Anon

Expect Me

[Anon @Anonfdpp]

@pentestershihab You should be invited to the private programs and this happen when you constantly report on the platform and you are active

[Anon @Anonfdpp]

🔥Bounty arrived

I earned $2000 for my submission on #bugcrowd

it was a priviledge escalation of user roles

Tip: if you see role based access control, try to manipulate the username value to check if backend can differentiate between usernames

#bugbounty
#bugcrowd
#bounty

[Anon @Anonfdpp]

@MiniMjStar 🤞👍

[Anon @Anonfdpp]

@MiniMjStar na in nabood, backend bein username haye moshabeh ba encoding mokhtalef nemitonest tafavot bezare vase hamin user sathe paeen role user sathe bala ro migereft
Writeup minevisam barash

[Anon @Anonfdpp]

@MiniMjStar Thanks👍

[Anon @Anonfdpp]

@exploitio @Hammad7361 👍

[Anon @Anonfdpp]

@exploitio @Hammad7361 Find LFI, then you can access them
Both directly or with php wrapper base64 encoded of them

[Anon @Anonfdpp]

@404_ivan Thanks 👍🌹

[Anon @Anonfdpp]

@Ali_4fg ممنون 🌹❤️

[Anon @Anonfdpp]

@MiniMjStar آی ام ایرانی 😉

[Anon @Anonfdpp]

@MiniMjStar 😄

[Anon @Anonfdpp]

@MiniMjStar Thanks 👍

[Anon @Anonfdpp]

https://t.co/JrNU65SYG6

[Anon @Anonfdpp]

🔥 New Video is up 🔥
a nice vulnhub CTF called CewlKid.
it begins by getting access through making a creative wordlist and then
a reverse shell by file upload.
then we see multiple privilege escalation (horizontal and vertical) to get to root account.

Link 👇

#ctf
#vulnhub

[Anon @Anonfdpp]

لول 14 رو زدم ولی سرویس شدم تا زدم :)
تقریبا 3 ساعت و خورده ای طول کشید
@voorivex

[Anon @Anonfdpp]

@shinya_dono @poukungfupanda @voorivex اوکی شد، بیا

[Anon @Anonfdpp]

@0xAFz @voorivex ۴ ایز ایزی، بیا دایرکت

[Anon @Anonfdpp]

تو این ویدیو میریم سراغ یه ماشین دیگه از vulnhub به اسم PwnOS که سعی میکنیم با بررسی آسیب پذیری های سیستم دسترسی بگیریم و اون رو از طریق kernel exploit ارتقا بدیم

[Anon @Anonfdpp]

In this video we solve PwnOS machine from Vulnhub and try to find a way to gain access to system and escalate our privileges through kernel exploit

Video Here : https://t.co/U7S7zvAL8u

#redteam
#Hacking
#webapplication
#penetration_testing
#vulnhub