Bug Bounty Tip
You can try to send multiple emails (one to the victim and a second to the attacker) on the password reset page using param manipulation or a CRLF injection on the email field.
This way, you may obtain the password reset token for a victim's account.
Cheers!
Looking to up your SOC skills?
Check out our Youtube playlist of in-depth tutorials (with timestamps to skip around easily) on topics like:
- Analyzing malicious PDFs
- MS Office files laced with malware
- Phishing email analysis
- Abuse of legit apps
https://t.co/TfmXB355Dc
Chinese social media users report Huawei phones automatically deleting* videos of the protests that took place in China, without notifying the owners.
*Not sure if it’s from the cloud or device level
Our sci-fi movies have not even imagined this level of dystopia…
Nmap scans grinding to a halt? Tired of waiting hours for results? Tried -T4 and -T5 already and looking for something more sophisticated? Try these options out:
--max-rtt-timeout: Never wait longer than this to get a response to a single probe
1/5
"The most effective debugging tool is still careful thought, coupled with judiciously placed printf statements." -- Brian Kerninghan, "Unix for Beginners"
I quote this statement everytime I teach.
On my podcast with @joerogan he offered to moderate a debate between @JoeBiden and @realDonaldTrump It would be four hours with no live audience. Just the two candidates, cameras, and their vision of how to move this country forward. Who wants this? #debates#Election2020