World Of Security
@world_of_security
4.64K subscribers
39 photos
9 videos
21 files
599 links
Contactus:
@nashenas_tm
@cyberknight0_0
Download Telegram
About
Blog
Apps
Platform
Join
World Of Security
4.64K subscribers
World Of Security
https://corben.io/blog/hacking-kucoin
Corben Leo
A $1,000,000 bounty? The KuCoin User Information Leak
A vulnerability in KuCoin & why HackenProof & KuCoin're not trustworthy.
👍2
1.02K views
World Of Security
https://infosecwriteups.com/dos-via-cache-poisoning-38f3a87f997c
Medium
DOS via cache poisoning
Today I’m going to talk about cache, denial of service, and a vulnerability I recently found in a very large company.
👍2
1.24K views
World Of Security
https://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write/
Bugprove
CVE-2023-31070 Broadcom BCM47xx SDK EMF slab-out-of-bounds write
Exploring the Impact of CVE-2023-31070: A Deep Dive into Broadcom BCM47xx SDK, found by Attila Szasz with BugProve's engine.
👍1🔥1
1.41K views
World Of Security
Salt Labs exposes a new vulnerability in popular OAuth framework, used in hundreds of online services

https://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services
salt.security
New OAuth Vulnerability Impacts Hundreds of Online Services
OAuth vulnerability earns CVE-2023-28131. Salt exposes a new vulnerability in the popular OAuth framework, used in hundreds of online services.
👍4
1.52K views
World Of Security
https://www.youtube.com/shorts/lu4x_EGCGNw
YouTube
Guessing app's PIN protection using Flipper Zero as BadUSB
👍2
1.34K views
World Of Security
https://www.realinfosec.net/cybersecurity-academy/understanding-and-mitigating-xxe-vulnerabilities-via-file-uploads/
👍4
1.17K views
World Of Security
https://www.youtube.com/watch?v=rM61brpBV48
👍3
1.05K views
World Of Security
https://github.com/r57-labs/chaos
GitHub
GitHub - r57-labs/chaos: Origin IP scanning utility developed with ChatGPT
Origin IP scanning utility developed with ChatGPT. Contribute to r57-labs/chaos development by creating an account on GitHub.
👍4
955 views
World Of Security
https://infosecwriteups.com/understanding-prototype-pollution-and-its-exploitation-part-1-eb70802b02a5
Medium
Understanding Prototype Pollution and its Exploitation — Part 1
Understanding what are JavaScript Prototypes (Part 1)
👍4
1.05K views
World Of Security
Reversing Flutter-based Android Malware “Fluhorse”
https://www.fortinet.com/blog/threat-research/fortinet-reverses-flutter-based-android-malware-fluhorse
Fortinet Blog
Fortinet Reverses Flutter-based Android Malware “Fluhorse”
Gain insights into the Fluhorse malware campaign as we've managed to fully reverse engineer the malicious Flutter applications. Learn more.…
👍2
1.1K views
World Of Security
A very good XSS writeup for CTF set by 'intigriti' team.

https://infosecwriteups.com/xss-intigriti-challenge-dae2dba1cb4c
Medium
XSS Intigriti challenge 0523
Let me explain how did I overcome this XSS challenge set up by the bug bounty platform Intigriti. It may be a source of inspiration for…
👍1
1.06K views
World Of Security
■■□□□ SQL Injection cheatsheet.

https://github.com/swisskyrepo/PayloadsAllTheThings/tree/master/SQL%20Injection
GitHub
PayloadsAllTheThings/SQL Injection at master · swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF - swisskyrepo/PayloadsAllTheThings
👍2
1.01K views
World Of Security
http://www.kamilonurozkaleli.com/posts/a-classical-account-takeover-case-via-multiple-bypasses/



Host header injection & account takeover(CDN akamai bypass)
Kamil Onur Özkaleli as ko2sec
A Classical Account Takeover Case via Multiple Bypasses
Introduction Recently I found a password reset/recovery flaw in a program at Synack. The vulnerability is the classical password reset link manipulation via Host Header Injection but rather than the vulnerability itself, the way how I managed to exploit it…
1.03K viewsedited  
World Of Security
https://portswigger.net/web-security/graphql
👍4
924 views
World Of Security
https://blog.checkpoint.com/security/dont-be-fooled-by-app-earances-check-point-researchers-spot-hidden-malwares-behind-legitimate-looking-apps/
Check Point Blog
Don’t be fooled by app-earances: Check Point Researchers spot hidden malwares behind legitimate looking apps - Check Point Blog
Highlights: A modified version of the popular messaging app Telegram found to be malicious The malicious app can sign up the victim for various paid
👍1
825 views
World Of Security
Bringing NFC contactless payment to CASIO F-91W watch
https://medium.com/@matteo.pisani.91/how-i-hacked-casio-f-91w-digital-watch-892bd519bd15
Medium
How I hacked CASIO F-91W digital watch
Bringing NFC contactless payment capability to a true classic.
👍1
886 views
World Of Security
ntroduction to Kali NetHunter Hacker series: Which NetHunter fits you best?
https://www.mobile-hacker.com/2023/07/04/introduction-of-kali-nethunter-hacker-series-and-which-nethunter-fits-you-best/
👍1
1.02K views
World Of Security
https://www.youtube.com/watch?v=sWWW5PBedbY
👍2🔥1
1K views
World Of Security
CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare.

https://github.com/zidansec/CloudPeler

#bugbounty
#bug_bounty
GitHub
GitHub - zidansec/CloudPeler: CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you…
CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting infor...
👍2🔥2
1.05K views
World Of Security
https://portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags
👍3
1.1K views
World Of Security
https://www.netsurion.com/alerts/sonicwall-vulnerabilities
Netsurion
Security Advisory: SonicWall Vulnerabilities | Netsurion
SonicWall has recently disclosed several vulnerabilities in their Global Management System (GMS) and Analytics products. Learn impact, mitigation, and risks.
994 views