Hello again his/her In our story today will be about the file upload vulnerabilities Now I found a target Use someplugin It affected to Inject PS Inspector the plugin Is ImageMagick and allow me to inject PS Payload Into the Photos body while uploading so let explain Here I can…

Hello my our friends/hackers too late from the latest story but we are back with a new story for Privileges escalation — What is the target idea? the idea of the domain is like a school or learning path for kids so we have 2 types of accounts on the target (teacher&&student) So I created 2 accounts 2 For teachers and 1 account for the student I’ve created a class to join the other teacher also join the students in the same class

In this story we will talk about Insecure Direct Object Refrrence When I found it yesterday, but in a different way In the foreground is not much alien to the Another, but today it is a fairly good scenario for the vulnerability to exist Okay This Request To Add Another…

Hello again In One Private Program In Hackerone Have Found Cross Site Request Forgery Vulnerability But not the usual I Have Turn IT Critical CSRF Mixed With HTTP PARRAMETER PULLUTION Lets TO Write How It?🤔 In this request To Add Another User To Account To Obtain Permission to Access The…