Penetration Testing

Hey Guys, I hope you are doing well, Happy to write my Second article in Medium ♥ Summary: This is the story of how I was able to bypass 2FA on a private bug bounty program THREE Times with 3 different methods. Vulnerability Type: Improper Authentication - Generic Severity: Medium Bounty: 300$…

In the world of web security, parameter brute forcing is a technique that aims to identify vulnerabilities by systematically testing different parameter values in URLs. This article delves into a bash script that automates parameter brute forcing, leveraging powerful tools such as Waybackurls and Httpx. We’ll discuss each tool’s purpose…

Introduction Welcome to my new article, today i will show my very old tool called LFI-Paradise, this tool its created with python and used to exploit Local File Inclusion In the world of cybersecurity, staying one step ahead of potential threats is crucial. As websites and applications become more complex, the…

Join my Discord server for private learning What is External Network Penetration Testing? -> External network penetration testing is the act of auditing an organization’s network security from an external perspective. It involves simulating real-world cyber attacks to identify vulnerabilities and weaknesses that malicious actors could exploit to gain unauthorized access to the network. There are not many CVEs in play!

Introduction Cookie session hijacking, also known as session hijacking or session side jacking, is an attack where unauthorized individual intercepts and steals a user’s session identifier or session cookie. …

By Jerry Tan (Div0-N0H4TS Finance) — id -un Hello, my name is Jerry, and I’m excited to tell you a bit more about my background. Although I’m a recent graduate, I already have over four years of experience in the cybersecurity industry. I achieved this by working and studying simultaneously, which allowed me to gain practical experience while…

Hello there! This is my first ever post on my Cybersecurity journey, specifically Penetration Testing, so please excuse my awkwardness. I am new to this field but am hoping my journaling will help those who are new as well to understand more. Perhaps, in some ways, my experience will be…

Greetings hackers; just quickly wanted to share an advisory write-up that my team discovered in Pydio Cells 4.2.0. These have been disclosed and we have been in very close communication with the vendor. …

if you are interested to learn hacking in good and professional way . You might need to learn few things that can Help you to tack your first step in hacking. if you already tack some Certification’s or Bachelor in Cyber Surety. Small Steps Directory Traveling , Web or Desktop application knowledge…