NEW BOT Телеграм, страница

BugBounty & Hacking Resources

گایز طبق تجربه کوچیکم یه چیزی میگم: بعضی وقتا یه باگ پیدا میکنین مثلا unpredictable idor و سریع میرین گزارش میدین اشتباهه اگر باگ رو به سختی پیدا کردین صبر‌کنین و برین راهی برای predictable کردنش پیدا کنین من واسه 2 باگ، چند ماه صبر کردم و نتیجه شو گرفتم…

اینجا رو یادتونه گفتم ۲ تا دارم

الان یکیشو 0click ato کردم

ولی بازم attack complexity
high میشه

چقدره صبر کردم و گزارش ندادم😂🤔

باگ اون موقع چی بود:

unpredictible idor lead to pii leakage

الان چیه:
zero click ato but with attack complexity high

🔥9❤6👍3

1.22K viewsMeydi, edited 18:18

BugBounty & Hacking Resources

https://blog.babelo.xyz/posts/cross-site-subdomain-leak

از اون مقاله هاست که اگه میخواید رفتار browser رو درک کنید خیلی پیشنهاد میشه🔥

1👍9❤3

1.38K viewsMeydi, edited 19:57

BugBounty & Hacking Resources

https://lab.ctbb.show/research/Exploiting-web-worker-XSS-with-blobs

Critical Thinking - Bug Bounty Podcast

Exploiting Web Worker XSS with Blobs

Ways to turn XSS in a Web Worker into full XSS, covering known tricks and a new generic exploit using Blob URLs with the Drag and Drop API

❤9

3.02K viewsMeydi, 12:47

BugBounty & Hacking Resources

https://x.com/hoseinshurabi/status/1974063516584673770

X (formerly Twitter)

Hossein Shourabi (@hoseinshurabi) on X

A few months ago, @mehdiparandin launched a self-XSS CTF. I found a solution in Firefox, but it turned out to be a bug in Firefox. I reported it, and they closed it as "won't fix." The issue is that they don't implement RFC 6225 exactly when the SameSite…

❤6👏2

1.25K viewsShopen, 11:04

BugBounty & Hacking Resources

واسه حاج حمید خودمونه ها ✌️ دمش گرم
https://lab.ctbb.show/research/libmagic-inconsistencies-that-lead-to-type-confusion

پروفایل حمید خان:
https://linktr.ee/hamedsj5

Critical Thinking - Bug Bounty Podcast

Abusing libmagic﹕ Inconsistencies That Lead to Type Confusion

Exploring libmagic’s inconsistencies in JSON detection and type confusion. A research note on file uploads, misclassification, and security risks.

❤16🔥4

2.99K viewsShopen, edited 12:34

BugBounty & Hacking Resources

https://x.com/castilho101/status/1979284922930970774?t=ALS46XXPMgHjNwiulrCIRA&s=19

X (formerly Twitter)

castilho (@castilho101) on X

A mini research I did about escalating an XSS using 414 and 431 server size limit errors, and how I escalated an XSS to account takeover using a Salesforce URL Limit Gadget on a Ecommerce website. Hope you enjoy it

https://t.co/FH4HGaXGia

❤4

1.22K viewsSepehr, 07:05

BugBounty & Hacking Resources

Forwarded from Android Security & Malware

Samsung Galaxy S25 pwned
Yesterday at Pwn2Own Ken Gannon and Dimitrios Valsamaras used five different bugs to exploit the Samsung Galaxy S25 and earn $50,000

🤯7🔥43❤1

1.18K viewsSepehr, 08:54

BugBounty & Hacking Resources

https://docs.google.com/spreadsheets/d/1rP4cPohFwM67lSIC7m2ljzVszjSBFh87XsKBh67Npos/edit

Google Docs

Bug Bounty Reading List

❤10🔥5

2.4K viewsDiako, 09:02

BugBounty & Hacking Resources

This media is not supported in your browser

VIEW IN TELEGRAM

داشتم توی هارد میچرخیدم که این CVE-2024-30221 که برای پلاگین وردپرس ثبت کرده بودم دیدم. گفتم شما هم ببینین.
Type: PHP Object Injection

