Hey everyone! Today, I am excited to share with you my insights into manual hacking. In this post, I will delve into hacking approaches, the reasons why I made the prefer manual hacking, discuss the mindset required for this approach and weigh its pros and cons. So, whether you are
Hi Hackers!! In this blog, I will write about a bug that I submitted a few months ago on LinkedIn. In brief, the vulnerability was that an attacker can delete replies that users make below videos on LinkedIn Learning. Mindset LinkedIn has around 350 reports in the last 90 days
Hi folks! I am Inderjeet Singh aka encodedguy. In this blog, I will write about parameter enumeration, its importance, and the automated/manual approach for enumerating parameters. Introduction A parameter in a URL is a string of characters that follows a question mark (?) within the URL. Parameters are used to
Introduction: ffuf, is a web fuzzer written in Golang by @joohoi. Hackers use ffuf to fuzz directories, subdomains, virtual hosts, usernames, passwords, cookies, anything inside a HTTP request. The tool requires URL or HTTP request, and a wordlist to fuzz. Working: FUZZ is the secret. You need to put the
Introduction: Puredns is a very fast domain resolver tool with the benefit of wildcard detection. Domain resolution is the process of querying the IP address of a webserver or domain name from a DNS server. Puredns is built in Golang by @d3mondev. In the background, it uses massdns(a very