Mix - Cybernoz - Page 360

Persistent XSS (unvalidated Open Graph embed) at LinkedIn.com | by Jonathan Bouman

Proof of concept Are you aware of any (private) bug bounty programs? I would love to get an invite. Please get in touch with me:…

March 31, 2023 Cybernoz 7 min read

I used Google Drawings and there’s no shame in that This is a story about how I (re)discovered an exploitation technique and took a bug…

March 31, 2023 Cybernoz 7 min read

Q: HOW do you get started in bug bounty?? How do you build your automation?! Source link

March 31, 2023 Cybernoz 1 min read

Note: This is the blogpost version of a talk I gave to the National University of Singapore Greyhats club. If you prefer video, you can…

March 31, 2023 Cybernoz 2 min read

September 22, 2015 · websec bruteforce As of late, a fair few companies and startups have been using dedicated URL shortner services to use for…

March 31, 2023 Cybernoz 3 min read

As a preface, when I originally found this bug I was unfamiliar the class of “null byte buffer overflow” even existed. I was simply fuzzing…

March 31, 2023 Cybernoz 5 min read

Slides Supplemental The original (large) PowerPoint wih all embedded GIFs/Videos: https://1drv.ms/p/s!Aq5mEA03Lijrg9h-hsezBkUC5qwXag Source link

March 30, 2023 Cybernoz 1 min read

I have something that is worth sharing when you are testing for SSO system. Hope you can learn something new after reading this blog post.…

March 30, 2023 Cybernoz 3 min read

No BS Guide – ADVANCED BURP (FREE) TRICKS FOR BUG BOUNTY Source link

March 30, 2023 Cybernoz 1 min read

I was recently testing a checkout payment system. It was the type of setup where everything seemed to be locked down and I had no…

March 30, 2023 Cybernoz 2 min read

Generating hacker art via AI has been a passion of mine for a few months. I was accepted into DALL·E 2’s Beta pretty early. I…

March 30, 2023 Cybernoz 5 min read

Finding DOMXSS with DevTools | Untrusted Types Chrome Extension Source link

March 30, 2023 Cybernoz 1 min read