reconvault

ReconVault 🔍 The recon notes organizer bug bounty hunters actually asked for. ReconVault is a dark-themed, terminal-aesthetic desktop app for Linux built for security researchers, bug bounty hunters, and CTF players. Ditch the scattered text files and spreadsheets — organize every target's...

CVE-2022-40317

CVE-2022-40317 Stored XSS in Notes A stored XSS was found in the notes section of the application while we were pentesting a client that was using OpenKM. Basically, when storing notes, somehow normal HTML was allowed and it was rendered as is. As you know, However, we found that using...

Learn-Web-Hacking

Web Hacking Study Notes 中文版 README Link to notes English Translation Status This English version is a work in progress. The translated table of contents is intended to help readers find topics, but many pages in the English site may still show the original Chinese text. The Chinese files under...

mtk-su-reverse-cve-2020-0069

mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...

AllAboutBugBounty

All about bug bounty These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too! List Vulnerability Arbitrary File Upload CRLF Injection Cross Site Request Forgery CSRF Cross Site Scripting XSS Denial of Service DoS Exposed Source Code Host...

Notes

Security Engineering at Google: My Interview Study Notes By nolang I am a security engineer at Google and these are the notes from when I was studying for the interviews. This is my first job in security and a lot of people have asked me how I studied. My notes consist mostly of a list of terms a...

PenetrationTesting_Notes-

Заметки по тестированию на проникновение Используйте cherryTree последняя версия, чтобы открыть PenetrationTestingNotes.ctb Вы можете использовать мои настройки предпочтений для более комфортной работы...

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Автор эксплойта: emirhanerdogu Домашняя страница разработчика https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Ссылка на программное обеспечение...

app

Standard Notes Standard Notes는 디지털 사용자와 전문가를 위한 종단 간 암호화 메모 앱입니다. 메모, 파일, 그리고 당신의 작업물을 모두 한 곳에 안전하게 보관하세요. Standard Notes를 선택해야 하는 이유 종단 간 암호화 동기화. 오직 당신만 메모를 읽을 수 있습니다. 무제한 기기에서 빠르고 무료이며 암호화된 크로스 플랫폼 동기화. 공개 소스 코드와 몇 가지 간단한 단계로 자신만의 서버를 셀프 호스팅할 수 있는 기능. 장수와 지속 가능성에 대한 강한 초점. 더 알아보기. 개인 메모 계정 만들기...

wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

Summary Five gym management views in wger apply a flawed gym-scope guard gyma != gymb that silently passes when both operands are None. A trainer with gym.gymtrainer and gym.addadminusernote permissions and no gym assignment gym=None can read private admin notes, uploaded documents, gym contracts...

CVE-2026-43976 wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope guard gyma != gymb that silently passes when both operands are None. A trainer with gym.gymtrainer and gym.addadminusernote permissions and no gym assignment...

CVE-2026-43976

The wger fitness manager is vulnerable to a cross-tenant data leak in versions prior to 2.6 . A flaw in the gym-scope guard (gym_a != gym_b) allows it to silently pass when both operands are None. Consequently, a trainer with gym.gym_trainer and gym.add_adminusernote permissions but no gym assign...

Burp-Suite-Certified-Practitioner-Exam-Study

Подготовка к экзамену Burp Suite Certified Practitioner Это мои учебные заметки по более чем 110 лабораторным работам PortSwigger Academy. Я использовал эти лабораторные работы, чтобы сдать экзамен Burp Suite Certified Practitioner 2023 года. Моя квалификация BSCP. Для получения дополнительной...

CVE-2021-24807

CVE-2021-24807 Support Board 3.3.4 Authenticated Stored XSS Authenticated Stored Cross Site Scripting XSS Vulnerability exists in Support Board Version 3.3.4 via Notes parameter. The impact of cross-site scripting vulnerabilities can vary from one web application to another. It ranges from sessio...

faraday_bugbounty

faradaybugbounty Рабочие пространства Faraday для программ Bug Bounty Примечания к выпуску Документация...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

HackingAllTheThings

HackingAllTheThings Résumé Ce dépôt a pour but de structurer mes outils et notes que j'utilise lorsque je travaille sur l'obtention de certaines certifications en sécurité informatique. Certains outils seront écrits par moi-même et d'autres seront des ressources trouvées à différents endroits...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

notes

노트 내 취약점 연구 노트를 모아 둔 아카이브입니다. 대부분은 트위터에 올린 내용을 확장한 것입니다...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/dns.php Profile Name or notes field. id: CVE-2018-19914 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...