📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 91 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 1 new item
🔹 HACKERONE: 92 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 1 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

Evolution of Tycoon 2FA Defense Evasion Mechanisms: Analysis and Timeline

Blog : https://any.run/cybersecurity-blog/tycoon2fa-evasion-analysis/

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 1 new item
🔹 HACKERONE: 96 new items
🔹 INTIGRITI: 1 new item
🔹 YESWEHACK: 1 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

In this video, we solve the PortSwigger Web LLM Attack lab step by step.
🔹 Learn what Web LLM Attack is
🔹 See how to exploit it on the PortSwigger lab
🔹 Understand how this vulnerability can be applied in real-world scenarios

This video is perfect for anyone looking to improve their skills in web hacking, bug bounty, and penetration testing.

📌 Topics & Tags:
#WebLLMAttack #PortSwigger #WebSecurity #BugBounty #Hacking

💡 Tip: Don’t forget to like, comment, and subscribe for more web security tutorials!

https://www.youtube.com/watch?v=-UdUgl0pv4w

⭐️ @ZeroSec_team

📊 Watcher Summary Report

🔹 BUGCROWD: 0 new item
🔹 HACKERONE: 11 new items
🔹 INTIGRITI: 0 new item
🔹 YESWEHACK: 0 new item
🔹 FEDERACY: 0 new item

🔗 Details: Click here

#zerosec #bugbounty #watcher #summary_report


⭐️ @ZeroSec_team

سلام دوستان رایتاپ باگ هایی که این ماه خودتون زدید رو بفرستید بهتریناشو بزاریم کانال
لینک گپ :‌
@ZeroSec_group

Pwning WebAssembly: Bypassing XSS Filters in the WASM Sandbox

https://zoozoo-sec.github.io/blogs/PwningWasm-BreakingXssFilters/

@ZeroSec_group

Zseano methodology

https://manutd.notion.site/zseanos-methodology-cool-f1b6ef8d9e8a46af8bee229c1537d150#18b1238c7e2c4c34ab830acb474c5c04

⭐️ @ZeroSec_group

شو آف میز کار

⭐️ @ZeroSec_team

Red Team Development and Operation

جای پول دادن به دوره کتاب بخونید شدیدا این کتاب پیشنهاد میشه کسایی که تازه دارن شروع میکنن

⭐️ @ZeroSec_team

#number1:
Broken Access Control

Broken Access Control happens when applications fail to properly enforce who can access what. As a result, users may read or modify data, escalate privileges, or reach hidden resources. It often shows up as IDOR, missing server-side checks, or misconfigured CORS. Preventing it requires strict server-side authorization, deny-by-default policies, and proper validation of ownership and roles.
Main Categories:

Insecure Direct Object References (IDOR)

Sensitive Data Exposure via weak access rules

Authentication & Authorization Issues

Metadata Manipulation (cookies, tokens, JWT)

Misconfiguration (CORS, forced browsing, open redirect)

Functional Level Access Control Issues

For more information:
https://m.youtube.com/watch?v=_jz5qFWhLcg&pp=ygUfI2Jlc3RidWdib3VudHlib29rc2ZvcmJlZ2lubmVycw%3D%3D


#owasp_stories
@hackhive_channel 🐝

#number1_1:
IDOR(Insecure Direct Object References)

For practice:
Easy level=
https://github.com/Laburity/vulnerable-IDOR-lab?utm_source=chatgpt.com

Medium level =
https://portswigger.net/web-security/all-labs#path-traversal
And
https://portswigger.net/web-security/all-labs#access-control-vulnerabilities
And
https://www.hackthebox.com/
And
https://tryhackme.com/challenges

Hard level =
https://pentesterlab.com/exercises/idor-to-shell?utm_source=chatgpt.com

#owasp_series
@hackhive_channel 🐝

مقاله یکی از بچه ها درمورد IDOR من نخوندم ولی انگار خوبه👍

https://github.com/carloslack/KoviD

⭐️ @ZeroSec_team

یه باگ تازه توی IIS Web Deploy پیدا شده (اسمش CVE-2025-53772). مشکلش اینه که وقتی داده‌ها رو می‌گیره، مثل آدم حسابی چک نمی‌کنه و همونو باز می‌کنه، این باعث می‌شه یکی بتونه از راه دور روش کد دلخواه اجرا کنه. فقط کافیه یه کاربر لاگین ساده باشی، دیگه نیازی به هیچ معجزه‌ای نیست، راحت می‌شه روش RCE زد.

POC

⭐️ @ZeroSec_team

⚡️Recently updated Proof-of-Concepts

✔️Link to Download - https://github.com/0xMarcio/cve

⭐️ @Zerosec_team