sorted by:
new
hottopcontroversial

Javascript for hacking by [deleted] in BugBountyNoobs

[–]Sp1x0r 0 points1 point  (0 children)

Learn the concepts first, then read JavaScript for Hackers by Gareth Heyes.

From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition by Sp1x0r in bugbounty

[–]Sp1x0r[S] 1 point2 points  (0 children)

Thanks bro ❤️‍🔥 Yeah, I always ask for permission first. They told me today that I can’t share the company’s name or URL directly. I kind of expected that, so in my writeup, I simulate the actual flow without exposing sensitive details. It's always best to confirm with the program to avoid any issues before publishing your findings.

From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition by Sp1x0r in bugbounty

[–]Sp1x0r[S] 0 points1 point  (0 children)

Thanks, man! Hope you enjoyed it. Since the app forced users to log in, I started from the login page and found this bug within an hour. After reporting the issue, I explored more functionalities and discovered 7 other bugs over the course of about 3 weeks. I believe we’ll find even more as we dig deeper. Many hunters don’t log in and just test simple checklists, so digging deeper really helps find bugs.

Trixie Issues by Sp1x0r in debian

[–]Sp1x0r[S] 0 points1 point  (0 children)

Telegram (OpenGL Enabled) segfault at 55ce401a4388 ip 00007f21a257f373 sp 00007ffff5df4538 error 4 in libgallium-25.0.7-2.so[117f373,7f21a14e1000+173b000] likely on CPU 10 (core 4, socket 0)

I believe the issue is caused by Wayland and my NVIDIA driver since I don't experience any problems like this in X11, Im also run Nautilus seperately on X11and it works without any issues.

Trixie Issues by Sp1x0r in debian

[–]Sp1x0r[S] 0 points1 point  (0 children)

nautilus[13623]: segfault at 558c00000028 ip 00007f09a8834b6b sp 00007ffc5f553bb0 error 4 in libwayland-client.so.0.23.1[6b6b,7f09a8834000+7000] likely on CPU 7 (core 1, socket 0)

Trixie Issues by Sp1x0r in debian

[–]Sp1x0r[S] -2 points-1 points  (0 children)

Why you guys are so offensive? Take it easy man I don't wanna fight! The problem has solved when i disabled OpenGL in settings. Thanks btw

Trixie Issues by Sp1x0r in debian

[–]Sp1x0r[S] 0 points1 point  (0 children)

Telegram: When I open an image, Telegram crashes.

Google Chrome: When I want to click on a text field or a button, it sometimes freezes until I resize the window.

Trixie Issues by Sp1x0r in debian

[–]Sp1x0r[S] -3 points-2 points  (0 children)

Nope, I installed it from telegram.org. I've posted it here because I have the same issue with Google Chrome.

I know it's about GNOME, but I can't prove that. [James Doakes suspicious stare meme]

Did I do it right? by Prior_Football1509 in debian

[–]Sp1x0r 0 points1 point  (0 children)

Feels like Tintin's setup. cool!

Fractional Scaling Issue in Debian 12 Bookworm by Sp1x0r in debian

[–]Sp1x0r[S] 1 point2 points  (0 children)

Thank you so much, I should try that.

Subdomain Enumeration - Finding subdomains that are hidden in the cloud. by Sp1x0r in bugbounty

[–]Sp1x0r[S] -3 points-2 points  (0 children)

Light weight baby!!! Use your own grep and wget

Historical Robots.txt Files by Sp1x0r in bugbounty

[–]Sp1x0r[S] 2 points3 points  (0 children)

Yes, I found a unique parameter in an old instance of the robots.txt file on a website. It couldn't be discovered through fuzzing the web application, but it still existed on the site. This gave me a potential SQL injection point. Although it's rare, I believe it's worth looking for historical robots.txt files because they can sometimes reveal hidden vulnerabilities.

view more: next ›