InfoSec Community
@InfoSecComm

Largest InfoSec publication with 80,000+ followers and 3M+ monthly views.

infosecwriteups.com
Joined April 2018
It is claimed that the RSA - 2048 key has been broken using Quantum Computing. Nothing has been published yet apparently because of publication delays. Is this going to be another super conductor moment or are we witnessing a breakthrough here. Read more: linkedin.com/posts/edgerck_t…
25
126
479
215,066
New Write-up on InfoSec Write-ups publication : "API Token Hijacking Through Clickjacking" ift.tt/3fOyili

API Token Hijacking Through Clickjacking

Hey Fellas! I hope you all are doing good and safe. Thank you so much for showing your interest in my previous blogs.

infosecwriteups.com
2
109
317
New Write-up on InfoSec Write-ups publication : "BUG HUNTING METHODOLOGY FOR BEGINNERS" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3g64Dqi

BUG HUNTING METHODOLOGY FOR BEGINNERS

In this write up I am going to describe the path I walked through the bug hunting from the beginner level. This write-up is purely for new…

infosecwriteups.com
1
104
278
New Write-up on InfoSec Write-ups publication : "Moodle LMS — SQL Injection using Unicode Characters" ift.tt/3gvSgkP
94
275
If you do not already know us. We are the largest InfoSec related publication on Medium, with more than 200 writers and 15,000+ followers. We have 7,000+ daily unique visitors. And a lot of minutes spent reading our articles. (1/n) medium.com/bugbountywriteup

InfoSec Write-ups

A collection of write-ups from the best hackers in the world on topics ranging from bug bounties and CTFs to vulnhub machines, hardware challenges and real life encounters. Subscribe to our weekly...

infosecwriteups.com
2
85
260
New Write-up on InfoSec Write-ups publication : "Google Dorks: An Advanced Hacking Tool" #bugbounty #bugbountywriteup #bugbountytips ift.tt/pUfnaHw

Google Dorks: An Advanced Hacking Tool

This blog will introduce a must-have skill called google Dorking, also known as Google hacking.

infosecwriteups.com
2
85
246
Happy to introduce @GodfatherOrwa as one of our speakers at #IWCON2022. Catch his talk on "Recon skills and tips" on 17th December 2022, 08:30 PM IST. Registered for the conference yet? Book your seat here: iwcon.live/ #conference #infosec #bugbounty #hacking
20
22
241
New Write-up on InfoSec Write-ups publication : "How I hacked into a Telecom Network — Part 1 (Getting the RCE)" ift.tt/2ZPhHIM
1
72
233
New Write-up on InfoSec Write-ups publication : "Almost everything about Browser Security for beginners part-1" ift.tt/2Z9vM20

Almost everything about Browser Security for beginners part-1

This article is for beginners who want to learn about Browser security headers and concepts, like Let’s get started! 😃

infosecwriteups.com
1
83
238
🚨 New Writeup Alert! 🚨 "PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367)" by coffinxp is now live on IW! Check it out here: infosecwriteups.com/be4a64f8… #cve #bugbountytips #bugbounty #bugbountywriteup #pdf

PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367)

How to find pdf.js vulnerability in Very detail writup have a look

infosecwriteups.com
1
51
233
13,776
New Write-up on InfoSec Write-ups publication : "How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2R3CLtd

How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt

I’m 21 years old and I decided to take OSCP two years ago when I was 19 years old. I had to wait for 1 and a half years until I won an…

infosecwriteups.com
3
63
233
🚨 Are you preparing for OSCP in 2023? Daniel Kula just passed OSCP and has written a beginners guide to passing OSCP in 2023 🥳 Checkout their article here: infosecwriteups.com/guide-to…

