$1100 Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account
๐จโ๐ป @0xUsername
๐ https://t.co/Imv7chkDac
More On Telegram Channel. Don't Miss. Link On Bio
[Oh noo] AdobeColdFusion just dropped a crucial security update tackling 3 main issues, including CVE-2023-29300, a pre-auth Remote Code Execution (RCE) vulnerability.
Here is how to detect it with #Nuclei ๐
#recon#BugBounty#AttackSurface#coldFusion#Adobe#cve#rce
I hate recon but here a good tip :
1 - Get the company IPs range X.X.X.X/24
2 - Run nmap -p 80,448,8080 IP/24 -oN file.txt
3 - Use any IP extractor or API in case of automation or bash then save it on IPs.txt
4- run httpx -l IPs.txt -o final.txt
5 - run nuclei -l final.txt
๐จ Some signs of possible Vulnerabilities
/?userId=1 = IDOR
"admin"="false" = B A C
/?check=http://site = SSRF
/?search=12-12-2023 = SQLi
/?title="Hello" = Reflected XSS
/?image=file.jpg = Directory Traversal
#pentesting#cybersecurity#idor#bugbounty#vulnerability#xss#sqli
๐ I went back to @Farah_Hawaa 's "5 COMMON CRITICAL/P1 BUGS TO LOOK OUT FOR!" and summarized the video with additional resources you can use to find P1 bugs and earn that $$$$
Check out this thread to know more ๐งต๐
Find leaked API Keys and Secrets using a single GitHub search query
https://t.co/lozYSGv4La
Tip: Never commit your keys/secrets to your public repository
#Security#DataLeak#Hacking
Look at this checkout page ๐
There are multiple vulnerabilities present. Can you spot them all?
We've made a list of 6 of the most common price manipulation vulnerabilities found in the checkout process ๐๏ธ