Hello @All. Today we will talk about one of my latest findings at a private program. The vulnerable function is the login function that manages the attacker to replace the username and leak the PII for any registered user. Let’s start the bug’s reproduction steps, and if you need to…

Last Update: 23 May 2022 Added the ananlysis section with more details Hey Hunters! Today we have a new write-up about one of my findings at a pentesting client. The method we used to bypass is tricky, and I want to share it with the community, so let’s get started. Overview …

Hi! Today I will talk about my last findings at Cisco products BroadSoft BroadWorks, one of Cisco products. I’ve discovered 2 CVEs at it and assigned as CVE-2021–34785: IDOR lead to privileges escalation “Admin account takeover” CVE-2021-34786: IDOR lead to delete arbitrary admin user accounts I will not talk about…

Today, I will talk about how to write a simple Python script to automate finding bugs. I will take a sample:> “LFI findings”. Content Requirements URLs Prerequisites Coding Bonus Options Thanks 1. Requirements Wayback URLs with parameters, you can check my simple methodology to know how to grab them. [Ex. https://example.com?file=ay_value.txt] Python3 and…

Hey folks! Today we have a new interesting machine from HackTheBox “APT”. This machine was my first INSANE boxes I’ve solved, so I considered it one of my favorite machines, let’s take a look at its info

Hey folks, today we have one of HackTheBox machines “Time” which medium level, let’s take a look at its info It’s based on Linux OS and depends on CVE’s for foothold exploit, let’s get started… What we will do ? As usual, we have some steps which we follow to pwn any machine, our steps…

Hey folks, today we have a new easy machine from HTB “Luanne”, it’s an easy level and based on Enumeration, custom exploitation and have a little of CTF techniques. What we will do ? As usual, we have some steps which we follow to pwn any machine, our steps are: Recon / Information gathering Scanning …

Hey folks, here’s the walkthrough of the crossfit machine from HTB. You can check my Mind map

Hey friends! Today we have a new machine from HackTheBox “Reel2”. For some personal reasons there’s no writeup for it until now, but you can check my walkthrough from this video Stay tuned for the writeup :)