Beginner’s Guide To OSCP 2023

On April 9th 2023, after 9 months of preparation, I officially became an Offensive Security Certified Professional (OSCP)

infosecwriteups.com
4
79
226
20,317
💉SQLMap is a powerful tool that helps you find SQL injection vulnerabilities but do you know how to use them? Worry not as our medium writer Frost got you covered! Read "How to Use SQLMap to Find SQL Injection Vulnerabilities" here: infosecwriteups.com/how-to-u… #bugbounty #sqli
5
50
219
30,283
New Write-up on InfoSec Write-ups publication : "Hacking Web3: Introduction and How to Start" #bugbounty #bugbountywriteup #bugbountytips ift.tt/bFk5G7B

Hacking Web3: Introduction and How to Start

Web3 is a newfound technology, and we expect significantly more security compared to web2. In fact, web3 is a new version of our old World…

infosecwriteups.com
1
69
205
📢GIVEAWAY ALERT📢 20 lucky winners get all-access passes to #IWCON2022. How to participate? ♥️this Tweet, tag a friend in the comments, and #retweet. Results will be announced on 15 December 2022. #infosec #bugbounty #security
134
126
212
"Ways I followed to Bypass ‘403’ — Your checklist" is a fantastic article written by Suprajabaskaran where they have discussed in depth about different tricks to bypass 403 in web applications. Read here: infosecwriteups.com/ways-i-f…

Ways I followed to Bypass ‘403’ — Your checklist

Hello people! Hope you all are doing well.

infosecwriteups.com
2
45
200
27,789
New Write-up on InfoSec Write-ups publication : "Bypass the Firewall with SSH Tunnelling" #bugbounty #bugbountywriteup #bugbountytips ift.tt/OtJmSyw

Bypass the Firewall with SSH Tunnelling

a guide to make an SSH tunnel for accessing blocked port over port 22

infosecwriteups.com
3
81
203
New Write-up on InfoSec Write-ups publication : "LDAP in Active Directory" #bugbounty #bugbountywriteup #bugbountytips ift.tt/XESaCNY

LDAP in Active Directory

This article provides a basic overview of the Lightweight Directory Access Protocol (LDAP). In this article, we will explore the basic…

infosecwriteups.com
1
67
195
New Write-up on InfoSec Write-ups publication : "A TALE OF 5250$ : HOW I ACCESSED MILLIONS OF USER’S DATA INCLUDING THEIR NATIONAL ID’S" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3zKlreT
30
150
191
New Write-up on InfoSec Write-ups publication : "How to use Ghidra to Reverse Engineer Mobile Application" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2N6wOtj
1
51
179
New Write-up on InfoSec Write-ups publication : "CORS one liner command exploiter" ift.tt/3cIE7Ph

CORS one liner command exploiter

To all Bug Hunters and Security Researcher, I made a Cheatsheet specifically for CORS missconfigurations. By simply copy-paste the…

infosecwriteups.com
73
182
🚨 Attention 🚨 We are looking for ambassadors all over the globe to join our crew! Being an ambassador for the IW Weekly Newsletter unlocks a variety of perks such as: 1. Certificate of contribution 2. Swags and Merch and most importantly 😱 Free pass to IWCON in future! 😱
121
49
180
40,012
New Write-up on InfoSec Write-ups publication : "Finding Vulnerable Info Using Google Dorks — Ethical Hacking" #bugbounty #bugbountywriteup #bugbountytips ift.tt/X7FvVTK

Finding Vulnerable Info Using Google Dorks — Ethical Hacking

Google Dorking is a technique that hackers use to find information that may have been accidentally exposed to the internet.

infosecwriteups.com
2
61
174
New Write-up on InfoSec Write-ups publication : "$6000 with Microsoft Hall of Fame | Microsoft Firewall Bypass | CRLF to XSS | Microsoft Bug Bounty" #bugbounty #bugbountywriteup #bugbountytips ift.tt/6SVLK0O
3
60
175
🚨 New Writeup Alert! 🚨 "How to find bugs in the Microsoft IIS page." by loyalonlytoday is now live on IW! Check it out here: infosecwriteups.com/120c2050… #bugbounty #infosecwriteups #hacking #bugs #cybersecurity

How to find bugs in the Microsoft IIS page.

