Python 3.5+ DNS asynchronous brute force utility. Contribute to blark/aiodnsbrute development by creating an account on GitHub.

By: Viren and Pritesh.

I don’t really look for captcha bypass, but this one specified that if captcha bypass is found it will be…

In this blog I’ll cover the most asked questions on “Host Header Injection”

JSON Web Token (JWT) Is a JSON object and it is considered one of the safest ways to transfer information between two participants. To…

Introduction :

Vladimir Dashchenko, ICS CERT Vulnerability Research Group Manager, Kaspersky, sums up varying experience with bug bounty programs in ICS during his talk at Kaspersky Industrial Cybersecurity Conference 2019.

Watch the slides: https://ics.kaspersky.com/media/ics…

I just want to write a check list for myself. This article includes various vulnerability discovery method bypass methods. I hope you can…

Hello all, I’m Surendiran and it's my 1st write-up.

I was in San Francisco the few days leading up to me finding this bug with some friends. We’d spent the day hacking before a few of us were traveling to Vegas for DEF CON the next day. Some of them were going on a road trip and I decided to join them at the…

Due to a flaw in the way WooCommerce handles downloadable products, a shop manager can download arbitrary files on the server.

The video shows the exploit and how simple it...

I was doing bounty on a private H1 program that interacts with various external services one of them was Atlassian Confluence and Jira.

Hello everyone, it may be just another blog on how to find API keys, but here I’ll try to give every Information about finding the secret…

This article is a follow up to the previous article. If you guys haven’t checked it out, feel free to visit it.

POC script generator for CSRF. Contribute to adwaithks/CSRF-Automate development by creating an account on GitHub.

Find the top 10 penetration testing tools and extensions available in Burp Suite, the go-to toolkit for pentesters worldwide. Free trial available today.

Introduction :

Tl;dr : a unique high severity misconfiguration I found on Bukalapak website that lead to stored XSS, by only inspecting an HTML element