UUID Sandwich Attacks
If you're using UUIDs (version 1) to implement security features in your application, you may be vulnerable to Sandwich Attacks. Solution: switch to version 4 UUIDs instead.
#bugbountytips
Posts tagged #bugbountytips
Hacking a US Airline
A story about how I hacked a US airline with the help of Youtube ✈️🔓🎥
HTTP Parameter Pollution
Are you safeguarding💂 your web app against HTTP Parameter Pollution (HPP)? Discover the silent danger☠️ in today's comic.
Dependency Confusion Attack
Ever wondered how attackers carry out dependency confusion 🤔 attacks?
Finding Credentials in A Dev's Machine
Discovering credentials on a developer's machine is like stumbling upon a goldmine 🧈. Here are eight crucial locations on a Unix-type machine where credentials can be found 👇.
GitHub RepoJacking
Have you heard of GitHub RepoJacking? 💀 Ilay Goldman (@goldmanilay) and Yakir Kadkoda (@YakirKad) from the Aqua Security Team have discovered 37k vulnerable repositories that are at risk of RepoJacking, posing a significant threat to organizations.