🚨👉 Free Link: clickhere👈🚨

infosecwriteups.com
30
170
11,158
New Write-up on InfoSec Write-ups publication : "Finding My First Bug: HTTP Request Smuggling" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3jM5DAu
1
44
163
New Write-up on InfoSec Write-ups publication : "Unauthenticated Account Takeover Through HTTP Leak" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3nIzdrp

Unauthenticated Account Takeover Through HTTP Leak

I used “app” keyword in place of application name as it was private program.

infosecwriteups.com
1
54
160
New Write-up on InfoSec Write-ups publication : "Account takeover through password reset" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3bUapJv

Account takeover through password reset

Hello Everyone,

infosecwriteups.com
2
39
157
🚨 New Writeup Alert! 🚨 "How I Bypassed 2FA and Took Over Accounts with a Simple Brute Force Attack" by Rishant Arora is now live on IW! Check it out here: infosecwriteups.com/68ffc5cf… #penetrationtesting #cybersecurity #ethicalhacking #hacking #cyberattack

How I Bypassed 2FA and Took Over Accounts with a Simple Brute Force Attack

I’ve been learning web security for the past few weeks, and during this time, I’ve developed a habit of analyzing how different websites…

infosecwriteups.com
1
33
161
7,809
New Write-up on InfoSec Write-ups publication : "Importance of burp history analysis to bypass 403" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3wEtpUN

Importance of burp history analysis to bypass 403

or, how I learned that specific Referer header can make all the difference

infosecwriteups.com
42
149
New Write-up on InfoSec Write-ups publication : "How I exploit the JSON CSRF with method override technique" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2WIDfo7

How I exploit the JSON CSRF with method override technique

Introduction — CSRF:

infosecwriteups.com
41
151
New Write-up on InfoSec Write-ups publication : "PII Leakage via IDOR + Weak PasswordReset = Full Account Takeover" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3i5mMlY

PII Leakage via IDOR + Weak PasswordReset = Full Account Takeover

Hello Hunters, this is a quick write up on one of my recent findings on a bug bounty program. Before jumping into the vulnerability, let…

infosecwriteups.com
63
149
Here are the slides for the mush awaited talk - Pwning Admin Panels by @hunter0x7 #bugbounty #bugbountytips houseofhackers.xyz/t/pwning-…
4
63
148
17,313
New Write-up on InfoSec Write-ups publication : "Vimeo SSRF with code execution potential." ift.tt/38QKkZ5
1
39
140
New Write-up on InfoSec Write-ups publication : "Increasing XSS impact using XSScope" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3cPoSp6
52
137
New Write-up on InfoSec Write-ups publication : "Detecting DNS Tunneling using Spark Structured Streaming" #bugbounty #bugbountywriteup #bugbountytips ift.tt/0Eak5jX

Detecting DNS Tunneling using Spark Structured Streaming

From generating DNS logs to end-to-end implementation of structured streaming

infosecwriteups.com
48
137
🆕 New Post 🆕 Checkout this article where Abbas has explained and demonstrated how one can bypass rate limiting with TOR: medium.com/@abbasheybati1/by…

Bypass Rate Limit Request (fuzzing/etc…) With TOR

Hey guys

infosecwriteups.com
1
30
136
16,858
New Write-up on InfoSec Write-ups publication : "Leveraging LFI to RCE in a website with +20000 users" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3jusy2n
2
41
134
How much bounty should be awarded for this critical issue? Wrong answers only. #BugBounty
42
6
129
45,820
This hacker was awarded $10,000 USD for reporting faulty crop and trim feature in #Facebook reels 🤯💸 Learn in thread 👇
3
20
127
35,244
📣ATTENTION HACKERS📣 We are giving away 2 professional passes for @bsidesahmedabad To qualify, RT this and follow us. If you have a friend who might like this, tag them too!⭐️ We’ll pick two winners by Tuesday! #giveaway #bsides
36
96
130
New Write-up on InfoSec Write-ups publication : "VPS Cheatsheet for bug hunting" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2QIkluy

