3 ms·
This is exactly what happens whenever you publish a website online, with so called "ethical hackers" finding minor vulnerabilities, hoping to get paid for runni
by sph 2y ago
This is exactly what happens whenever you publish a website online, with so called "ethical hackers" finding minor vulnerabilities, hoping to get paid for running a script. See also https://www.troyhunt.com/beg-bounties/ https://www.troyhunt.com/beg-bounties/
- shawabawa3 2y agoMy favourite one that i've seen 4 of 5 iterations of, is people claiming about a privilege escalation or authentication bypass bug, then their reproduction is a convoluted way of doing: 1. Log in with admin credentials 2. Copy the session cookie 3. Run curl command using above session cookie 4. You have bypassed authentication!!
- mikrotikker 2y agoTbf session tracking of browser fingerprinting can stop session hijacking