Collaborate Disseminate
while fuzzing a public APK file for a bug bounty I came across a file awsconfiguration.json with some pretty promising data. However after reading here https://docs.aws.amazon.com/pdfs/appsync/latest/APIReference/appsync-api.pdf#Welcome a… Continue reading AWS AppSync awsconfiguration.json file found in prod apk, is it a security issue and how to verify api key
On a particular page in this application, we have a form which allows for a very select few to input data into it, because at the end of the day (and, well, event loop) we end up wrappping that input in to an eval which we highly sanitize … Continue reading Zero width character causing Javascript runtime error
I am just getting into CTF and Hacking in general. I am very confused as to why this worked when I added an apostrophe to the end it reveals the flag. I have Burp Community Edition suite going and I have HTTP live headers.
I am just not … Continue reading Hacker101 Spoilter #2 EASY Micro-CMS v1
I recently got a call from a lady who claimed I called her and demanded her credit card information and that she owed me money. I did not make the call, but I did verify that on her phone my number did appear to make the call… Continue reading How would someone be able to call (or spoof) from a phone number they do not own