VPS Cheatsheet for bug hunting

I have found myself way too many times forgetting certain commands, or how to perform specific actions related to bug hunting.

infosecwriteups.com
51
126
🚨 New Writeup Alert! 🚨 "My First Bug: How I Was Able to Bypass the WAF and Uncover a Reflected XSS" by Fares Elsadek is now live on IW! Check it out here: infosecwriteups.com/e0534b6f… #cybersecurity #infosec #bugbounty #hacking #xssattack

My First Bug: How I Was Able to Bypass the WAF and Uncover a Reflected XSS

Hello everyone, I’m Fares. Today, I’ll share the story of how I successfully identified a reflected XSS vulnerability within a public bug…

infosecwriteups.com
2
13
129
6,645
New Write-up on InfoSec Write-ups publication : "Dorking for Bug Bounties" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3xPqCIs
59
125
New Write-up on InfoSec Write-ups publication : "Hacking AWS Cognito Misconfiguration to Zero Click Account Takeover" #bugbounty #bugbountywriteup #bugbountytips ift.tt/roHhUgL
59
132
Do you know how to use #XSS #payloads that result in #bounties up to $44,625? 🤯💸 Learn in thread 👇
2
33
123
26,483
New Write-up on InfoSec Write-ups publication : "‍$40,000 Bounty, Authentication Bypass Techniques, Cache Poisoning, IDORs, Password Recovery…" #bugbounty #bugbountywriteup #bugbountytips ift.tt/QaFkpio

👩‍💻$40,000 Bounty, Authentication Bypass Techniques, Cache Poisoning, IDORs, Password Recovery…

$40,000 for finding 3 distinct bugs in Microsoft’s new chromium based browser.

infosecwriteups.com
1
45
125
New Write-up on InfoSec Write-ups publication : "Fun with header and forget password, with a twist:" ift.tt/3kRKJQt

Fun with header and forget password, with a twist:

Headers are quite something to play with. The most usual ones are X-Forwarded-For (usually used for waf bypass), and X-Forwarded-Host…

infosecwriteups.com
1
54
119
IDOR in a GraphQL query leaked private photos of a million $$$ app 😮💵 Learn in thread 👇
1
25
122
New Write-up on InfoSec Write-ups publication : "2FA Bypass via Forced Browsing" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3tRkr4a
30
125
Memes in our DMs are funny 😂
1
19
118
New Write-up on InfoSec Write-ups publication : "Authentication Bypass | Easy P1 in 10 minutes" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3xurpOA

Authentication Bypass | Easy P1 in 10 minutes

Recon always wins

infosecwriteups.com
38
121
🚨 New Writeup Alert! 🚨 "Bypassing 403 & 401 Errors: All Hacker Techniques Revealed " by Vipul Sonule is now live on IW! Check it out here: infosecwriteups.com/0709ddfa… #hacking #ai #programming #cybersecurity #tech

Bypassing 403 & 401 Errors: All Hacker Techniques Revealed 🔓

Hey there, fellow hackers 👋

infosecwriteups.com
2
32
120
7,839
An interesting discovery about an Akamai misconfiguration made #hackers more than $46,000 🤑 Learn in thread 👇
2
13
119
😍 @basu_banakar has found a fantastic SSRF and has written about their finding and published the article at InfosecWriteups. Do checkout this well-written article here: basu-banakar.medium.com/expl…

Exploiting Non-Cloud SSRF for More Fun & Profit

Hi Everyone, This is Basavaraj, Back again with another SSRF Writeup :) You can check my older writeups here…

infosecwriteups.com
2
44
117
12,818
New Write-up on InfoSec Write-ups publication : "How I was able to change victim’s password using IDN Homograph Attack" ift.tt/38OLl3A

How I was able to change victim’s password using IDN Homograph Attack

Hey guys Abhishek this side. This is my first writeup. This article is about a vulnerability I was able to find in the BugCrowd private…

infosecwriteups.com
31
117
New Write-up on InfoSec Write-ups publication : "5 Most Effective Ways of Learning in Bug Bounty" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3w9N11Y

