List: Ethical Hacking | Curated by Hades | Medium

Jul 15, 2022

26 stories

1 save

Ethical Hacking

This story is no longer available

Aidil Arief

The first XSS STORED find in YANDEX Bug Bounty Program

Assalamualaikum Bug Hunter & Hi Everyone.

May 28, 2022

The first XSS STORED find in YANDEX Bug Bounty Program

May 28, 2022

Mahmoud Youssef

Admin account takeover via weird Password Reset Functionality

Hello all, I hope you’re fine! Our story today is a funny ATO I recently found it, so I decided to share it with you.

Jul 2, 2022

Admin account takeover via weird Password Reset Functionality

Jul 2, 2022

Manish Gupta

BUG BOUNTY HUNTER — HOW TO START || WHERE TO START

Hello guys. I hope you all are good as always and doing hard for getting bounties.

Mar 24, 2022

Mar 24, 2022

This story is no longer available

Nixie_Bytes Security Team

Recox v2.0 -classifying vulnerabilities in web applications

The script’s goal is to aid in the classification of vulnerabilities in web applications. RecoX, the emerging methodology, can detect…

Jul 12, 2022

Recox v2.0 -classifying vulnerabilities in web applications

Jul 12, 2022

Abhay Vishwakarma

Methodology of Subdomain Takeover for Beginners

Hello Hackers, This is Abhay Vishwakarma and Today I am here with a awsome medium writeup.

Jul 9, 2022

Jul 9, 2022

Vaibhav Kumar Srivastava

Bypassing Cloudflare WAF with Host header manipulation

Hey Folks! Thanks for your responses on my last blog. Let’s learn something new today as it is going to be damn interesting one.

Jun 26, 2022

Bypassing Cloudflare WAF with Host header manipulation

Jun 26, 2022

Dr. Saket Acharya

How I identified SSRF vulnerability in a website

After completing the SSRF lab on the Portswigger website, I wanted to apply the concept on a real website. I tried it on some e-commerce…

Jun 25, 2022

Jun 25, 2022

In

LinuxSec

by

Problem Child

Menggunakan Mubeng sebagai Proxy Checker dan IP Rotator

Menggunakan mubeng Sebagai Proxy Checker dan IP Rotator. Oke kali ini saya akan membahas tool yang mungkin akan sangat berguna bagi kalian…

Mar 2, 2021

Menggunakan Mubeng sebagai Proxy Checker dan IP Rotator

Mar 2, 2021

Jasa Yosep

[Bug Bounty Tokopedia] Reflected XSS On TokoPoints Tokopedia

Tokopedia merupakan salah satu pusat perbelanjaan daring di Indonesia yang mengusung model bisnis marketplace. Didalam marketplace sudah…

May 30, 2019

[Bug Bounty Tokopedia] Reflected XSS On TokoPoints Tokopedia

May 30, 2019

Jasa Yosep

[Bug Bounty Tokopedia] Stored Self XSS to Get User Info on Tokopedia

Tokopedia merupakan salah satu pusat perbelanjaan daring di Indonesia yang mengusung model bisnis marketplace. Didalam marketplace sudah…

May 30, 2019

[Bug Bounty Tokopedia] Stored Self XSS to Get User Info on Tokopedia

May 30, 2019

Arth Bajpai

2fa Bypass by changing Request method to DELETE

Hello Everyone My name is Arth Bajpai, I’m from Lucknow, India, and I’m back with my third write-up about a 2fa Bypass which I Found a…

Jan 29, 2022

2fa Bypass by changing Request method to DELETE

Jan 29, 2022

apex

Bug Bounty Methodology — Bug Hunting Checklist(PART-2)

Hello people, it’s me again. I apologize for being late about the second part. I had some examinations going on and have been busy for the…

Jan 20, 2022

Bug Bounty Methodology — Bug Hunting Checklist(PART-2)

Jan 20, 2022

This story is no longer available

apex

Bug Bounty Methodology — Horizontal Enumeration

While performing a security assessment our main goal is to map out all the domains owned by a single entity. This means knowing all the…

Jan 12, 2022

Bug Bounty Methodology — Horizontal Enumeration

Jan 12, 2022

Faiyaz Ahmad

Want to learn Account Takeover? I got you😉

Introduction

May 17, 2022

Want to learn Account Takeover? I got you😉

May 17, 2022

In

Numen Cyber Labs

by

Numen Cyber Labs

3 tricks to bypass Cloudflare WAF in file upload

For Cloudflare customers, having Cloudflare is like paying a peace of mind insurance that your system will get 99% protection against…

Jul 1, 2022

3 tricks to bypass Cloudflare WAF in file upload

Jul 1, 2022

This story is no longer available

Ahmad Halabi

PII Disclosure of Apple Users ($10k)

How I hacked Apple and was able to Disclose Apple Users Private Shipping Information and Mobile Numbers.

Jul 7, 2022

PII Disclosure of Apple Users ($10k)

Jul 7, 2022

Hades
113 Followers
SAP Basis | Cyber Security Analyst | Penetration Tester
Following
Dandy Rafliansyah
Mr Nt
Threat Intel
Anas H Hmaidy
See all (65)

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams