한국어
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
내가 좋아할 만한 콘텐츠
🧢 님이 재게시함
ngosytuanbug's profile picture.
ngosytuan
 @ngosytuanbug
. 9. 16.

Today i found a RCE in a bug bounty platform 1. found a bypass admin role with cve confluence 2. access and upload a plugin ( webshell) 3. turn on plugin in server and can run any system command HOPY THEY FAIR #BugBounty

ngosytuanbug's tweet image. Today i found a RCE in a bug bounty platform 1. found a bypass admin role with cve confluence 2. access and upload a plugin ( webshell) 3. turn on plugin in server and can run any system command HOPY THEY FAIR #BugBounty
7
14
168
44
10천
🧢 님이 재게시함
00xalr's profile picture.
Abdalkreem
 @00xalr
. 9. 6.

The new writup is here: Account Takeover via Insecure Email Change — Critical Vulnerability medium.com/@3bddagg3/acco… #bugbountytips #bugbounty #hackerone

00xalr's tweet card. Introduction.
🚨 Account Takeover via Insecure Email Change — Critical Vulnerability
출처: medium.com
5
22
208
156
12천
🧢 님이 재게시함
Zeno_h2r's profile picture.
Abdulrhman
 @Zeno_h2r
. 9. 8.

Through a simple path manipulation in the hostName parameter, I was able to escalate the issue into a One-Click Account Takeover medium.com/@Zeno_H2r/expl…

Zeno_h2r's tweet card. My name is Abdulrahman, I work as a bug hunter Full Time
Exploiting Open Redirect & XSS in Password Reset Flow
출처: medium.com
1
8
48
28
3천
🧢 님이 재게시함
SalhiMahdi72759's profile picture.
CaptinSHArky(Mahdi🇹🇳)
 @SalhiMahdi72759
. 9. 9.

Tip: When testing, try injecting a null byte (\u0000) into unexpected parameters. You never know how the backend will handle it — sometimes a small injection can completely break features like the invitation system. #BugBounty #bugbountytips #Hacking #Cybersecurity

SalhiMahdi72759's tweet image. Tip: When testing, try injecting a null byte (\u0000) into unexpected parameters. You never know how the backend will handle it — sometimes a small injection can completely break features like the invitation system. #BugBounty #bugbountytips #Hacking #Cybersecurity
5
37
249
176
12천
🧢 님이 재게시함
professor_xa1's profile picture.
Professor_xA1
 @professor_xa1
. 9. 10.

اللهم بارك بس انا عندي استفسار واتمنى ميتفهمش غلط ليه لما بشوف سيناريوهات زي دي بشوفها ساهلة ومع ان اغلب الحاجات دي بطبقها وانا بهانت بس عمرها ما جات لان استحالة حاجة زي دي تكون متسابة ودا بيخليني احس ان الناس دي البروجرامز بتاعتها غير بتاعتنا حرفيا بحسهم حاجة زي لابات بورتسويجر

00xalr's profile picture. 20 | Cybersecurity | Bug Bounty Hunter | Sharing vulns & tips 💥 | DM = 📥 https://t.co/m5VQqNq6SB , https://t.co/PgopMw9zNY
Abdalkreem
 @00xalr
. 9. 9.

wirtup new : medium.com/@0xalr/sensiti… #bugbountytips #bugbounty #hackerone

00xalr's tweet image. wirtup new : medium.com/@0xalr/sensiti… #bugbountytips #bugbounty #hackerone
6
14
170
110
10천
9
2
40
15
4천
🧢 님이 재게시함
adrielsec's profile picture.
elSec
 @adrielsec
. 9. 10.

hardcoded credentials in javascript file xxxxxxx/static/js/main.xxxxx.chunk.js 🗣️ dp #bugbounty #bugbountytips #bugbountytip

adrielsec's tweet image. hardcoded credentials in javascript file xxxxxxx/static/js/main.xxxxx.chunk.js 🗣️ dp #bugbounty #bugbountytips #bugbountytip
11
13
209
74
10천
🧢 님이 재게시함
jatav_ravi's profile picture.
Archer
 @jatav_ravi
. 7. 21.

$500 for Punycode email spoofing bug. Used comilav “m” to bypass email uniqueness check: >Register with [email protected] > Use same name as legit user > Invite real user to fake team Real user joins attacker’s team - gets locked out of real one #bugbountytips #BugBounty

jatav_ravi's tweet image. $500 for Punycode email spoofing bug. Used comilav “m” to bypass email uniqueness check: >Register with comilav831@lhory.com > Use same name as legit user > Invite real user to fake team Real user joins attacker’s team - gets locked out of real one #bugbountytips #BugBounty
11
13
174
123
12천
🧢 님이 재게시함
DailyDarkWeb's profile picture.
Dark Web Intelligence
@DailyDarkWeb
. 9. 9.