5 Most Effective Ways of Learning in Bug Bounty

Follow these ways and no one can stop you from achieving your dream !!

infosecwriteups.com
2
52
117
🔑 Learn how to hack OAuth 2.0 with Gowthamaraj Rajendran here:infosecwriteups.com/oauth-2-…
2
31
114
14,420
New Write-up on InfoSec Write-ups publication : "How I chained P4 To P2 [Open Redirection To Full Account Takeover]" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3tcpzke
1
39
111
New Write-up on InfoSec Write-ups publication : "New technique 403 bypass lyncdiscover.microsoft.com" #bugbounty #bugbountywriteup #bugbountytips ift.tt/5fQRDqw
4
29
112
New Write-up on InfoSec Write-ups publication : "Simple Logic: Leads to account takeover." ift.tt/3cY1fJR

Simple Logic: Leads to account takeover.

So it’s been a couple of weeks i broke up with XSS, and I truly fell in love with logical bugs. It was so challenging and gave me a lot of…

infosecwriteups.com
35
116
New Write-up on InfoSec Write-ups publication : "All about Blind XSS for beginners" ift.tt/2EEMpwg
33
109
New Write-up on InfoSec Write-ups publication : "How To Attack Admin Panels Successfully" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2B3SgYo

How To Attack Admin Panels Successfully

Attacking Web Apps Admin Panels The Right Way

infosecwriteups.com
6
34
111
New Write-up on InfoSec Write-ups publication : "Burp Suite Extensions for Web Hunting" #bugbounty #bugbountywriteup #bugbountytips ift.tt/TeQNU2y

Burp Suite Extensions for Web Hunting

Introduction

infosecwriteups.com
30
111
😮 YoKo Kho was rewarded $2500 for a critical P1 broken access control vulnerability. Checkout how he was able to do this here: medium.com/@YoKoKho/the-unex…
26
113
11,377
New Write-up on InfoSec Write-ups publication : "How I made 25000 USD in bug bounties with reverse proxy" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3jCokrJ

How I made 25000 USD in bug bounties with reverse proxy

A proxy server is a go‑between or intermediary server that forwards requests for content from multiple clients to different servers across…

infosecwriteups.com
28
115
New Write-up on InfoSec Write-ups publication : "Super Admin panel without Credentials " #bugbounty #bugbountywriteup #bugbountytips ift.tt/322AljW

Super Admin panel without Credentials 😎

As-Salaam-Alaikum.

infosecwriteups.com
1
42
111
🎉 ChatGPT has been trending lately but do you know how it can be used for Cybersecurity? Checkout Supun Halangoda's recent article on "OpenAI ChatGPT for Cyber Security" published at InfosecWriteups Link: infosecwriteups.com/openai-c… #openai #chatgpt3 #gpt3 #cybersecurity #infosec

OpenAI ChatGPT for Cyber Security

How OpenAI’s ChatGPT can be used for Cyber Security (For Red Teaming and Blue Teaming)

infosecwriteups.com
1
35
112
12,233
🤔 Curious to learn how to decrypt HTTPS traffic as a hacker? Checkout Febi Mudiyanto's article on the above topic published at InfosecWriteups. Read: infosecwriteups.com/decrypti…

Decrypting HTTPS Traffic as A Hacker

A guide to decrypting HTTPS traffic with Wireshark

infosecwriteups.com
1
46
109
10,891
New Write-up on InfoSec Write-ups publication : "Firewall Evasion Techniques using Nmap" #bugbounty #bugbountywriteup #bugbountytips ift.tt/ilwY1Ln

Firewall Evasion Techniques using Nmap

Introduction

blog.devgenius.io
27
109
New Write-up on InfoSec Write-ups publication : "Android Pentesting Methodology (Pt. 1)" #bugbounty #bugbountywriteup #bugbountytips ift.tt/kR1avXY
48
110
New Write-up on InfoSec Write-ups publication : "Identifying & Escalating HTTP Host Header Injection attacks" #bugbounty #bugbountywriteup #bugbountytips ift.tt/34J4K5I

