HHHazem Hussieninhazemhussien.hashnode.dev·May 10, 2024 · 2 min readBSides CTF WriteupsI decided to take a little break from bug bounties and try out some CTFs, BSides CTF looked pretty interesting so i gave it a shot :), i solved the first 3 web challenges and half of the fourth (the other half was pwn :')). Web-Tutorial-01 the first ...00
HHHazem Hussieninhazemhussien.hashnode.dev·Apr 15, 2024 · 2 min readAnalysis & PoC for CVE-2023-6553After reading this blog post for CVE-2023-6553 (https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/) i was motivated to create a PoC for it. Looking at the vulnerable code supplied ...00
HHHazem Hussieninhazemhussien.hashnode.dev·Apr 15, 2024 · 3 min readCVE-2022-40361 WriteupIntroduction In this blog post i’ll go over how i found my first CVE while hunting on a public bug bounty program. Recon: I started my reconaissance with the usual recon steps like subdomain enumeration, probing for http web servers, screenshotting a...00
HHHazem Hussieninhazemhussien.hashnode.dev·Apr 15, 2024 · 6 min readRecon only bugs are sweet!**Sections**:– Introduction– Bug #1: Log Files Exposing Authentication Tokens.– Bug #2: Source Code Disclosure.– Bug #3: Stored XSS in a forum website.– Bug #4: Self XSS in Shopify.– Bug #5: Accessing internal network via vhost.– Conclusion. Introduc...00
