ph17ur

source: https://medium.com/@kenanistaken/how-to-find-and-exploit-xss-25581bfc0a3d

Source: https://portswigger.net/web-security/cors

ENCODE - using key $ openssl enc -aes256 -k [YOUR KEY] -in in-file.tgz  -out out-file.tgz.enc DECODE - using key $ openssl aes256-cbc -k [YOUR KEY] -in in-file.tgz  -out out-file.tgz.enc ENCODE - using salt $ openssl aes-256-cbc -a -salt -in secrets.txt -out secrets.txt.enc DECODE - using salt$ openssl aes-256-cbc -d -a -in secrets.txt.enc -out secrets.txt.new

Source: https://twitter.com/MasterSEC_AR/status/1256689299833176069

If you don’t close the statement off, it tries to process password.

Bug Crowd Uni - Broken Access Control. https://youtu.be/94-tlOCApOc

Bug Crowd Uni: https://youtu.be/gkMl1suyj3M

#bugbountytips #wahh

#bugbountytips #csrf

HBO abuses DMCA to take down a 13 year old girl's artwork because she used the phrase "winter is coming". Assholes. WINTER IS COMING! Assholes. http://www.theregister.co.uk/2016/12/08/winter_is_coming_hbo_dmca_trademark/