Identifying & Escalating HTTP Host Header Injection attacks

The purpose of the HTTP Host header is to help identify which back-end component the client wants to communicate with. Several…

infosecwriteups.com
32
109
New Write-up on InfoSec Write-ups publication : "Finding The Origin IP Behind CDNs" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2L8rQv4
1
45
107
New Write-up on InfoSec Write-ups publication : "Laravel 8.x image upload bypass — Zero Day" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3r8cppS
1
36
105
New Write-up on InfoSec Write-ups publication : "How I Bypassed Netflix Profile Lock?" #bugbounty #bugbountywriteup #bugbountytips ift.tt/342KIFw
34
108
New Write-up on InfoSec Write-ups publication : "Leveraging Burp Suite extension for finding HTTP request smuggling." #bugbounty #bugbountywriteup #bugbountytips ift.tt/3hreSql
3
59
108
New Write-up on InfoSec Write-ups publication : "Hacking GraphQL — Part 1" #bugbounty #bugbountywriteup #bugbountytips ift.tt/I0JvsVD
42
108
Guess what! @hunter0x7, Admin Pwner, is speaking at #IWCON2022 🤩🥳 His topic: My approach to accessing admin panels. Catch him live on 18th Dec, 10:30pm IST. Don't miss this! Drop a ❤️ and Register Today: iwcon.live #hacking #bugbounty #adminpwner
3
17
111
New Write-up on InfoSec Write-ups publication : "An HTML Injection Worth 600$ Dollars" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3cJ2OwU

An HTML Injection Worth 600$ Dollars

When not letting go, and fighting for your rights, payback..

infosecwriteups.com
1
33
106
New Write-up on InfoSec Write-ups publication : "Leveraging Burp Suite extension for finding IDOR(Insecure Direct Object Reference)." #bugbounty #bugbountywriteup #bugbountytips ift.tt/2U4TvBI

Leveraging Burp Suite extension for finding IDOR(Insecure Direct Object Reference).

IDOR is one of the common vulnerabilities found in bug bounty websites. Let's see how to easily catch them.

infosecwriteups.com
38
107
HEADS UP: The slides by @GodfatherOrwa on yesterday's #IWCON2022 talk "Recon tips and skills" are now available for view/download - houseofhackers.xyz/t/god-fat… #Retweet and spread the word!♥️
5
42
103
21,503
What are some of the most common cybersecurity interview questions? #infosec #cybersecurity #interview
10
25
97
🆕 New Post! 🆕 @heybenchmarkkk has shared their experience on a very interesting RCE they found recently. Checkout "How I escalated default credentials to Remote Code Execution" published at InfosecWriteups here: infosecwriteups.com/how-i-es…

How I escalated default credentials to Remote Code Execution

Hello All, We all know Recon is very important to get P1 bugs. Shodan and Censys are probably the best search engines. I have been testing…

infosecwriteups.com
1
25
101
15,654
New Write-up on InfoSec Write-ups publication : "XSS Through Parameter Pollution" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3umsHdD

XSS Through Parameter Pollution

Hi everyone, In this blog, I was able to perform an XSS attack with the help of Parameter pollution which bypasses target’s restriction.

infosecwriteups.com
36
102
New Write-up on InfoSec Write-ups publication : "Exploiting HTTP Request Smuggling (TE.CL)— XSS to website takeover" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2OCJcSA
43
104
New Write-up on InfoSec Write-ups publication : "How to write simple script to automate finding bugs" #bugbounty #bugbountywriteup #bugbountytips ift.tt/6FvrQ19

How to write simple script to automate finding bugs

Simple way to write python script to automate finding bugs

infosecwriteups.com
3
32
97
New Write-up on InfoSec Write-ups publication : "‍IW Weekly #39: $10,000 Bounty, Zero-click Account Takeover, Stored XSS, Open Redirection…" #bugbounty #bugbountywriteup #bugbountytips ift.tt/E7BWOuY

