⚡️The cyber security community to share knowledge, experiences, ideas, guidance and collaborate with other cyber security enthusiasts⚡️
🔰Discord: https://discord.gg/k8njp9ryE3
🔰Twitter: https://twitter.com/hacklido
🔰Instagram: https://instagram.com/hacklido
🔰Telegram: https://t.me/hacklido
🔰Reddit: https://www.reddit.com/user/hacklido
🔰Discord: https://discord.gg/k8njp9ryE3
🔰Twitter: https://twitter.com/hacklido
🔰Instagram: https://instagram.com/hacklido
🔰Telegram: https://t.me/hacklido
🔰Reddit: https://www.reddit.com/user/hacklido
Discord
Discord - A New Way to Chat with Friends & Communities
Discord is the easiest way to communicate over voice, video, and text. Chat, hang out, and stay close with your friends and communities.
🔰 #Intigriti November #XSS challenge.
https://www.valbrux.it/blog/2020/11/10/intigriti-november-xss-challenge/
https://www.valbrux.it/blog/2020/11/10/intigriti-november-xss-challenge/
❤1
Hey folks!
In our next live one-hour Black Hills Information Security (BHIS) webcast, BB King will walk through how he sets up Burp Suite for his own webapp and Web API pentests. Then he'll show the settings, tools, and BApp Store Extensions that help him perform better tests.
If you have any responsibility related to webapps - even if it's not pentesting them - you may find that Burp Suite can help you. If you already use Burp Suite, come see how one of our testers does it and we bet you'll find a thing or two you can take back and use on your next security assessment.
Please register for — Getting Started with Burp Suite & Webapp Pentesting w/ BB King (1-Hour) — on Nov 12, 2020 1:00-2:00 PM EST (UTC -5) at:
https://attendee.gotowebinar.com/register/4345479270957374479
In our next live one-hour Black Hills Information Security (BHIS) webcast, BB King will walk through how he sets up Burp Suite for his own webapp and Web API pentests. Then he'll show the settings, tools, and BApp Store Extensions that help him perform better tests.
If you have any responsibility related to webapps - even if it's not pentesting them - you may find that Burp Suite can help you. If you already use Burp Suite, come see how one of our testers does it and we bet you'll find a thing or two you can take back and use on your next security assessment.
Please register for — Getting Started with Burp Suite & Webapp Pentesting w/ BB King (1-Hour) — on Nov 12, 2020 1:00-2:00 PM EST (UTC -5) at:
https://attendee.gotowebinar.com/register/4345479270957374479
⚡ Mobile security startup Oversecured launches after self-funding $1 million, thanks to bug bounty payouts!
https://techcrunch-com.cdn.ampproject.org/v/s/techcrunch.com/2020/11/12/oversecured-mobile-app-security-bug-bounty/amp/?amp_js_v=a6&_gsa=1&usqp=mq331AQFKAGwASA%3D#aoh=16052362626250&csi=1&referrer=https%3A%2F%2Fwww.google.com&_tf=From%20%251%24s&share=https%3A%2F%2Ftechcrunch.com%2F2020%2F11%2F12%2Foversecured-mobile-app-security-bug-bounty%2F
https://techcrunch-com.cdn.ampproject.org/v/s/techcrunch.com/2020/11/12/oversecured-mobile-app-security-bug-bounty/amp/?amp_js_v=a6&_gsa=1&usqp=mq331AQFKAGwASA%3D#aoh=16052362626250&csi=1&referrer=https%3A%2F%2Fwww.google.com&_tf=From%20%251%24s&share=https%3A%2F%2Ftechcrunch.com%2F2020%2F11%2F12%2Foversecured-mobile-app-security-bug-bounty%2F
🔰How I Found The Facebook Messenger Leaking Access Token Of Million Users
November 12, 2020 by Guhan Raja (குகன் ராஜா)
https://medium.com/@guhanraja/how-i-found-the-facebook-messenger-leaking-access-token-of-million-users-8ee4b3f1e5e3?_branch_match_id=797484669011292539
November 12, 2020 by Guhan Raja (குகன் ராஜா)
https://medium.com/@guhanraja/how-i-found-the-facebook-messenger-leaking-access-token-of-million-users-8ee4b3f1e5e3?_branch_match_id=797484669011292539
Medium
How I Found The Facebook Messenger Leaking Access Token Of Million Users
Hi everyone,
🔰Scripthunter is a tool that finds javascript files for a given website.
