While I was working on making a website with a form that accepts user responses using rails framework and testing to see if the requests…

Hash Decryption . Contribute to X-Vector/Fuck-Hash development by creating an account on GitHub.

Hi everyone,

Hi guy I hope you all are fine this POC is all about how I convert the Self XSS To Evil XSS so let assume the site PRIVATE.COM

Hy Guy’s this write up is all about my SQL Injection that I found in PRIVATE program running on BugCrowd

Estimated Reading Time: 6 minutes Summary about Centreon Centreon is a free and open source infrastructure monitoring software, Centreon allows the system administrators to monitor their infrastructure from a centralized web application, Centreon has become…

Recently i discovered a semi responded SSRF on Vimeo with code execution possibility. This blog post explains how i found & exploited it…

الSOP/CORS هم حصانة المعلومات الحساسة من هجمات CORS vulnerability !

The attacker was able to send a password reset link to an arbitrary email by sending an array of email addresses instead of a single email address.

POST...

Discover the attack surface and prioritize risk with our "all-in-one" offensive security platform

Get an attacker's view of your organization with our all-in-one offensive security platform

In this blog, Sunil Yadav, our lead trainer for "Advanced Web Hacking " training class, will discuss a case study where a Server-Side Request Forgery (SSRF) vulnerability was identified and exploited

Awesome XSS stuff. Contribute to s0md3v/AwesomeXSS development by creating an account on GitHub.

Repository for hosting my research papers. Contribute to s0md3v/Papers development by creating an account on GitHub.

The Brave Browser is safer & much faster, based on Chrome. Earn crypto while your browse:
https://brave.com/hac463

Notes as I learn basic AWS penetration testing. Contribute to PinkP4nther/aws-testing-notes development by creating an account on GitHub.