❤14🔥52

1.72K viewsShopen, 10:08

BugBounty & Hacking Resources

https://x.com/H4cktus/status/1983486360213434411?t=pYHc_foNw0CR5WwMnInelg&s=19

X (formerly Twitter)

Hazem (@H4cktus) on X

Been a while since I wrote a blog post, so here is a funny one about how I was able to leak more than 5M user PII data using a really simple trick :) Enjoy!

https://t.co/XktgYX2XwB

#BugBounty

❤6🔥2

1.06K viewsSepehr, 12:20

BugBounty & Hacking Resources

https://nowasky.github.io/JS-DOMestify/

🔥10❤1🤔1

1.52K viewsMeydi, 13:26

BugBounty & Hacking Resources

https://x.com/ataturk1925/status/1984956238560444732?s=46

نادر و پوریا از هانترای خفن قراره یه ایونت بذارن 🎤

حتما جوین دیسکوردشون بشید:

https://discord.com/invite/gRgv3MBBv6

Please open Telegram to view this post

VIEW IN TELEGRAM

X (formerly Twitter)

nader abdi (@AtaTurk1925) on X

قراره تو یه ایونت، تجربه‌هامون از هانت کردن روی متا(فیسبوک، اینستاگرام،...) و تکنولوژی‌هایی که متا استفاده می‌کنه ابزار های که توسعه داده شده رو باهاتون به اشتراک بذاریم! زمان لایو برا هفته آینده اس تایم دقیق هم خود چنل میذاریم.

📺 سه تا لایو داریم که با…

🔥10

1.06K viewsMeydi, 12:48

BugBounty & Hacking Resources

https://hacktus.tech/how-a-fixed-idor-and-an-empty-string-led-to-5-million-file-leaks

#idor

Hacktus

How a "Fixed" IDOR and an Empty String Led to 5 Million+ File Leaks

When I start looking at a target in finance, medical, etc, I always go for the most valuable data. In this case, on a major application we'll call "Redacted Corp," that meant file uploads. Invoices, personal documents, signatures... all the PII.
Part...

👍8

851 viewsMeydi, 11:16

BugBounty & Hacking Resources

From path-based middleware protection bypass to potential SSRF & XSS + full bypass of CVE-2025-61925 on @astrodotbuild

https://zhero-web-sec.github.io/research-and-things/astro-framework-and-standards-weaponization

zhero_web_security

Astro framework and standards weaponization

CVE-2025-64525

❤84

746 views| | Sharo K h | |, 16:04

BugBounty & Hacking Resources

CVE-2025-64484

oauth2-proxy:
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

باگش این بوده که هدر های X-Forwarded-* رو اتکر میتونسته اسماگل کنه.
سرویس oauth2-proxy این دوتا هدر رو جدا در نظر میگرفته:


X-Forwarded-User
X_Forwarded-User

خب حالا چه اتفاقی میوفته؟
زمانی که این درخواست سمت اپلیکیشن های مثل (nginx, Envoy, Rails) میره, این اپلیکیشن ها هدر X_Forwarded-User رو نرمالایز میکنن و تبدیل میشه به X-Forwarded-User و اگه دوتا هدر شبیه هم وجود داشته باشه پایینی رو در نظر میگیرن که همون هدر اسماگل شده ی اتکر هستش

Report Detail
https://gist.github.com/N3mes1s/a1144f6a546600d8f34babf35976b9c5

Oauth2-Proxy
http://github.com/oauth2-proxy/oauth2-proxy

Gist

OAuth2 Proxy underscore header smuggling (CVE-2025-64484 / GHSA-vjrc-mh2v-45x6)

OAuth2 Proxy underscore header smuggling (CVE-2025-64484 / GHSA-vjrc-mh2v-45x6) - CVE-2025-64484.md

❤10🔥3

969 views| | Sharo K h | |, 14:10

BugBounty & Hacking Resources

Unlocking Reflected XSS in the Astro framework

https://zhero-web-sec.github.io/research-and-things/unlocking-reflected-xss-in-the-astro-framework

zhero_web_security

Unlocking Reflected XSS in the Astro framework

CVE-2025-64764

❤7

947 views| | Sharo K h | |, 16:29