Sergio Medeirosgrumpz.net·Apr 22, 2024Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous UsersWhile enumerating the scope of a target on a private bug bounty program, I came across a subdomain used for generating PDF files. However, it seemed out-of-scope as they were simply white labeling a service called PDFMyURL, which lets you convert any...Discuss·10 likes·590 readsMy Security Researchbugbounty
FIKARA BILALbilaldotcom.hashnode.dev·Apr 15, 2024The gaining access phaseIntroduction The Gaining Access phase in penetration testing represents a pivotal point where ethical hackers try to penetrate a target system's defenses. This article will explore the complexities of this phase, examining the techniques, tools, and ...Discuss#cybersecurity
Mohamed Hegazih0kaz.hashnode.dev·Apr 14, 2024Chapter 0: Attacking Network Protocols Book Introductionبسم الله الرحمن الرحيم , اللهم صلي و سلم و بارك علي سيدنا محمد صلي الله عليه وسلم About Book: About the Author: James Forshaw is a renowned computer security researcher at Google Project Zero Book on amazon: Attacking Network Protocols: A Hacker’s ...Discuss·27 readspenetration testing
Cyberouscyberous.hashnode.dev·Apr 3, 2024How to Build a Career in Cybersecurity in 2024?In an increasingly digital world fraught with evolving threats, cybersecurity has emerged as a critical profession, safeguarding organizations, individuals, and nations against malicious cyber activities. A cybersecurity career encompasses a wide arr...Discuss#cybersecurity
Green Methodgreenmethod.hashnode.dev·Mar 26, 2024Top Penetration Testing Methodology And Standards in 2024It is always better to be safe than to be sorry. In the cyberworld, we never know what’s coming next. But there are certain things we can do to be safe. Penetration testing methodology is one among them. Also known as a pentest, penetration testing m...Discusspenetration testing
chris tchassemchris21.hashnode.dev·Mar 24, 2024How to gain access into a bank's web application (THM Lab session)💡 In order to get through this article, you need to have some basic understandings on computer networks and linux systems. This lab is replicable as you can find it on the website TryHackMe.com First step is to setup your environment with the appr...Discusspenetration testing
Matt Biedronskiblog.gonskicyber.com·Feb 29, 2024CVE-2023-5830: Critical Security Vulnerability in ColumbiaSoft Document LocatorDisclaimer: This information is being published for educational purposes only Background With the help of my colleague @micahvandeusen, in the late-summer of 2022 we identified and exploited a critical security vulnerability present within ColumbiaS...Discuss·487 readscve-2023-5830
Niccolo Lampathedatalife.com·Feb 11, 2024TryHackMe - Linux Privilege Escalation: CapabilitiesThis article discusses the solution for TryHackMe's Linux Privilege Escalation Capabilities task so proceed with caution. I would suggest that you try to solve it on your own as you will learn a lot in the process of attempting. Try to give it your a...Discusshacking
Niccolo Lampathedatalife.com·Feb 11, 2024TryHackMe - Linux Privilege Escalation: SUIDThis article discusses the solution for TryHackMe's Linux Privilege Escalation SUID task so proceed with caution. I would suggest that you try to solve it on your own as you will learn a lot in the process of attempting. Try to give it your all until...Discusshacking
Shanto Kumar Sahashanto-kumar-saha.hashnode.dev·Feb 7, 2024Understanding Penetration TestingIn this blog, I will describe you about Penetration Testing- Penetration Testing (Pen Testing) is a proactive approach to identifying and addressing security vulnerabilities within computer systems, networks, or applications. It involves simulating r...Discusspenetration testing
