Category: Mix

Interview with a bounty hunter - "I made 10k$!" - Virdoex_Hunter
13
Mar
2023

Interview with a bounty hunter – “I made 10k$!” – Virdoex_Hunter

Interview with a bounty hunter – “I made 10k$!” – Virdoex_Hunter Source link

Share: X : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterFacebook : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterLinkedin : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterReddit : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterTelegram : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterWhatsApp : Interview with a bounty hunter – “I made 10k$!” – Virdoex_HunterEmail : Interview with a bounty hunter – “I made 10k$!” – Virdoex_Hunter
information disclosure of another company bug on video.
13
Mar
2023

information disclosure of another company bug on video.

HackerOne disclosed a bug submitted by manish_adz: https://hackerone.com/reports/1886143 – Bounty: $500 Source link

Share: X : information disclosure of another company bug on video.Facebook : information disclosure of another company bug on video.Linkedin : information disclosure of another company bug on video.Reddit : information disclosure of another company bug on video.Telegram : information disclosure of another company bug on video.WhatsApp : information disclosure of another company bug on video.Email : information disclosure of another company bug on video.
Instagram App Access Token - These aren't the access_tokens you're looking for
13
Mar
2023

Instagram App Access Token – These aren’t the access_tokens you’re looking for

In Facebook Graph API as defined by the developer documentation, there are several access tokens, to authenticate against various API…

Share: X : Instagram App Access Token – These aren’t the access_tokens you’re looking forFacebook : Instagram App Access Token – These aren’t the access_tokens you’re looking forLinkedin : Instagram App Access Token – These aren’t the access_tokens you’re looking forReddit : Instagram App Access Token – These aren’t the access_tokens you’re looking forTelegram : Instagram App Access Token – These aren’t the access_tokens you’re looking forWhatsApp : Instagram App Access Token – These aren’t the access_tokens you’re looking forEmail : Instagram App Access Token – These aren’t the access_tokens you’re looking for
Build, Break, and Hack WebSockets
13
Mar
2023

Build, Break, and Hack WebSockets

Build, Break, and Hack WebSockets Source link

Share: X : Build, Break, and Hack WebSocketsFacebook : Build, Break, and Hack WebSocketsLinkedin : Build, Break, and Hack WebSocketsReddit : Build, Break, and Hack WebSocketsTelegram : Build, Break, and Hack WebSocketsWhatsApp : Build, Break, and Hack WebSocketsEmail : Build, Break, and Hack WebSockets
Is Apple deliberately killing our batteries?
13
Mar
2023

Is Apple deliberately killing our batteries?

Is Apple deliberately killing our batteries? Source link

Share: X : Is Apple deliberately killing our batteries?Facebook : Is Apple deliberately killing our batteries?Linkedin : Is Apple deliberately killing our batteries?Reddit : Is Apple deliberately killing our batteries?Telegram : Is Apple deliberately killing our batteries?WhatsApp : Is Apple deliberately killing our batteries?Email : Is Apple deliberately killing our batteries?
Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)
13
Mar
2023

Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)

Back in February of this year I hacked with members of BugBountyHunter.com on a public bug bounty program and we…

Share: X : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)Facebook : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)Linkedin : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)Reddit : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)Telegram : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)WhatsApp : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)Email : Finding XSS on .apple.com and building a proof of concept to leak your PII information | by Sean (zseano)
Blind SQL Injection at fasteditor.hema.com | by Jonathan Bouman
12
Mar
2023

Blind SQL Injection at fasteditor.hema.com | by Jonathan Bouman

Proof of concept. The username of the database user starts with ‘hema’. BackgroundThese days almost every website uses a database….

Share: X : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanFacebook : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanLinkedin : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanReddit : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanTelegram : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanWhatsApp : Blind SQL Injection at fasteditor.hema.com | by Jonathan BoumanEmail : Blind SQL Injection at fasteditor.hema.com | by Jonathan Bouman
Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag Challenge
12
Mar
2023

Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag Challenge

GovTech’s Cyber Security Group recently organised the STACK the Flags Cybersecurity Capture-the-Flag (CTF) competition from 4th to 6th December 2020….

Share: X : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeFacebook : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeLinkedin : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeReddit : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeTelegram : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeWhatsApp : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag ChallengeEmail : Discovering a 16 Million Download/Week Node.js Package Zero Day for a Capture the Flag Challenge
The $16,000 Dev Mistake. Hello all! | by Daniel Marte
12
Mar
2023

The $16,000 Dev Mistake. Hello all! | by Daniel Marte

Hello all! Its been a while since my last write up. As a-lot of you know, last year I joined…

Share: X : The $16,000 Dev Mistake. Hello all! | by Daniel MarteFacebook : The $16,000 Dev Mistake. Hello all! | by Daniel MarteLinkedin : The $16,000 Dev Mistake. Hello all! | by Daniel MarteReddit : The $16,000 Dev Mistake. Hello all! | by Daniel MarteTelegram : The $16,000 Dev Mistake. Hello all! | by Daniel MarteWhatsApp : The $16,000 Dev Mistake. Hello all! | by Daniel MarteEmail : The $16,000 Dev Mistake. Hello all! | by Daniel Marte
Eliminating Authorization Vulnerabilities with Dacquiri | by d0nut
12
Mar
2023

Eliminating Authorization Vulnerabilities with Dacquiri | by d0nut

Over the last year I’ve taken a step away from my usual bug bounty work to focus more on building…

Share: X : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutFacebook : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutLinkedin : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutReddit : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutTelegram : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutWhatsApp : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nutEmail : Eliminating Authorization Vulnerabilities with Dacquiri | by d0nut
Hacking Pulse Secure for Redteaming
12
Mar
2023

Hacking Pulse Secure for Redteaming

This write-up is the collective efforts of collaborating with various hackers on exploring and furthering research that was presented by…

Share: X : Hacking Pulse Secure for RedteamingFacebook : Hacking Pulse Secure for RedteamingLinkedin : Hacking Pulse Secure for RedteamingReddit : Hacking Pulse Secure for RedteamingTelegram : Hacking Pulse Secure for RedteamingWhatsApp : Hacking Pulse Secure for RedteamingEmail : Hacking Pulse Secure for Redteaming
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
12
Mar
2023

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

The Story of a Novel Supply Chain Attack Continue reading on Medium » Source link

Share: X : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesFacebook : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesLinkedin : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesReddit : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesTelegram : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesWhatsApp : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other CompaniesEmail : Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies