abdelnasser·20h agoOne Deep Link, Zero Validation, Full ATO (Again)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
seif nasr·1d agoHow I Got Private Bug Bounty Invitations Without Hunting a Single BugNo recon. No scanning. No vulnerability hunting. Just Google.A response icon2A response icon2
abdelnasser·1d agoIntent Redirection to One-Click Account Takeover (But It’s a Duplicate)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoOne-Click Cookie Theft via Deep Link XSS (But Deep Links Are Out of Scope)بِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
abdelnasser·1d agoStealing App Internal Files via Intent Redirection to Insecure WebViewبِسْمِ اَللَّهِ وَالْحَمْدِ لِلَّهِ الَّذِي عَلَّمَ بِالْقَلَمِ عَلَّمَ الْإِنْسَانَ مَا لَمْ يَعْلَمْ وَالصَّلَاةَ وَالسَّلَامَ عَلَى…
Md. Fahim Shakil Chowdhury·1d ago“Exploiting Trust: DOM Clobbering to Same-Origin Script Execution in Intigriti’s Registry…Author: Md. Fahim Shakil Chowdhury Target: Intigriti BRP Challenge 1026 challenge-brp.challenges.intigriti.io Vulnerability Class…
Avinash Kumar·1d ago[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes RemotelyHi everyone!A response icon1A response icon1
Vigneshkumaroffsec·2d agoNetwork Security Testing Explained: What to Look For and How to Test It End to EndA complete methodology for assessing a network: how to map it, discover hosts and services, find weak configurations, test segmentation…
ATIT0·2d agoHow I Found My First Bug: Information Disclosure via Exposed Directory ListingIntroduction
Priyansh·3d agoHow two forward slashes let anyone use a government website as a free file hostThe most dangerous line of code I have ever found was commented out.
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:160:106/1*BnUqWuLxIdDhHDLlp1HmdA.png)
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:320:214/1*BnUqWuLxIdDhHDLlp1HmdA.png)
