Nothing here yet.
Nothing here yet.
May 10, 2024 · 2 min read · I decided to take a little break from bug bounties and try out some CTFs, BSides CTF looked pretty interesting so i gave it a shot :), i solved the first 3 web challenges and half of the fourth (the other half was pwn :')). Web-Tutorial-01 the first ...
Join discussionApr 15, 2024 · 2 min read · After reading this blog post for CVE-2023-6553 (https://www.wordfence.com/blog/2023/12/critical-unauthenticated-remote-code-execution-found-in-backup-migration-plugin/) i was motivated to create a PoC for it. Looking at the vulnerable code supplied ...
Join discussionApr 15, 2024 · 3 min read · Introduction In this blog post i’ll go over how i found my first CVE while hunting on a public bug bounty program. Recon: I started my reconaissance with the usual recon steps like subdomain enumeration, probing for http web servers, screenshotting a...
Join discussionApr 15, 2024 · 6 min read · **Sections**:– Introduction– Bug #1: Log Files Exposing Authentication Tokens.– Bug #2: Source Code Disclosure.– Bug #3: Stored XSS in a forum website.– Bug #4: Self XSS in Shopify.– Bug #5: Accessing internal network via vhost.– Conclusion. Introduc...
Join discussion