The release of 'Karuppu' has been delayed. We are currently waiting for updates and refunds will be given to affected sessions.
Stay tuned for updates.
Bug: passive vertical privilege escalation
Severity: 9.8 (critical)
Tips to find:
1. Signup as normal user (no payload)
2. Browse all options of the account
3. Search keywords in burp: role, admin, is_admin, balance etc.
4. Change the value
Join telegram https://t.co/IQMHfSZASe
Cloudflare hides 19.3% of all websites—but not perfectly.
CloudRip scans subdomains to find IPs not behind Cloudflare protection, exposing the real origin server:
https://t.co/cRzA62yQ5q
@three_cube
I usually brute-force API paths with "Debug":true parameter and often it leads to reveal internal debug info to reverse proxies exposing API secrets and tokens.
⚠️ EY Data Leak - Massive 4TB SQL Server Backup Exposed Publicly on Microsoft Azure
Read more: https://t.co/2U5pBNA6oN
A massive 4TB SQL Server backup file belonging to global accounting giant Ernst & Young (EY) was discovered publicly accessible on Microsoft Azure.
The file's naming convention screamed SQL Server backup (.BAK format), which typically contains full database dumps, including schemas, user data, and, crucially, embedded secrets such as API keys, credentials, and authentication tokens.
A simple HEAD request designed by researchers to retrieve metadata without downloading content revealed a massive size: 4 terabytes of data, which is equivalent to millions of documents or the contents of an entire library.
To Get Daily Security Updates, add Cyber Security News ® as your preferred source on Google -> https://t.co/N1wthFiEi3
#cybersecuritynews
Some group, who is Scattered Spider, or Scattered Spider-adjacent, is going schizo right now online.
They're showing incredibly sensitive details from Burger King, Victoria Secret, Subaru, etc.
Can someone tell me what these screenshots mean? They're posting these too
A T-Mobile bug worth $12k, found by @albinowax :
Simply sending a valid "Expect: 100-continue" was enough to trigger a https://t.co/wR1PgGrNH4 desync. A broken front-end Expect implementation that forwards headers fine, but chokes when the back-end sends a non-100 reply, forgetting it still needs the body.
#bugbounty #bugbountytips
🪲 Interesting SOQL injection bug in "contentDocumentId" parameter in Salesforce applications found by @m4st3rspl1nt3r, exposing user docs
https://t.co/BMK7mJP80g
Hit some huge bounties collaborating with some of the top French bug hunters @0xLupin, Snorlhax, @Blaklis_ accross campaigns and the H1-6102 LHE. Never had so many large rewards in a small timeframe 🤯
Most fun I had in a long time !
Finally added the recon module! You can now perform more detailed reconnaissance on any target using data from multiple sources. Special thanks to @Karthik__hr and @madhusudan91263 for their contributions and for continuously helping improve it day by day.
site: https://t.co/pjFfqTxbZO
add this in your hunting list:
ffuf -w subdomains.txt:SUB -w payloads/senstivejs.txt:FILE -u https://SUB/FILE -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" -fs 0 -c -mc 200 -fr false -rate 10 -t 10
for checking in burpsuite:
ffuf -w subdomains.txt:SUB -w payloads/senstivejs.txt:FILE -u https://SUB/FILE -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" -fs 0 -c -mc 200 -fr false -rate 10 -t 10 -x http://localip:port
and check for response size and words if its big or something unique you can check it manually also make sure cut https:// http:// protocol before ffuf by using this command cat subdomains.txt | sed 's|https\?://||g' >finalsubs.txt