Archive for May 2015

Information Gathering Tool dig in Kali Linux

Information Gathering:- It is the first step of Penetration and Testing in which you have to gather all the information about your t...

Crash any Iphone with Just a MSG

Unknown 22:50 Add Comment Edit

Apple has released a workaround for an iOS bug allowing users to remotely crash iPhones, iPads and Apple Watches. The issue appears to ...

Delete any Ones Support Ticket ( Privilege Escalation / IDOR )

Unknown 22:39 Add Comment Edit

Hell friends today i am posting my POC on Privilege Escalation Bug which i found in a website :) and it was my first Privilege Escalati...

Stored Cross-Site Scripting in Aol mailing service

Unknown 05:25 Add Comment Edit

Here is the POC on my fine in the Aol. mailing service :D

Leaving SQL Backdoors in Web Applications

Unknown 05:02 Add Comment Edit

In the Name of ALLAH the most Beneficent and the Merciful I was thinking that our backdoors got removed :( how and why, than i talke...

Outgoing traffic from you pc

Unknown 04:50 Add Comment Edit

Yesterday i was thinking that i should see the outgoing traffic from my pc, i googled it, and found few tools, all were amazing, but what ...

Cross Site Scripting in Mercedes-Benz

Unknown 04:29 Add Comment Edit

Hello friend today i am sharing my find in Mercedes-Benz shop site it is vulnerable to XSS and here is the POC :- URL :- http://sho...

Flash Cross Site Scripting (XSS)

Unknown 04:17 2 Comments Edit

Hello friend today i am sharing my POC on flash XSS which i found in Wistia.com sub-domain i was just going through sites and found this ...

Cookie Manipulation in AngiesList lead to Open Redirect

Unknown 22:04 1 Comment Edit

This is POC on cookie manipulation .Here is some information about it. HTTP is a stateless protocol. In 1994, Netscape invented ...

Cross Site Scripting In Aol.com

Unknown 21:36 Add Comment Edit

Hello friends today i am posting my XSS find in Aol.com which was once leading Search and social media site. I was looking for some m...

Open Redirect Vulnerability in MeetUp

Unknown 09:55 Add Comment Edit

Hello friend today i am sharing mt find in MeetUp a popular social meeting site here is the POC :- Open redirect issue: 1) Go to th...

Modern Wireless Attacks

Unknown 06:13 Add Comment Edit

Modern Wireless Attacks, A paper by Shahmeer Amir which is about the modern attacks related to Wireless Technology that can pose a ...

Stored Cross Site Scripting in Python.org

Unknown 05:51 Add Comment Edit

Hello friends today i am sharing my POC in Python.org i was just testing it and went lucky and got in to there HOF :) feels really gre...

Cross Site Scripting in Aliexpress.com

Unknown 05:44 Add Comment Edit

In this POC I am covering my XSS find in Aliexpress but unoriginality got Duplicate :\ not a very good thing . Here is the POC vid...

Stored Cross Site Scripting In Blend.io

Unknown 23:42 Add Comment Edit

Here is an other POC on Stored Xss in Blend.io a musing plateform

Protection Aganst Blind Sql Injection

Unknown 23:38 Add Comment Edit

Video Tutorial :- Code Used :_ ------------------------------------------------------------------------------------- $username ...

Protect your website from Cross Site Scripting

Unknown 23:34 Add Comment Edit

This tutorial you will learn how to fix Cross site Scripting Vulnerability :- Code Used :- $id=preg_replace("/</","...