d0xing retweeted
Cache Poisoning at Scale:
Identifying and Exploiting over 70 Cache Poisoning Vulnerabilities
youst.in/posts/cache-poisoni…
d0xing retweeted
For everyone that's wondering what is DNS or BGP, trust me, you don't wanna know. Enjoy your blessed life
d0xing retweeted
HTTP/2: The Sequel is Always Worse by @albinowax
portswigger.net/research/htt…
d0xing retweeted
say no more 😄 here is the unofficial all-time leaderboard until @Hacker0x01 brings it back.
h1.bugbounty.space/
d0xing retweeted
New attacks on OAuth: SSRF by design and Session Poisoning by @artsploit portswigger.net/research/hid…
d0xing retweeted
We did some fun tricks with nginx on bug bounties a while back, and made a post about out the configurations being vulnerable
labs.detectify.com/2021/02/1…
d0xing retweeted
Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
👇Check the thread after reading for a few bonus facts👇
medium.com/@alex.birsan/depe…
d0xing retweeted
If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it.
BugBountyHunting.com
#cybersecurity #bugbountytips #infosec #100DaysOfCode
d0xing retweeted
Recently @Rhynorater sparked a discussion about exploiting blind SSRFs. At @assetnote, we've collected some information together and have created a Glossary of Blind SSRF Chains which can be found here: blog.assetnote.io/2021/01/13… - we hope people can use it as a reference!
d0xing retweeted
Good wordlists are so important when discovering content on an asset. At @assetnote, we've built a wordlists site that updates itself on a monthly basis. For added value, we've included some of our best wordlists that we've manually collected too. wordlists.assetnote.io/
d0xing retweeted
Workshop "Demystifying the Server Side" slides presented at Ekoparty, Hackitvity Conf, and NoNameCon 2020 by @h4ckologic @iamnoooob and me.
docs.google.com/presentation…
