Collaborate Disseminate
I was performing SQL injection through sqlmap and it showed that the parameter is vulnerable but it is only extracting random bits instead of actual data.
I am pasting extracted material here.
[00:12:27] [INFO] the back-end DBMS is MySQL
b… Continue reading Sql injection extract random bits instead of actual data
I had a hard time convincing a bug I reported that it was a bug bounty program. It seems to be more of a discussion than a question.
Scenario: Users shop on the shopping site. The categories of these purchases are drawn from an endpoint un… Continue reading Does the IDOR vulnerability have to be sensitive data?
By Waqas
Immunefi Crypto Losses Report: Q3 2023 Sees Highest Losses of the Year.
This is a post from HackRead.com Read the original post: Crypto Industry Lost $685 Million in Q3 2023, 30% by Lazarus Group
Continue reading Crypto Industry Lost $685 Million in Q3 2023, 30% by Lazarus Group
By Deeba Ahmed
Twitter was forced to investigate the incident when a hacker offered the personal details of 5.4 million Twitter…
This is a post from HackRead.com Read the original post: Twitter Confirms Data Breach as 5.4M Accounts Sold on Hacker… Continue reading Twitter Confirms Data Breach as 5.4M Accounts Sold on Hacker Forum
Exposed users could be in the millions.
The post Twitter breach exposes anonymous accounts to nation state hackers appeared first on CyberScoop.
Continue reading Twitter breach exposes anonymous accounts to nation state hackers
By Deeba Ahmed
Open-Redirect vulnerabilities in American Express and Snapchat are being exploited to carry out phishing scams, researchers have revealed.…
This is a post from HackRead.com Read the original post: Unprotected Snapchat and Amex site… Continue reading Unprotected Snapchat and Amex sites lead to credential harvesting
I discovered vulnerabilities in big companies such as Oracle, Siemens, Zyxel. When I reported them, they were only entered on the honor board. But my expectation is financial. How can I market the security vulnerabilities I find?
Continue reading How to market vulnerabilities for bug bounties? [closed]
By Deeba Ahmed
Bug bounty and vulnerability coordination platform HackerOne has fired an employee for using their position to access customers’…
This is a post from HackRead.com Read the original post: HackerOne Fires Employee for Stealing … Continue reading HackerOne Fires Employee for Stealing Bug Reports, Collecting Bug Bounties
I was doing a VAPT assessment in which I see some JSON body in the request which has orgid deviceid
So there any possibility to get XSS in json body?
Continue reading Is it possible to get xss in json body request?
The Intigriti Ethical Hacker Survey 2022 is now available, highlighting how ethical hacking continues to grow as a popular career choice for all levels of security experts. For the second year running, Intigriti has gone into the field and spoken to a … Continue reading The Intigriti Ethical Hacker Survey 2022