Cy6erf0x @cy6erf0x

🫠CVE-2024-31848 - A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. #BugBounty

like this....🤣 #funny #BugBounty #hackerone #bugcrowd #hacker

Don't ask anyone for opportunities😤, develop your skills💪, Make your Identity😎, Then opportunity is will be come automatically✅💯 . . . . . #opportunity #opportunities #knowledge #skill #skills

based on whats happening in the response we are a to send a post request of the date but with an exploit so that we can gain RCE remote Code Execution so for starters this is the script rce-ex.sh we shall be uploading for exploit from our local python #bugbountytips

keyboard_arrow_left Previous keyboard_arrow_right Next

Reflected XSS To Account Takeover Without Stealing Session Cookie full article in fb page 👉🏻 Acumen_cybersecurity_service #cybersecuritytips #BountyHunter #hackerone #bugcrowd #bugbountytips #bugbountytip

keyboard_arrow_left Previous keyboard_arrow_right Next

I Injected this script on my own subdomain <MY-SUB>.target.com so when anyone visits my subdomain a request will be sent to target.com/api/meand his PII will be displayed on an alert Popup as a PoC . #BugBountytips #Cybersecurity #hacking #API #website #pentesting #BugBounty

keyboard_arrow_left Previous keyboard_arrow_right Next

Big updates are coming to nuclei template "js-analyse" to extract more creds,api keys,private keys (SSH) also it will extract S3 bucket from javascript files.

You have to bypass  a regex filter to execute SSTI RCE. You have to use the %0A char #cve #Pentesting #BugBounty

Subnet non-boundary level calculation using And gate function . . . #networking #networksecurity #cisco #ccna #cybersecuritytips

Learning is best way to step forward..🧑🏻‍💻 #Cisco #ccna #networksecurity #cybersecuritytips #network

Good evening all of.... #cybersecurity #Coding #Coffee #Coffeelovers #developers #lifestyle

Identity..🔥 #CyberSecurity #hacking #hope #failure #cybercrime #infosecurity #uiuxdesign #codinglife

winrar before 6.23 version code injection vulnerability poc #winrar #Windows #CyberSecurity #Bugs #Hacked #hacker

5G signals analysis Base station signal analysis based on the 5G release 16 standards, requires a high-frequency and wide-bandwidth test set up that is able to reduce excessive path loss, wideband noise, and frequency errors. #5G

If you anybody know benifites of teaching..? #teaching #cybersecurity #Hacking

🔥this is not a phone 📵this is a cyber machine🎩 Just tags; #hackers #hacking #hacker #cybersecurity #ethicalhacking #hack #kalilinux #linux #ethicalhacker #programming #infosec #technology #security #hackerman #pentesting #hacked #malware #cybercrime #cyberattack #coding #cyber

Volumetric attacks(DDOS) The classic type of DDoS, these attacks employ methods to generate massive volumes of traffic to completely saturate bandwidth, creating a traffic jam that makes it impossible for legitimate traffic to flow into or out of the targeted site. #networking

What is ss7 attack ? 🤔What is an SS7 attack? An SS7 attack is a security exploit that takes advantage of a weakness in the design of SS7 (Signaling System 7) to enable data theft, eavesdropping, text interception and location tracking #SMS #cybersecuritytips #Hackingtime

What is a DHCP Starvation Attack 🫰A DHCP starvation attack is a malicious digital attack that targets DHCP servers. During a DHCP attack, a hostile actor floods a DHCP server with bogus DISCOVER packets until the DHCP server exhausts its supply of IP addresses. #networking

What is OTA(over-the-air) exploit ☕An over-the-air (OTA) update is the wireless delivery of new software, firmware or other data to mobile devices.but hackers perform MITM attack to get reverse-shell on android(target device) #android #CyberSecurity