attacks on the Chrome browser : optimizations and deoptimizations
402 viewsedited  
World Of Security
https://blog.intigriti.com/2020/12/16/bug-bytes-101-xss-for-pdfs-kringlecon-a-whole-bunch-of-fantabulous-tools/
Intigriti
Bug Bytes #101 - XSS for PDFs, KringleCon & A whole bunch of fantabulous tools
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comp...
376 views