World Of Security

Google Dork: inurl:/help/index.jsp?view=

The above view parameter is vulnerable to reflected XSS.

Payload: <script>alert("xss")</script>

Enjoy ;)Nerd face

853 views09:20

World Of Security

https://santuysec.com/2020/02/11/tokopedia-bug-bounty-users-private-information-disclosure/

857 views10:25

World Of Security

https://medium.com/@hspro9x/ch%C3%A9m-gi%C3%B3-ng%C3%A0y-d%E1%BB%8Bch-xss-bypass-cloudflare-waf-e89d86417b39

Medium

Chém gió ngày dịch <XSS bypass Cloudflare WAF>

Đang lướt facebook thì mình thấy có nhân vật X đăng tin tuyển dụng trong group Y kèm link https://career.Z.com/. Bỗng tính tò mò của mình…

968 views10:38

World Of Security

https://hackerone.com/reports/826361

#Bugbounty
#bugbountytips

HackerOne

GitLab disclosed on HackerOne: SSRF on project import via the...

### Summary

The Note model has an `attachment` which is provided by a CarrierWave uploader:

```ruby
mount_uploader :attachment, AttachmentUploader
```

One of the features this provides is the...

868 views14:38

World Of Security

https://medium.com/@hgreal/how-i-hacked-a-bank-their-application-using-it-for-hacking-another-bank-company-10-k-xss-b9cc801a675

Medium

How I hacked a bank their application using it for hacking another bank company — 10K XSS

Bug Bounty Write-Up

858 views14:38

World Of Security

Bug Bounty tip Automating SSRF
https://dant0x65.medium.com/bug-bounty-tip-automating-ssrf-ea344ec59962

#mehran_p51
#Bounty

Medium

Bug Bounty tip Automating SSRF

First of all, I want to clarify that I am not fluent in English, so mistakes will happen during the reading :) If tou have some question…

406 viewsedited 07:27

World Of Security

Modern attacks on the Chrome browser : optimizations and deoptimizations https://doar-e.github.io/blog/2020/11/17/modern-attacks-on-the-chrome-browser-optimizations-and-deoptimizations/
#mehran_p51

doar-e.github.io

Modern attacks on the Chrome browser : optimizations and deoptimizations

402 viewsedited 15:23

World Of Security

https://blog.intigriti.com/2020/12/16/bug-bytes-101-xss-for-pdfs-kringlecon-a-whole-bunch-of-fantabulous-tools/

Intigriti

Bug Bytes #101 - XSS for PDFs, KringleCon & A whole bunch of fantabulous tools

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comp...

376 views09:20

World Of Security

efiXplorer v3.0 [#BHEU Edition] was released. Some new features:

- EFI modules dependency graph
- potential vulnerability checkers (SMM callout and GetVariable PEI/DXE/SMM)

https://github.com/binarly-io/efiXplorer/releases/tag/v3.0

#mehran_p51
#reverse

GitHub

Release efiXplorer v3.0 [BHEU Edition] · binarly-io/efiXplorer

Release notes:

EFI modules dependency graph inside efiXloader
Potential vulnerability checkers:

SMM callout
GetVariable (PEI/DXE/SMM)

Multiple improvements and bugfixes

416 viewsedited 14:34

World Of Security

Learn Computer Networking with respect to Ethical Hacking

#mehran_p51
#network_hacking

https://www.udemy.com/course/learn-computer-networking-with-respect-to-ethical-hacking/?couponCode=DECEMBERBONANZA

Udemy

Learn Networking with respect to Ethical Hacking for 2024

Learn Securing Network and Hacking from Basic to Master Level. How to attempt Sniffing, Spoofing, Scanning & Phishing

463 viewsedited 23:10

About

Blog

Apps

Platform