Lightnews — Scholar-powered news

Securitycipher @securitycipher.bsky.social · 8m

Hands-On Guide to Exploiting Redis, MongoDB, and Misconfigured Databases: Master Real-World Attacks

https://medium.com/@verylazytech/hands-on-guide-to-exploiting-redis-mongodb-and-misconfigured-databases-master-real-world-attacks-c990a0cfdbd6?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1h

The Poisoned Stream — A08: Software and Data Integrity Failures | 10 Days with Me | OWASP Top 10

https://infyra.medium.com/the-poisoned-stream-a08-software-and-data-integrity-failures-10-days-with-me-owasp-top-10-cc47370cbe88?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 2h

How a Missing Email Check Can Break Everything

https://medium.com/@viratavi1223/how-a-missing-email-check-can-break-everything-c9e97194a551?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 4h

Privilege Escalation and RCE explained, plus 8 realistic interview questions

https://medium.com/meetcyber/privilege-escalation-and-rce-explained-plus-8-realistic-interview-questions-cb7b94a17b3f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 5h

How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share…

https://medium.com/@ferdusalam_65023/how-i-made-over-10-000-just-by-chaining-multiple-idors-in-a-single-web-app-all-from-the-share-4d425a15aa37?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 6h

SAML Configuration Exposure to Low-Privilege Team Members Due to Missing Server-Side RBAC

https://medium.com/@ibra1905ylmz/saml-configuration-exposure-to-low-privilege-team-members-due-to-missing-server-side-rbac-04d907860433?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 8h

How I Hacked JWT Tokens and Became Everyone on the Internet (Temporarily)

https://infosecwriteups.com/how-i-hacked-jwt-tokens-and-became-everyone-on-the-internet-temporarily-1e05f961048d?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 9h

When Client-Side Validation Isn’t Enough — Porsche Contact Form Logic Bypass

https://medium.com/@ethan_hunt/when-client-side-validation-isnt-enough-porsche-contact-form-logic-bypass-91f2451015e3?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 11h

How I Got My first Private Invite in Bug Bounty

https://medium.com/activated-thinker/how-i-got-my-first-private-invite-in-bug-bounty-f51ea01e03a7?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 12h

Basic SQL injection Methodology

https://medium.com/@raihan408548/basic-sql-injection-methodology-9c606115eddb?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 12h

XSS Explained: A Simple, Powerful Guide

https://medium.com/@0xMuhammedAsfan/xss-explained-a-simple-powerful-guide-d87dadb92736?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 15h

Silence After Security.txt: When a Promise to Report Is Ignored

https://medium.com/@d.johnston_19172/silence-after-security-txt-when-a-promise-to-report-is-ignored-9efc2741f7a4?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 18h

How to Find Your First Database Vulnerability in 48 Hours

https://medium.com/@ibtissamhammadi1/how-to-find-your-first-database-vulnerability-in-48-hours-2738e70cd979?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 20h

IDOR lead to unauthorized Access Organizations function

https://medium.com/@HBlackGhost/idor-lead-to-unauthorized-access-organizations-function-0dc707011dd1?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 23h

Application Level DoS - Large Markdown Payload in Reply Section Leading to Resource Exhaustion

https://hackerone.com/reports/3058919

Securitycipher @securitycipher.bsky.social · 1d

Chrome Extension for Temp Emails (For Bug Bounty Hunters & Cybersecurity Researchers )

https://medium.com/@shubhammpawar7438/chrome-extension-for-temp-emails-for-bug-bounty-hunters-cybersecurity-researchers-af25360ad2e1?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Step-by-Step Guide: Practical Docker Enumeration and Container Escape Techniques

https://medium.com/@verylazytech/step-by-step-guide-practical-docker-enumeration-and-container-escape-techniques-986e1d6a6919?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

The Delete Button Anyone Could Press: How I Wiped a Store’s Catalog and Brought Products Back from…

https://medium.com/@redaabdelrhman169/the-delete-button-anyone-could-press-how-i-wiped-a-stores-catalog-and-brought-products-back-from-3eb8df9390a2?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Master Passive Recon in Web Pentesting

https://medium.com/@whx4zyjbefvr25ekfr8f/master-passive-recon-in-web-pentesting-aabff9645121?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Unauthorized Access to Enterprise Policies Management: $500 BAC Bug

https://medium.com/@a13h1/unauthorized-access-to-enterprise-policies-management-500-bac-bug-60f04419fed4?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Unescaped HTML in Email Templates — How I Turned a Simulator into a Phishing Vector

https://xormium.medium.com/unescaped-html-in-email-templates-how-i-turned-a-simulator-into-a-phishing-vector-82e8fb19a70d?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

The Broken Gate — A07: Identification and Authentication Failures | OWASP Top 10 |10 Days with Me|…

https://infyra.medium.com/the-broken-gate-a07-identification-and-authentication-failures-owasp-top-10-10-days-with-me-ef670f9f743f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

OWASP Mobile Top 10 — M9: Insecure Data Storage (“Writing your love letters on sticky notes and…

https://medium.com/@bithowl/owasp-mobile-top-10-m9-insecure-data-storage-writing-your-love-letters-on-sticky-notes-and-6783217f1273?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Phishing via Error Message — When UI Messages Become Attack Surfaces

https://medium.com/@ethan_hunt/phishing-via-error-message-when-ui-messages-become-attack-surfaces-1eca838fea3f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Burp Suite: 15 Pro Tips You’ll Wish You Knew Sooner

https://medium.com/@Iampreth/burp-suite-15-pro-tips-youll-wish-you-knew-sooner-f4dd4b9a701c?source=rss------bug_bounty-5