INTERVIEW WITH @H13- : #1 BUG BOUNTY HUNTER ON SHOPIFY | METHODOLOGY, MISTAKES, TIPS & MORE…
INTERVIEW WITH @H13- : #1 BUG BOUNTY HUNTER ON SHOPIFY | METHODOLOGY, MISTAKES, TIPS & MORE… Source link
Read more →Category: Mix
Passcode Activity Bypass using Race Condition
An Activity is one of the Android’s component in an app. It is the screen that the user sees on...
Read more →
Everyone is wrong about Twitter · rez0
Twitter’s new fearless leader, by Midjourney AI The twittersphere has been full of hot-takes since Elon took over. Most everyone...
Read more →
Hacking 1Password | Episode 4 – Two Simple Bugs that Worth $3,300
Hacking 1Password | Episode 4 – Two Simple Bugs that Worth $3,300 Source link
Read more →
From Quiz to Admin – Chaining Two 0-Days to Compromise An Uber WordPress – RCE Security
TL;DR While doing recon for H1-4420, I stumbled upon a WordPress blog that had a plugin enabled called SlickQuiz. Although...
Read more →
Broken Access Control – Lab #9 UID controlled by param with data leakage in redirect | Short Version
Broken Access Control – Lab #9 UID controlled by param with data leakage in redirect | Short Version Source link
Read more →
Basic recon to RCE
Recently on a BugBounty program I came across my first RCE, discovered and exploited rather quickly on a solution with...
Read more →
Browser powered scanning 2.0 | Blog
Tom Shelton-Lefley | 15 December 2022 at 14:30 UTC It’s been two years since we unleashed browser powered scanning on...
Read more →
How to Hunt for Prototype Pollution Vulnerabilities in Open Source Bug Bounty | #methodology
How to Hunt for Prototype Pollution Vulnerabilities in Open Source Bug Bounty | #methodology Source link
Read more →
#NahamCon2022EU: Managing a Bug Bounty Program From a Hacker’s Perspective by @0xlupin
#NahamCon2022EU: Managing a Bug Bounty Program From a Hacker’s Perspective by @0xlupin Source link
Read more →