👩‍💻IW Weekly #39: $10,000 Bounty, Zero-click Account Takeover, Stored XSS, Open Redirection…

$10,000 USD award for reporting faulty crop and trim feature in Facebook reels 😍

infosecwriteups.com
27
99
15,354
🚨 New Writeup Alert! 🚨 "$50K Bounty Just for GitHub Access Token exposure" by Mr Horbio is now live on IW! Check it out here: infosecwriteups.com/d92dcc34… #pentesting #cybersecurity #hacking #ethicalhacking #bugbounty

$50K Bounty Just for GitHub Access Token exposure

This vulnerability gives you a thousands of dollar bounty Just finding a Key

infosecwriteups.com
1
21
103
6,094
New Write-up on InfoSec Write-ups publication : "All about File upload XSS" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2RNcJLi
2
30
105
🔥49th edition of IW Weekly is live 🔥 In this week's newsletter learn about: 1. $10,000 RCE 2. Account Takeover 3. Gitpod 0 Day 4. Payment Bypass 5. IDOR’s 📖 Read here: weekly.infosecwriteups.com/i… #bugbounty #infosec #newsletter #cybersecurity

👩‍💻IW Weekly #49: $10000 RCE, Gitpod 0 Day, SQL Injection, Authentication Bypass, API Fuzzing,...

@NahamSec shares valuable insights on how to navigate the complex world of bug bounty hunting, including tips on where and how to get started. Welcome to the #IWWeekly49 - the Monday newsletter that...

weekly.infosecwriteups.com
2
24
94
17,758
New Write-up on InfoSec Write-ups publication : "Server Side Request Forgery — SSRF" ift.tt/39yt0YU

Server Side Request Forgery — SSRF

Server side request forgery is one of the web vulnerabilities which allows an attacker to use the backend server to make unintended…

infosecwriteups.com
1
35
100
New Write-up on InfoSec Write-ups publication : "GraphQL introspection leads to sensitive data disclosure." ift.tt/3iUnnZk
51
101
New Write-up on InfoSec Write-ups publication : "DNS in Active Directory" #bugbounty #bugbountywriteup #bugbountytips ift.tt/kjiDM0V

DNS in Active Directory

This article provides a basic overview of how the Domain Name System (DNS) protocol works. In this article, we will explore the basic…

infosecwriteups.com
31
90
New Write-up on InfoSec Write-ups publication : "How I was able to bypass the subscription plan of a famous regional e-paper web application by…" #bugbounty #bugbountywriteup #bugbountytips ift.tt/30lOogx
42
97
New Write-up on InfoSec Write-ups publication : "Command Injection — All in one Blog" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3kxkSyT
1
39
99
New Write-up on InfoSec Write-ups publication : "Burp Suite, Nmap, Priv Esc and more!" ift.tt/3kTKyE6
28
93
New Write-up on InfoSec Write-ups publication : "How to discover up to 10,000 subdomains with your own tool" #bugbounty #bugbountywriteup #bugbountytips ift.tt/3e3qxdn

How to discover up to 10,000 subdomains with your own tool

To create this tool we are going to use bash to program the tasks that we will use, which we are going to see them by parts

infosecwriteups.com
1
31
101
Ott3rly has published a wonderful post at InfosecWriteups on how to hunt in scale for leaked sensitive documents. The ideas shared is unique and deserves a clap here: infosecwriteups.com/mass-hun…
16
100
8,666
New Write-up on InfoSec Write-ups publication : "Weak Cryptography Leads To Open Redirect" ift.tt/2XfcwQX

Weak Cryptography Leads To Open Redirect

Hello Everyone!, I hope you are doing good and safe. If you are a noob in bug hunting you can check my previous blog and today I am going…

infosecwriteups.com
3
30
94
New Write-up on InfoSec Write-ups publication : "[ExpDev] Reverse TCP Shell" #bugbounty #bugbountywriteup #bugbountytips ift.tt/2WILmRn

[ExpDev] Reverse TCP Shell

What is a Reverse Shell?

infosecwriteups.com
22
91