Make your team more productive by literally doing one thing
Stop giving your development team too many things to do first. In the tech teams I lead, “priority” has no plural form. Whether you’re leading…
Category: Mix
Nahamsec interviews Rhok
Note that during these interviews I also moderate thus quality may vary. Profile 🐝 Kevin aka Rhok Been doing bug bounties for 4 years Works…
Attacking Sites Using CSRF – Security Simplified
Attacking Sites Using CSRF – Security Simplified Source link
Gron Demo
Gron Demo Source link
The iceberg of web app exploits
The iceberg of web app exploits Source link
Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alerted
MetaMask disclosed a bug submitted by ronnyx2017: https://hackerone.com/reports/1651429 – Bounty: $1000 Source link
How to Hack MFA (Multi-Factor Authentication)
How to Hack MFA (Multi-Factor Authentication) Source link
Does “Erase All Content and Settings” actually wipe user data on macOS?
Does “Erase All Content and Settings” actually wipe user data on macOS? Source link
WHAT TO DO WHEN YOU HAVE DEFCON FOMO?? :((((
WHAT TO DO WHEN YOU HAVE DEFCON FOMO?? :(((( Source link
Open Sesame: Escalating Open Redirect to RCE with Electron Code Review
For better or worse, Node.js has rocketed up the developer popularity charts. Thanks to frameworks like React, React Native, and Electron, developers can easily build…
Cracking OpenNMS Password Hashes – ropnop blog
Background On my last internal penetration test, I compromised a server running OpenNMS. During post-exploitation, I recovered several password hashes for local OpenNMS users, but…
NO BS BUG BOUNTY GUIDES – INTRO
NO BS BUG BOUNTY GUIDES – INTRO Source link