#CryptoSecurity 🚨 - A massive supply chain attack on the NPM registry has compromised popular packages with over 2 billion weekly downloads, aiming to steal cryptocurrency from users. dailydarkweb.net/major-npm-supp…

DailyDarkWeb's tweet image. #CryptoSecurity 🚨 - A massive supply chain attack on the NPM registry has compromised popular packages with over 2 billion weekly downloads, aiming to steal cryptocurrency from users. dailydarkweb.net/major-npm-supp…
1
6
21
4
4천
🧢 님이 재게시함
zoomeye_team's profile picture.
ZoomEye
@zoomeye_team
. 9. 4.

🔍Discover More Exposed LLM Servers with ZoomEye ZoomEye Dork👉app="Ollama" || app="vLLM UI" || app="LLaMA Board" || app="LLaMA Factory" || app="Chat LangChain" || app="AnythingLLM" || app="Chat LangChain" ZoomEye Link: zoomeye.ai/searchResult?q…

zoomeye_team's tweet image. 🔍Discover More Exposed LLM Servers with ZoomEye ZoomEye Dork👉app="Ollama" || app="vLLM UI" || app="LLaMA Board" || app="LLaMA Factory" || app="Chat LangChain" || app="AnythingLLM" || app="Chat LangChain" ZoomEye Link: zoomeye.ai/searchResult?q…
LukeSwitzer_'s profile picture. Infosec Person of the Purple Ether
Lμke Swi☨zer 🅅
 @LukeSwitzer_
. 9. 3.

Exposed LLM server queries for @shodanhq port:11434 "Ollama" port:8000 "vLLM" port:8000 "llama.cpp" port:8080 "llama.cpp" port:1234 "LM Studio" port:4891 "GPT4All" port:8000 "LangChain" blogs.cisco.com/security/detec…

LukeSwitzer_'s tweet card. We uncovered 1,100+ exposed Ollama LLM servers—20% with open models—revealing critical security gaps and the need for better LLM threat monitoring.
Detecting Exposed LLM Servers: A Shodan Case Study on Ollama
출처: blogs.cisco.com
4
101
468
386
34천
0
22
72
41
6천
🧢 님이 재게시함
viehgroup's profile picture.
VIEH Group
 @viehgroup
. 9. 1.

Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi

viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
viehgroup's tweet image. Cloudflare 403 bypass to time-based blind SQLi: PL: (select(0)from(select(sleep(10)))v) → 403 but PL: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v) → Time-based Blind SQLi #BugBounty #SQLi
3
86
507
365
25천
🧢 님이 재게시함
zeyad_ashraf_'s profile picture.
Zuksh
 @zeyad_ashraf_
. 9. 1.

Alhamdulillah I got 3 RXSS duplicates on a public Bugcrowd program. Write-up: zuksh.medium.com/how-i-discover… #BugBounty #RXSS #XSS #InfoSec #Bugcrowd

zeyad_ashraf_'s tweet image. Alhamdulillah I got 3 RXSS duplicates on a public Bugcrowd program. Write-up: zuksh.medium.com/how-i-discover… #BugBounty #RXSS #XSS #InfoSec #Bugcrowd
1
1
79
29
5천
🧢 님이 재게시함
m359ah's profile picture.
Hossam A. Mesbah 🇵🇸
@m359ah
. 9. 1.

1. Register an account using [email protected] 2. Navigate to change email 3. Change it to [email protected] 4. Boom 💥 become the administrator and infrastructure takeover Rewarded $$$$$ #fuckbountytips

16
21
296
190
17천
🧢 님이 재게시함
medusa_0xf's profile picture.
Medusa
 @medusa_0xf
. 9. 1.

New Video Out 🔥 “AWS S3 Bucket Hacking Explained (Bug Bounty Hunters Must Watch)” youtu.be/_UlHLjIQeJM?si…

medusa_0xf's tweet image. New Video Out 🔥 “AWS S3 Bucket Hacking Explained (Bug Bounty Hunters Must Watch)” youtu.be/_UlHLjIQeJM?si…
4
72
588
472
31천

United States 트렌드

내가 좋아할 만한 콘텐츠

Something went wrong.


Something went wrong.