Talk and help about bugbounty
I want to join. And I want to join. Anyone want to join?
https://en.cyberhat.online/post/1337up-live-ctf-cum-17-kas-2023
Online
Prizes
1st = €1337, 5 x HackTheBox Academy Silver Annual, 5 x 3 Month TryHackMe, 3 x 12 Month TCM
2nd = €750, 3 x HackTheBox 1 Year VIP+, 5 x 1 Month TryHackMe, 3 x 6 Month TCM
3rd = €500, 3 x HackTheBox 1 Year VIP+, 5 x 1 Month TryHackMe, 3 x 3 Month TCM
4th = 3 x 3 Month PentesterLab, 3 x HackTheBox 1 Month VIP+
5th = 3 x 3 Month PentesterLab, 3 x HackTheBox 1 Month VIP+
6th = 3 x 1 Month PentesterLab, 4 x 3 Month RET2Systems
7th = 3 x 1 Month PentesterLab, 3 x 3 Month RET2Systems
8th = 3 x 1 Month PentesterLab, 1 x 3 Month RET2Systems
9th = 2 x 1 Month PentesterLab, 1 x 3 Month RET2Systems
10th = 1 x 1 Month PentesterLab, 1 x 3 Month RET2Systems
Best Video = 1 x HackTheBox Academy Silver Annual + €50 Intigriti Swag Voucher
Best 3 Writeups = €100 Intigriti Swag Voucher
5% off TryHackMe voucher for all participants!!
Got it. But i am wondering since this is an outdated version and there seems to be around 52 known vulnerabilities. So trying to show the impact if there are any known POCs..
Читать полностью…Most of the vulnerabilities found by Wpscan don’t have real world attacking scenarios.
Читать полностью…Hello
Anyone interested in Comptia, CEH and OSCP training?
Good morning Proxy and ip about a site using python 3.8 werkzeug I'm working on a page that gives information like whois. I couldn't figure out how to run code to get a shell on werkzeug pages. Does anyone know or have any ideas?
Читать полностью…I cleared oscp 2021... Prepared from 2019 ... But couldn't get a job. Landed in network engineer...
Читать полностью…Hi guys, i need help in phishing attack simulations?
Читать полностью…Try this app but it for beginners still you can find good bugs using this guide.
https://play.google.com/store/apps/details?id=com.defensiveinet.bugbountyacademy
Is there any step by step guide how to do a big hunting for a noobie
Читать полностью…Hello guys I represent a project and it will have a bug bounty campaign. with who I can speak to advertise it here?
Читать полностью…https://youtu.be/APu1UnEPGJ8?si=uRJnAzqr9ZHJn926
Читать полностью…Hello everyone
Sorry for this question in this group. May be someone know how I can improve my python skills? Free courses may be. I have experience in python programming
- Read official article on CVE
- Look for PoC on twitter and github
- Look for the same CVE reported by anyone on medium or on hackerone hacktivity
Hello, I want a way to test a vulnerability
xml/xpath injection into query parameter
I used the default templates but didn't get any results.
Читать полностью…Hello everyone,
I'm currently learning web app pentesting and testing a VDP program. I have access to the debug.log file and wp-json contents, allowing for username and email enumeration. The WordPress version they're using is 4.9.7.
While I've found various vulnerabilities using WPScan, I'm struggling to find PoCs for many of them. Is there a way to obtain PoCs for WordPress CVEs, or could someone with experience guide me?looking for the unauthenticated ones
I'm open to providing additional information if I've missed anything.
Thank you.
Any body help me I am find information through phone no. Any help me and guide because attacker transfer a money
Читать полностью…this will help:
https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters/blob/master/assets/basics.md
It's just xss, there's no html injection or open redirect, it's just xss, and all it shows is its exploitation, and this as a separate vulnerability should not be considered as a separate vulnerability
Читать полностью…Am a network security engineer. Is there any guide or strategy to do bug hunting
Читать полностью…