Las Vegas is gearing up for a massive cybersecurity conference, and you’ve been hired to conduct a penetration test against one of the casinos. The client — Hack Smarter World — is a luxury resort where many of the attendees will be staying. Your objective is to identify all vulnerabilities and elevate your privileges to root (if possible). Topics […]
Loom Subscription Bypass Let Starter Users Download Premium Transcriptions
A simple client-side bypass allowed a Loom Starter user to download video transcriptions that were supposed to be available only to Business users. I reported the issue through Bugcrowd. The report was ultimately classified as [Informational] because it was considered to have no security impact. Fair enough. I agreed with the triage decision rather than starting a […]
Top Phishing Analysis Tools You Need to Know
Essential Tools for Analyzing and Neutralizing Phishing Threats Continue reading on OSINT Team »
There is a small security lesson I learned from testing a rule-based feature.
At first, everything looked normal. Continue reading on OSINT Team »
The Ultimate WiFi Pentesting Toolkit: 9 Tools to Know
Must-use and best tools for Wi-Fi pentesting Continue reading on OSINT Team »