My Favourite 10 Shodan Dorks
If you don't know what is Shodan, I would say just go to shodan.io first. It is one of the best search engines for hackers.
Topic
cybersecurity
A collection of 16 issues
OpenAdmin(Linux-based) Machine Walkthrough HTB
Overview
Hello Awesome Hackers, nice to meet you all this blog will focus on a retired box on HackTheBox.
Machine - IP: 10.10.10.171
Recon
NSE: Loaded 125 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 21:31
Completed NSE at 21:31, 0.00s elapsed
Initiating
Hacker's Guide to Directory/Endpoint Enumeration
Directory enumeration is when the hacker tries to find more public or hidden/private directories. The root directory of a web server starts from /var/www/<site>. https://rashahacks.com is hosted at /var/www/rashahacks.com
Password Vulnerabilities: How to Prevent Them from Happening?
Hey everyone!
root@icyberjutsu:- # whoami
I'm Aman Kumar(icyberjutsu), a cybersecurity researcher from India, Currently Pursuing BCA From DIT University and I am also part of DIT University ACM Student Chapter. I hope you are doing great!
In this article, I will be explaining how to prevent password
Privacy Violation In Chat System
Introduction/ Background
Here’s the write-up for the report I wrote 3 months ago on a Private Program on Hackerone. The bug was present in the chat system where the app is keeping the personal data of the users even after deletion.
Privacy Violation
Privacy Violation means wrongful disclosure,
Change Any User Profile Details On Disney
The Walt Disney Company started its program on Hackerone in March 2022. Last week, I reported 3 highs and 1 critical on their program. This is the story of an IDOR report due to improper authorization.
Authentication and Authorization
Authentication: When a user logs into a site or app, this