𝐞𝐧𝐞𝐬

a.k.a phlmox | I’m something of a hacker myself

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@JoshDavisWrites thanks, i am glad you like it

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

bunun bi tık üstü budur

[Murat Y @divinepwner]

en buyuk cok buyuk ctf geliyor!!!!!

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@muzakirbloch1 just for the poc, found it myself manually

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Insecure Message Listener -> DOM XSS -> Authorized access to API routes via CORS

An attacker can extract users' critical information and modify it.

An attacker can also make withdrawal requests on behalf of users.

Their response? #bugbounty

+++

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

They continued to claim that this is neither critical nor even a real vulnerability, but merely social engineering.

So I am disclosing it with their permission.

The vulnerability is still there, but according to them, it does not pose any real problem at all.

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

"Based on our data, the team has not considered this vulnerability critical."

You might ask why. I asked the same thing.

Their reply was:

"The vulnerability in question is a form of phishing."

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Bug bounty sırasında bulduğum ve Cloudflare WAF'ı bypassladığım RXSS yazısı.
https://t.co/SClKeoelKK

[Jorian @J0R1AN]

Here is my writeup of Intigriti's December XSS challenge. It consisted of 6 smaller challenges combining into a big 1-click exploit.
One of the most fun ones I've ever played. Loved the unique format by @RenwaX23!
https://t.co/mNYyMzdq0G

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

third party account linking - account takeover

TL;DR: The developers didn't use OAuth's state parameter or implement their own CSRF protection, which led to my OAuth account being linked to theirs.

https://t.co/5iQLR3hMbr

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

If you find an HTML injection but can't escalate it to XSS due to blacklisted elements, try DOM Clobbering. https://t.co/LC31YhPVRj

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@rizasabuncu bakınız ben de şirket kimliği de var

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Authentication Bypass https://t.co/EPtlPN7xUw

#bugbounty

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Account takeover via insecure postMessage:
https://t.co/V7NnstSC96

nothing fancy, just wanted to write something
#bugbounty

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@sametsahinnet Great extension, I appreciate your work. However, it couldn't find the 'API_KEY' variable on the web page due to the carriage return characters in your watchlist.txt. It works fine when you remove them.

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@buckberi 1500 ile başladık 30 ile kapatıyoruz :) ya da kapatmıyoruz 3 euro da olabilir her an

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

This might be the most stupid bug ever: a 6-character long email verification code was leaked in response as an encrypted SHA1

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

@bugoverfl0w Thanks, you can check the README to see the changes

[𝐞𝐧𝐞𝐬 @EnesSaltk7]

Modified my JSLinkfinderv2 Burp suite extension which is clone of the original InitRoot's BurpJSLinkFinder and now it's available for community edition.
https://t.co/C4WujDmxt2

[Mustafa Can İPEKÇİ @mcipekci]

@Hacker0x01 @jobertabma @martenmickos As I know each year #hackforgood destination changes, first it was for COVID-19 then for supporting Ukraine.

As you know one of biggest earthquakes recently happened in Türkiye, per this tweet more than 17K lost their lives.