Security Blog

Hello, In this post I'm going to share how I could takeover www.example.com users accounts. So, what was the vulnerability? Well , It was a very simple OAuth flaw which I could use to takeover users account with minimal user interaction. Cut the crap, Give me POC -_- Ok. www.example.com users have an option to connect their facebook account to their example.com account.  Once a user connects his facebook account to his example.com account he does not need to enter his username/password to login instead he can simply click on "Sign in using Facebook" and he will be logged in (only if he is already logged in into his facebook account which he connected to his example.com account) Ok all looks good let's see what happens in background when any user clicks on "Connect with Facebook" GET Request  :   https://m.facebook.com/v2.2/dialog/oauth?redirect_uri=https://www.example.com/user_profile.php?action=fb_connect&scope=email,...

This post is about how I could hack my ISP subscribers to get free Internet so if you are not interested then you can get back to your work :) *Let's start* From last few days I have been participating in bug bounty programs but I got bored and tired of testing web applications so I decided to leave bug hunting for a while and started to play with my router's configurations then I saw a option named "Remote Web Management".  It allows users to access and manage their router from Internet. I was wondered why do we even need this feature? And what is it's use since IP addresses are assigned dynamically (unless you are rich enough to get a static IP address)? So I thought there could be some router's which may have this option enabled by default and also there's a chance that one would enable this option unknowingly or knowingly (static IP address people ,remember ?). And fortunately some thug people don't even bother to change their defa...

In this tutorial I'll tell you how to control your raspberry pi from your smartphone. So follow below tutorial and say good bye to monitor,keyboard and mouse. Requirements: 1)Raspberry Pi 2)Wi-Fi adapter 3)Smartphone with Wi-Fi Hotspot feature (I would be using Android in this tutorial) Tutorial:- Step 1) First install Raspbian OS in SD card and connect SD card to your PC Step 2) Raspberry Pi Configuration  : -Open SD card using file manager as shown in this SS:-   -Now press Ctrl+L and copy the location as show in this SS:- -Now open terminal and change directory to SD card location like this :-        cd /media/c1398422-7a7c-4863-8a8f-45a1db26b4f2 -Now run below commands  :- Command 1: sudo echo " auto wlan0 iface lo inet loopback iface eth0 inet dhcp iface default inet dhcp iface wlan0 inet dhcp allow-hotplug wlan0 wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf">etc/network/...