Hello there,

Hello everyone, I hope by the grace of God everyone who is reading this blog post is doing well and their families during this pandemic…

An unusual type of Cross-Site Scripting vulnerability made by emoticons

Hello Everyone,

Hi, everyone!

A writeup of my first bug!

As mentioned in the Mobile Pentesting 101 – How to set up your Android Environment article, I am now offering you valuable information regarding the iOS pentesting environment. This will be m…

Every idea needs a Medium

PDF injection was listed down in the top 10 web application hacking techniques of 2020 and still it appears to be one of the most…

Engineering Recipes

Hey guys Pratik this side. In this writeup, I’m going to share some of my open-redirection hunts and what resources I use to find…

“Whether it is port scanning or to get a reverse shell, everything is possible with Netcat.” Today in this article we will be exploring one

Recon always wins

Gain insider tips about Server Side Request Forgery (SSRF) with the Pentester’s Guide to SSRF, written by cybersecurity expert Busra Demir from Cobalt.

Is fuzzing your favourite attack type, but you didn’t enjoy it due to the low speed and high memory usage when you work over with

As we all know, now that we live in the world of Virtualization, most of the organizations are completely reliable on virtual services to fulfil

In this guide, we are going to learn about what is a buffer overflow and how it occurs? Buffer Overflow occurs by overwriting memory fragments

In this article, we have a focus towards directory brute force attack using Kali Linux tool and try to find hidden files and directories inside

Introduction Android reverse engineering refers to the process of decompiling the APK for the purpose of investigating the source code that is running in the

Hello everyone, today I will be talking about one of the critical bug which I found on the BBC website which is bypassing the admin portal…

This is my first time on Medium and I wanted to share with you my first SQL injection bug reported to a private bug bounty program let’s…

Every idea needs a Medium

In this article, we will discuss Denial-of-Service vulnerabilities, how to find one, and present 25 disclosed reports based on this issue.

In this article, we are going to discuss and demonstrate in our lab setup, the exploitation of the new vulnerability identified as CVE-2021-44228 affecting the

Parameter Tampering Vulnerability Using 3 Different Approaches

Hey all,

The Cyber Mentor Talks about Pentesting, security jobs, Certifications business, interviews,& ResumeHello guys. Welcome to my CyberTalk series. This is reall...

In this article, we are demonstrating how a PHP file with include function can lead to LFI log injection attack in any web server. Please

Hello there,

In this article, we will shed light on some of the automated scripts that can be used to perform Post Exploitation and Enumeration after getting

Hey hunters! This writeup is my Second writeup I’ll share with you how I get 400$ Bounty again using Google Dorks. If you didn’t read by first writeup please look here , and here we go Let’s get…

IDOR — Insecure Direct Object Reference, abuse of the lack of authentication at every stage.

Hi, everyone

Hello there,

Is fuzzing your favourite attack type, but you didn’t enjoy it due to the low speed and high memory usage when you work over with

Is fuzzing your favourite attack type, but you didn’t enjoy it due to the low speed and high memory usage when you work over with

Over in the previous article, we learned about what fuzzing is and how the burpsuite helps us to fuzz a web-application, along with all these

Whenever i see for bug bounty tips and tricks i wish to make it up a note , The following were the bug bounty tips offered by experts at…

Hello guys, After a lot of requests and questions on topics related to Bug Bounty like how to start, how to beat duplicates, what to do after reading a few b...

Introduction Android reverse engineering refers to the process of decompiling the APK for the purpose of investigating the source code that is running in the

Have you ever welcomed with a pop-up, when you visit a web-page or when you hover at some specific text? Imagine, if these pop-ups become

I had set a goal for myself to look for only account takeover issues for a certain period of time. Fortunately, I did accomplish my goal…

Assalamualaikum, wr,wb ,

To obtain basic information such as database names, usernames, names of tables, etc from the SQL servers on the Windows operating system, we will execute

Getting Started with IDOR, What is IDOR?

Hello friends, My name is Ahmad Yussef from Syria I work part time bug hunting,in this short I will talk how I discovered my first…

Summary :