Google Dorks - Cloud Storage #2:
site:https://t.co/y1egV7RA5b "example[.]com"
site:https://t.co/1wiXCCAEg3 "example[.]com"
site:https://t.co/n15e7QOf0Q "example[.]com"
Find sensitive data and company assets
#recon#bugbountytips#infosec#seo
@intigriti Code don’t verify request send by user allowing attacker to add to json body “isAdmin”: true which in else statement will be validated and new user with admin privs will be created
Go & study Game Cheats!
If you work in detection engineering, I can strongly recommend to study game cheats.
You will learn more about OS security, process injection & data only attacks in a game cheater forum than anywhere else. No Joke!