Website Hacking

$ whoami — I Identify as “Ethical Student”. An amateur Bug Hunter from patriotic India who appreciates Cybersecurity. $ whatis IDOR-bug Abbr. Insecure Direct Object References. This bug enables an attacker to CRUD any data, with the reference of parameter and any type of ID, that is publically accessible and organized in an unsafe manner. $ cat ethicalstudent-3.txt I…

(LET’S EXPLORE WEBSITE) What is Photon ? Photon is a relatively fast crawler designed for automating OSINT (Open Source Intelligence) with a simple interface and tons of customization options. It’s designed by S0md3v and is written in one of my most favorite language, Python. …

(LET’S EXPOLRE HIDDEN FILES) What is metagoofil Metagoofil is a very powerful OSINT information gathering tool, developed by Edge Security. In essence, Metagoofil is used to extract metadata from the target. It supports various file types, including pdf, doc, xls and ppt Step 1 Installation Metagoofil are pre install in kali linux but in this we…

As a hacker, your role when reviewing a website or web application is to discover features that could potentially be vulnerable and attempt to exploit them. These features are usually parts of the website that require some interactivity with the user. …

[Part — 2: Content Discovery] What is are we looking for? Content can be many things, a file, video, picture, backup, a website feature. When we talk about content discovery, it’s the things that aren’t immediately presented to us and that weren’t always intended for public access. This content could be, for example, pages or portals intended for staff usage, older…

Website hacking has become very common, regardless of the size, scale, or nature of the organizations. Hackers are stealing 75 records per second and creating 300,000 new pieces of malware every day. Over 1 million WordPress websites are predicted to have been hacked in 2020 alone. …

False Lottery Claim And Data Leak From Authentic E-commerce Company Kothamangalam, Kerala Jun 20, 2021 (Issuewire.com) — Krishnadev is a cybersecurity expert from the state of Kerala in India. Krishnadev had purchased a product from Naaptol online, 2 Years back, which is a leading e-commerce platform in India. Recently he got a letter from Naaptol stating he had won almost…

On May 7, Colonial Pipeline — one of the largest oil pipelines in the nation — was hit by a ransomware attack, forcing it to shut down. Since Colonial is one of the main pipelines servicing the southeastern U.S. and the East Coast, panic ensued at gas stations across the…