John Wick

.

[John Wick @mr_n30]

I just pwned Code on Hack The Box! https://t.co/5LpVhBbz8H #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Suresh Aydi (xploiterr) @_xploiterr]

Check the source code for hidden endpoints. Found admin endpoint to delete user in source code, used normal user's cookies and CSRF token and able to delete any account on the platform. #bugbountytips @Hacker0x01

[Suresh Aydi (xploiterr) @_xploiterr]

Always check GraphQL requests don't rely on UI, the REMOVE option for super admin user was not shown on the UI of website, however the admin is able to remove the user via GraphQL request. #BugBounty

[John Wick @mr_n30]

I just pwned Artificial on Hack The Box! https://t.co/GcC3kxAc1X #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Muqsit 𝕏 @mqst_]

📋 Detailed Checklist: Android APK Pentesting Checklist

Checklist: https://t.co/QoSljusi0g

#infosec

[NullSecurityX @NullSecurityX]

🧠 WebSocket Hijacking → Session Abuse

1️⃣ WS endpoint doesn’t validate Origin or cookies
2️⃣ Attacker lures victim to malicious site
3️⃣ Victim’s browser auto-connects to WS with session
4️⃣ Attacker reads/modifies real-time data
🎯 No CSRF, no auth → full hijack
#bugbounty #h1

[John Wick @mr_n30]

I just pwned Anchored on Hack The Box! https://t.co/IQD5sE9bEI #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Shoppy on Hack The Box! https://t.co/Oa8png8LPu #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned UnderPass on Hack The Box! https://t.co/j3A9b1qtZg #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Blocky on Hack The Box! https://t.co/U40Pqcjhqu #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Mirai on Hack The Box! https://t.co/okpHKnMO7z #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Inject on Hack The Box! https://t.co/9pixQN0g4d #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Busqueda on Hack The Box! https://t.co/Aihi7Ruo82 #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned MonitorsTwo on Hack The Box! https://t.co/NCGqiIEYNz #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[Gospel @4osp3l]

Mobile Pentesting : Exploiting Exported Activites

- Bypassed controlled flow of the application by using exported misconfigured activity.

With this, i got access to the invoice download page without PIN verification.

[John Wick @mr_n30]

I just pwned LinkVortex on Hack The Box! https://t.co/Yec5puAeW0 #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Topology on Hack The Box! https://t.co/wNx3UrOH36 #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Keeper on Hack The Box! https://t.co/b22uXwSTFk #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned CozyHosting on Hack The Box! https://t.co/OEj6HrDZbQ #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[John Wick @mr_n30]

I just pwned Wifinetic on Hack The Box! https://t.co/pvU48NsTEP #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting