World Of Security
@world_of_security
4.65K subscribers
39 photos
9 videos
21 files
599 links
Contactus:
@nashenas_tm
@cyberknight0_0
Download Telegram
About
Blog
Apps
Platform
Join
World Of Security
4.65K subscribers
World Of Security
Latest Nuclei Release v2.8.2!
https://github.com/projectdiscovery/nuclei/releases/tag/v2.8.2
GitHub
Release v2.8.2 · projectdiscovery/nuclei
What's Changed

Fixed issue with printing host instead of ip by @tarunKoyalwar in #3002
Fixed nil crash with input URL edge case by @tarunKoyalwar in #3004

New Contributors

@JaneX8 made their...
733 views
World Of Security
https://blog.doyensec.com/2022/12/13/safeurl.html
671 views
World Of Security
Foxit PDF Reader - Use after Free - Remote Code Execution Exploit

https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672
👍1
713 views
World Of Security
https://medium.com/@tobydavenn/bypassing-ssrf-protections-45e5e3ac31e9
685 views
World Of Security
https://github.com/SeifElsallamy/Blind-XSS-Manager
GitHub
GitHub - SeifElsallamy/Blind-XSS-Manager: Never forget where you inject.
Never forget where you inject. Contribute to SeifElsallamy/Blind-XSS-Manager development by creating an account on GitHub.
761 views
World Of Security
https://spyclub.tech/2022/12/14/unusual-cache-poisoning-akamai-s3/
636 views
World Of Security
Latest Nuclei Release v2.8.6!
https://github.com/projectdiscovery/nuclei/releases/tag/v2.8.6
GitHub
Release v2.8.6 · projectdiscovery/nuclei
What's Changed

Fixed encoding issue with key characters in URL by @tarunKoyalwar in #3150
Fixed matched URL in CLI output with rawhttp by @tarunKoyalwar in #3155
Fixed file upload in the headl...
729 views
World Of Security
TCP For Hackers: How Does nmap Work? (with @ChrisGreer​)

https://www.youtube.com/watch?v=8P2n3t8Xd34
YouTube
TCP For Hackers: How Does nmap Work? (with @ChrisGreer​)
Purchase my Bug Bounty Course here 👉🏼 bugbounty.nahamsec.training

Buy Me Coffee:
https://www.buymeacoffee.com/nahamsec

Live Every Sunday on Twitch:
https://twitch.tv/nahamsec

Free $100 DigitalOcean Credit:
https://m.do.co/c/3236319b9d0b

Follow me on…
654 views
World Of Security
The DeFi Money Heist

https://www.youtube.com/watch?v=RfcTIpQX1wM
👍1
723 views
World Of Security
Android application Activity vulnerabilities
👍2🔥1
742 views
World Of Security
bug bounty report template https://github.com/jaikishantulswani/bb-reports-templates
GitHub
GitHub - jaikishantulswani/bb-reports-templates: My small collection of reports templates (This is a fork of orignal repo from…
My small collection of reports templates (This is a fork of orignal repo from https://github.com/gwen001/BB-datas) - jaikishantulswani/bb-reports-templates
👍1
772 views
World Of Security
■■■■□ CVE-2023-25194: Remote code execution flaw patched in Apache Kafka.

https://portswigger.net/daily-swig/remote-code-execution-flaw-patched-in-apache-kafka
The Daily Swig | Cybersecurity news and views
Remote code execution flaw patched in Apache Kafka
Possible RCE and denial-of-service issue discovered in Kafka Connect
726 views
World Of Security
url/?f=etc/passwd ==> 403
encode etc/passwd as base64

url/?f=L2V0Yy9wYXNzd2Q= ==> 200

#note
you can use this trick in SQL , SSTI , XSS , LFI , Etc...

#bugbountytips #bugbountytip
Ref: Twitter
👍3❤1
790 views
World Of Security
https://github.com/0xPugazh/fuzz4bounty
GitHub
GitHub - 0xPugal/fuzz4bounty: 1337 Wordlists for Bug Bounty Hunting
1337 Wordlists for Bug Bounty Hunting. Contribute to 0xPugal/fuzz4bounty development by creating an account on GitHub.
766 views
World Of Security
https://github.com/t3l3machus/toxssin
GitHub
GitHub - t3l3machus/toxssin: An XSS exploitation command-line interface and payload generator.
An XSS exploitation command-line interface and payload generator. - t3l3machus/toxssin
759 views
World Of Security
https://medium.com/@idan_malihi/exploiting-xxe-to-retrieve-files-401183d164f0
Medium
Exploiting XXE to retrieve files
Hello, welcome to my new article, this article will talk about a vulnerability called XXE - XML external entity injection.
First, let me…
❤1👍1
769 views
World Of Security
https://redshark1802.com/blog/2023/03/01/abusing-hopy-by-hop-header-crlf-injection/
kirtixs
Abusing Hop-by-Hop Header to Chain A CRLF Injection Vulnerability
This blog post explores a CRLF injection vulnerability in the Location header of an HTTP response and how it could be used to chain it with other attacks.
798 views
World Of Security
https://resources.securityscorecard.com/research/esxi-royal-ransomware#page=1
Security Scorecard
Royal Ransomware exploiting ESXi whitepaper
806 views
World Of Security
https://mizu.re/post/ejs-server-side-prototype-pollution-gadgets-to-rce
mizu.re
EJS - Server Side Prototype Pollution gadgets to RCE. Tags:Article - Article - Web - SSPP
787 views
World Of Security
https://hackerone.com/reports/1819832
HackerOne
Snapchat disclosed on HackerOne: Delete anyone's content spotlight...
Hello Snapchat,
Snapchat has viral video feature callled spotlight which alone was the biggest trend and increase snapchat users and profit in millions.
I found a way to delete anyone's spotlight...
794 views
World Of Security
https://hackerone.com/reports/1806275
HackerOne
Nextcloud disclosed on HackerOne: Mail app stores cleartext...
Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g86r-x755-93f4
824 views