61 matches found
h1-ctf: h1-ctf : 12 days of hack holiday writeup
Summary This was a real fun CTF and I really enjoyed solving the challenges. Great job on creating the challenges. This is my writeup for the "12 Days of Hacky Holidays CTF". I hope you enjoy reading it, and I hope others reading it will pick up a trick or two. Flags: This is all the flags found...
h1-ctf: HackyHolidays 2020 Full Write-up: Information Disclosure of 12 Flags
Intro This is my report for the 2020 Hacky Holidays HackerOne CTF. I managed to find all 12 flags with the assistance of my little helper, Jake. He specialises in brute-forcing via a unique keyboard mashing technique: F1134543 Anywho, let's get started... Flag 1: Robots The first one was a nice...
h1-ctf: [hacky-holidays] Grinch network is down
Flag 1 As always CTF begins with a tweet: F1126838 So we are supposed to start from https://hackyholidays.h1ctf.com/ . The first flag was easy on https://hackyholidays.h1ctf.com/ I found a file named robots.txt which had the following content: User-agent: Disallow: /s3cr3t-ar3a Flag:...
h1-ctf: Hacky Holidays CTF Writeup
Intro: 12 days of challenges - some more challenging than others! This holiday CTF had all 12 challenges hosted on the website https://hackyholidays.h1ctf.com/ F1129112 Challenge 1: I started by significantly overthinking all of the early challenges in this competition. When this CTF started the...
sea-view-holidays.com Cross Site Scripting vulnerability OBB-1431525
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
specialholidays.com Cross Site Scripting vulnerability OBB-1381476
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The Importance of Listening
Akamai has been a leader in customer service for years, and we've leveraged that experience to best support our customers through the COVID-19 pandemic. That includes our internal customers, our employees who are working hard to do their jobs while adjusting to a full-time remote environment. Thi...
Description of the security update for Outlook 2016: April 14, 2020
None None...
‘Tis the Season for Holiday Cyber Heists
‘Tis the season for cyberattacks, particularly when it comes to the retail industry. According to the VMware Carbon Black Threat Analysis Unit TAU, retail organizations may see a noticeable spike in attempted cyberattacks during the holiday season. Click here to download the full report TAU’s...
bulgariaholidays-bg.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1008539 Security Researcher metamorfosec Helped patch 1962 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting bulgariaholidays-bg.c...
DDoS Attacker Who Ruined Gamers' Christmas Gets 27 Months in Prison
A 23-year-old hacker from Utah who launched a series of DDoS attacks against multiple online services, websites, and online gaming companies between December 2013 and January 2014 has been sentenced to 27 months in prison. Austin Thompson, a.k.a. "DerpTroll," pledged guilty back in November 2018...
holidays-with-pets.de XSS vulnerability
Open Bug Bounty ID: OBB-692135 Description| Value ---|--- Affected Website:| holidays-with-pets.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Global Threats to Information Systems
The advanced capabilities of organized hacker groups and cyber threat actors are an increasing global threat to information systems. Rising threat levels place more demands on cybersecurity personnel and network administrators to protect information systems. Protecting network infrastructure is...
Significant retail spending on Mother's Day sets a stage for major holidays in 2018
The second Sunday in May is a special day for everyone because it's Mother's Day. It's also a special day for retailers, as it represents another peak period and serves as the halfway point between the prior year's Black Friday and Cyber Monday and the upcoming year's retail holidays. The retail...
way2journey.in XSS vulnerability
Open Bug Bounty ID: OBB-461921 Description| Value ---|--- Affected Website:| way2journey.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Garfield Saves The Holidays - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Garfield Saves The Holidays published at the 'play' market has multiple vulnerabilities...
HRS Holidays - Customized SSL, External URLs, KeyStore usage vulnerabilities
HackApp vulnerability scanner discovered that application HRS Holidays published at the 'play' market has multiple vulnerabilities...
Feds Take Down 131 Counterfeiting Sites
It’s going to be considerably harder to get that sweet, knock-off Louis Vuitton bag you’ve been eyeing, and you can thank the US Immigrations and Customs Enforcement Agency ICE for that. The agency reportedly seized control of some 130 websites last week in advance of Black Friday and Cyber Monda...
10 Indian Websites Hacked By Shak (Pak Cyber Army)
10 Indian Websites Hacked By Shak Pak Cyber Army Hacked sites : https://zone-h.org/mirror/id/13185121 https://creativeholidaysindia.com/ https://zone-h.org/mirror/id/13185121 https://oils-fats-technology.com/ https://zone-h.org/mirror/id/13185126 https://zone-h.org/mirror/id/13185139...
Ipswitch WS_FTP Professional HTTP服务器应答格式串漏洞
Bugraq ID: 36297 Ipswitch WSFTP Professional是一款流行的FTP客户端软件。 Ipswitch WSFTP Professional不正确处理来自HTTP服务器的应答，构建包含格式串的状态代码，可导致触发典型的格式串错误，可使应用程序崩溃。 Ipswitch WSFTP Professional 12 厂商解决方案： 目前没有解决方案提供： http://www.ipswitchft.com/products/wsftpprofessional/ !/usr/bin/perl nocoolnameforawsftppoc.pl AKA...