GitHub repo: github.com/robre/scripthunter
⚡Share: @hacklido
GitHub repo: github.com/robre/scripthunter
⚡Share: @hacklido
GitHub
GitHub - robre/scripthunter: Tool to find JavaScript files on Websites
Tool to find JavaScript files on Websites. Contribute to robre/scripthunter development by creating an account on GitHub.
HACKLIDO | Cyber Security pinned «⚡️The cyber security community to share knowledge, experiences, ideas, guidance and collaborate with other cyber security enthusiasts⚡️ 🔰Discord: https://discord.gg/k8njp9ryE3 🔰Twitter: https://twitter.com/hacklido 🔰Instagram: https://instagram.com/hacklido…»
🔰Account Takeover(ATO) and Email verification bypass in 2mins @hacklido
https://medium.com/@karthiksoft007/account-takeover-ato-and-email-verification-bypass-in-2mins-5a6c8cb692a7
https://medium.com/@karthiksoft007/account-takeover-ato-and-email-verification-bypass-in-2mins-5a6c8cb692a7
Medium
Account Takeover(ATO) and Email verification bypass in 2mins
Description: it small attack and easy to execute always check reset password link manually
https://twitter.com/hacklido/status/1328532332760875009?s=20
🖇 Retweet as much as possible to spread the word
🖇 Retweet as much as possible to spread the word
Twitter
hacklido
⚡️The #cybersecurity community to share knowledge, experiences, ideas, guidance and collaborate with other cyber security enthusiasts⚡️ Discord link: discord.gg/k8njp9ryE3 Instagram: instagram.com/hacklido Telegram: t.me/hacklido #hacking #pentest #bugbounty…
⭐️ Advanced MSSQL Injection Tricks @hacklido
https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/
https://swarm.ptsecurity.com/advanced-mssql-injection-tricks/
🔰Solving #Intigriti ’s November #XSS Challenge with the #JavaScript console. @hacklido
https://grumpinout.medium.com/solving-intigritis-november-xss-challenge-with-the-javascript-console-dde7253117dd
https://grumpinout.medium.com/solving-intigritis-november-xss-challenge-with-the-javascript-console-dde7253117dd
Medium
Solving Intigriti’s November XSS Challenge 2020 With the JavaScript Console.
Like you should do with every challenge, I started with reading the rules. Those were clear. The goal was to execute…
🔰To all the Cyber Security Penetration Testers - @hacklido
Kindly please check out Tryhackme - Advent of Cyber 2020 Competition.
There are a-lot of great content and amazing prizes you really want to check it out. @hacklido
Below are Sponsorships: @hacklido
⚡5x PWK Course + 30 day lab access + OSCP exam certification ($4,995)
⚡3x INE Cyber Security Passes ($6,000)
⚡20x Proving Grounds Vouchers ($380)
⚡15x TryHackMe Subscriptions ($150)
⚡Attacking Windows AD Throwback Course ($120)
⚡Raspberry Pi 400 ($122)
⚡HAK5 O.MG Cable ($120)
⚡3x Security+ CertMaster Practice Vouchers ($600)
⚡2x Security+ Certification Vouchers ($560)
⚡2x $30 TryHackMe Swag Vouchers ($60)
⚡HAK5 Wifi Pineapple ($100)
⚡HAK5 Rubber Ducky ($50)
⚡HAK5 Packet Squirrel ($60)
⚡HAK5 LAN Turtle ($60)
If you are someone with Never Give UP Attitude and passionate about Cyber Security you definitely want to check this. @hacklido
Check: https://tryhackme.com/christmas
Kindly please check out Tryhackme - Advent of Cyber 2020 Competition.
There are a-lot of great content and amazing prizes you really want to check it out. @hacklido
Below are Sponsorships: @hacklido
⚡5x PWK Course + 30 day lab access + OSCP exam certification ($4,995)
⚡3x INE Cyber Security Passes ($6,000)
⚡20x Proving Grounds Vouchers ($380)
⚡15x TryHackMe Subscriptions ($150)
⚡Attacking Windows AD Throwback Course ($120)
⚡Raspberry Pi 400 ($122)
⚡HAK5 O.MG Cable ($120)
⚡3x Security+ CertMaster Practice Vouchers ($600)
⚡2x Security+ Certification Vouchers ($560)
⚡2x $30 TryHackMe Swag Vouchers ($60)
⚡HAK5 Wifi Pineapple ($100)
⚡HAK5 Rubber Ducky ($50)
⚡HAK5 Packet Squirrel ($60)
⚡HAK5 LAN Turtle ($60)
If you are someone with Never Give UP Attitude and passionate about Cyber Security you definitely want to check this. @hacklido
Check: https://tryhackme.com/christmas