Understand The game of HTTP Request and Response
Whenever we open a browser and search for something on the internet we make an HTTP request. But what is exactly an HTTP request and how we can use it to gain a…
Top Tryhackme Topic wise Categorized Tryhackme’s Rooms List
This is curated to list of Tryhackme room in sequence of topic contains like Basics Rooms, Reconnaissance Rooms, Scripting Rooms, Networking Rooms, Active Directory Rooms, Privilege escalation Room and many more other topics…
OSCP Preparation With Active Directory 👨�💻
In this article I’m going to talk about my approach to the OSCP exam with Active Directory and include the resources I used to help me prepare and pass it.
Protected: IRCTC Ticket
There is no excerpt because this is a protected post.
Over 600 accounts hacked: Approach to infiltrating web login portals
Hi everyone, Today I want to look at methodology when attacking web login portals. I see many posts about various vulnerabilities in programs, but very few people talk about this topic. Of course,…
My First Bounty From SSRF: From Finding a Vulnerability to Cashing In
Hello peoples, I’m Muhammad Julfikar Hyder from Bangladesh back again with my first bounty story today. You can also read my previous blog here How I hacked LINE’s bucket. It was 09/24/2019 I was a newbie…
Blind & Stored Cross-site Scripting (XSS) – Generic Bug Bounty Report
In this article, we will discuss how a bug hunter received a bounty of $3000 on his finding on Blind & Stored Cross-Site Scripting (XSS), and how you can reproduce. What is Blind…
How to Become a Bug Bounty Hunter Part-1
Individuals with hacking expertise can attest that bug bounty hunting has recently developed into a profitable and respectable profession! In this series, I’ll give you an overview of bug bounty hunting and teach…
How to detect and prevent host header injection attacks
Introduction HTTP Host header attacks exploit vulnerable websites that handle the value of the Host header in an unsafe way. If the server implicitly trusts the Host header and fails to validate or…
All Network Services & Ports Enumeration
Enumeration
26 Cross Site Scripting ( XSS ) Bug Bounty Reports
In this article, we will discuss Cross-Site Scripting (XSS) vulnerability, how to find one, and present 26 disclosed reports based on this issue. What is XSS? XSS stands for Cross-Site Scripting and it…
Privilege Escalation Overview
Privilege Escalation Resources GTFOBins https://guif.re/linuxeop https://guif.re/windowseop FuzzySecurity | Windows Privilege Escalation Fundamentals ​https://payatu.com/guide-linux-privilege-escalation​ Linux Privilege Escalation Windows Privilege Escalation Kernel Exploits Linux: https://github.com/lucyoa/kernel-exploits​ Windows: https://github.com/abatchy17/WindowsExploits​ ​ Windows Add User SUID Change ​ Window…