barracuda_

[Hack3rScr0lls @hackerscrolls]

So, you can upload a file to the web app..

Bonus! Repo with slightly old exploits for image upload:
https://t.co/jbYQ15tgV1

XMind source:
https://t.co/oiclQ9Ycoz

Thanks to hacktricks and @HolyBugx for new tricks (at least for us)
https://t.co/JpCBW2AQ3J
https://t.co/B4q6sAnJ4K

[Hack3rScr0lls @hackerscrolls]

Found a hidden HTTP param? Look deeper, maybe there is a mass assignment/autobinding vulnerability.

Sometimes changes in objects are hidden too and you need to closely explore the app.

Source:
https://t.co/9lURrqkxVh

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

Looking for a stable reverse proxy for pivoting? Check frp!

Useful when you've hacked a server and want to establish a channel to the internal network.

A lot of options for pivoting, multiplatform and easy to use.

https://t.co/BxmapWJOoJ

#CyberSecurity #Pentest #RedTeam

[Hack3rScr0lls @hackerscrolls]

We often get confused how Samesite affects cookies in different attacks in modern browsers. So, we have made a memo and now share it with you.

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

We have combined all the tricks we know about SSRF into a single mindmap.

If we missed something, write about it in the comments!

High resolution: https://t.co/Gub9KUoiGY
XMind source: https://t.co/pAtT0WVFAY

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

Incredible mindmap about hacking iOS applications by @hd_421

Pay attention, we have prepared two versions:
1. Full Security Assessments
2. Shorter BugBounty version

XMind source:
https://t.co/52We9OSiFI

#CyberSecurity #BugBountyTip #BugBounty #iOS

[Hack3rScr0lls @hackerscrolls]

We continue to talk about attacks on CORS.
This time, we have prepared a set of ideas for bypassing lists of allowed hosts.

#CyberSecurity #BugBountyTip #BugBounty

[Hack3rScr0lls @hackerscrolls]

There is a popular opinion: bad CORS like <Access-Control-Allow-Origin: *> is unexploitable. Browser won't send cookies in this case.

It is a delusion. You can exploit it with a Chrome cache feature!

For example:
https://t.co/27mNFEikHs

#BugBountyTip #CyberSecurity #BugBounty

[HITBSecConf @HITBSecConf]

Next up on #HITBLockdown002 Track 1:

"The Weakest Element of Acquiring Bank Infrastructure"
Presented by Ilia Bulatov & Gleb Cherbov

Starts 17:00 SGT at https://t.co/8NZOcRhs8n

Ask questions via our Slido channel #askinthebox

[HITBSecConf @HITBSecConf]

#HITBLockdown002 D2T1 -
The Weakest Element of Acquiring Bank Infrastructure - Ilia Bulatov & Gleb Cherbov - https://t.co/sEhK2jDEwV

[barracuda_ @barracud4_]

@cherboff and I will be at #HITBLockdown002 talking about security of the acquiring bank infrastructure

[HITBSecConf @HITBSecConf]

#HITBLockdown002 D2T1 -
The Weakest Element of Acquiring Bank Infrastructure - Ilia Bulatov & Gleb Cherbov - https://t.co/sEhK2jDEwV

[Hack3rScr0lls @hackerscrolls]

Last time we showed you how to use encodings in <a>.

Now we've made a scheme what symbols in which points you can inject to bypass WAF, filters, sanitizers.

https://t.co/cYgt11DNgu

#BugBounty #CyberSecurity #BugBountyTip

[Hack3rScr0lls @hackerscrolls]

Sometimes you can control the href value in HTML tag<a>. So it's a good place for XSS payload!

We've created a scheme how to use various encodings in href to bypass filters.

https://t.co/oVunw9RlHE

@XssPayloads
#BugBountyTip #Bypass

[Hack3rScr0lls @hackerscrolls]

You asked for something about OAuth — we did.

Here is a mindmap about hacking OAuth 2.0. We tried to cover all possible ways even with low impact.

Our inspiration was https://t.co/sJQgvCfi2M
Thanks to @homakov for outstanding articles.

#BugBountyTip #CyberSecurity #BugBounty

[Hack3rScr0lls @hackerscrolls]

Faced with CSRF protection? Try to bypass it!
Save these 6 common CSRF bypasses that we use too.

#BugBountyTip

[Andrei Abakumov @andrewaeva]

SSRF + CRLF + HTTP Pipeline + Docker API = RCE…
How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber
https://t.co/rc1N9qOXnL

[Hack3rScr0lls @hackerscrolls]

Sometimes there is no time to install/configure a fully functioning server. Here are 6 simple servers which can be used during pentest.

Catch SSRF callbacks and exploit OOB attacks!

Check the replies, there are commands to install and run them.

#BugBountyTip #Pentest
1/7

[Hack3rScr0lls @hackerscrolls]

We have prepared a mindmap for you with 16 ways how to perfom 2FA security testing.

It is based on our practical experience and articles by @0xw2w and @ahack_ru.

https://t.co/5kC51Ngp1w
https://t.co/VKG2w3dbZU

#BugBountyTip #TogetherWeHitHarder

[Hack3rScr0lls @hackerscrolls]

Sometimes restrictions on "/admin" page can be easily bypassed.

You should always check this simple tricks for easy win!

#BugBountyTip #BugBounty #YourNextBugTip