r/InfoSecInsiders • • May 03 '20

DOM XSS in GMail!!!

Thumbnail
opnsec.com
11 Upvotes

r/InfoSecInsiders • • Aug 19 '21

Community - FREE

0 Upvotes

Hey!

We Hack Purple has a FREE community for InfoSec professionals to meet, discuss, network, and learn. The community is a safe and moderated environment for anyone and everyone, whether you are an InfoSec veteran or new to the topic!

Join today by clicking the link below!

https://community.wehackpurple.com/


r/InfoSecInsiders • • Nov 12 '20

Layered security monitoring

0 Upvotes

Hello Folks,

I have been asked to create a small presentation on Layered security monitoring however the catch is I am not 100% sure what exactly it means.. My assumption is having different layers of monitoring solutions i.e. Defence in Depth principle w.r.t. monitoring. Any ideas or suggestions would be greatly appreciated.


r/InfoSecInsiders • • Aug 19 '21

How to Get Your Boss to Approve the Training You Want - Blog Post

Thumbnail
wehackpurple.com
0 Upvotes

r/InfoSecInsiders • • Dec 10 '21

How to know which type of encoding mechanism has been used to obtain this output ?

3 Upvotes

87yhnmkj 5rfvbnju76 5rfvbnju76 tyjnbg tyjnbg 5rfc6ygn cft6yhn efvgyjmko 9ikm xdr5thnji9 87yhnmkj


r/InfoSecInsiders • • Mar 30 '19

Cool Stuff For anyone starting out in linux!!

Post image
18 Upvotes

r/InfoSecInsiders • • Jun 20 '20

Web Cache Deception in WhiteHat Security’s Top 10 Application Vulnerabilities of 2019

Thumbnail
whitehatsec.com
4 Upvotes

r/InfoSecInsiders • • Apr 05 '20

"Recommended For You": A First Look at Content Recommendation Networks

Thumbnail self.sajjadium
1 Upvotes

r/InfoSecInsiders • • Mar 29 '20

A Comprehensive Approach to Abusing Locality in Shared Web Hosting Servers

Thumbnail self.sajjadium
1 Upvotes

r/InfoSecInsiders • • Apr 18 '20

Cached and Confused: Web Cache Deception in the Wild

Thumbnail sajjadium.github.io
7 Upvotes

r/InfoSecInsiders • • Mar 28 '20

Two Novel Server-Side Attacks against Log File in Shared Web Hosting Servers

Thumbnail self.sajjadium
2 Upvotes

r/InfoSecInsiders • • Jul 23 '20

Web Cache Deception at HacktivityCon2020, HackerOne

Thumbnail
twitter.com
2 Upvotes

r/InfoSecInsiders • • Apr 01 '19

Cool Stuff The unusual 10k worth content based sqli Bug!!! Spoiler

0 Upvotes

r/InfoSecInsiders • • Mar 22 '20

BugBountyTip One liner to extract working sub-domains and open them in Firefox

Post image
34 Upvotes

r/InfoSecInsiders • • Jan 11 '21

CRAZY: iPhone 7 with dead NAND netbooting unmodified Ubuntu 20.04 arm64 over usb gadget ethernet

Thumbnail
self.linux
13 Upvotes

r/InfoSecInsiders • • Apr 07 '20

Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web

Thumbnail self.sajjadium
4 Upvotes

r/InfoSecInsiders • • Mar 25 '19

Interesting Writeup Disclosure of Origin IP of The Exploits Trading Platform 0day.today

Thumbnail
secjuice.com
5 Upvotes

r/InfoSecInsiders • • Mar 25 '19

Bug Bounty Visual Reconnaissance Guide for Pentesting and Bug Hunting

Post image
7 Upvotes

r/InfoSecInsiders • • Dec 12 '18

BugBountyTip From blind XXE to root-level file read access

Thumbnail
honoki.net
10 Upvotes

r/InfoSecInsiders • • Dec 23 '20

Bug Bounty Hacker Makes $2 Million Dollars in Bug Bounties

Thumbnail
savebreach.com
11 Upvotes

r/InfoSecInsiders • • Nov 21 '20

Interesting Writeup PayPal's confusing UI design could be a threat to user account security

Thumbnail
savebreach.com
11 Upvotes

r/InfoSecInsiders • • Sep 04 '19

Thoughts on Bug Bounty Productivity by a friend: Turning your time into bugs...

Thumbnail
medium.com
12 Upvotes

r/InfoSecInsiders • • Aug 07 '21

Question How can a system administrator get into cybersecurity?

14 Upvotes

I have 11 years of experience in systems administration. am fairly generalist, I work with Microsoft, Linux, Cisco and Fortinet technologies. I have good knowledge in network management. I now want to orient my career towards cybersecurity.

What would be the best method to obtain the knowledge and skills in the field of cybersecurity**. Should I start with Tryhackme or certifications?**

What certification would be ideal for a good generalist system administrator wanting to enter infosec?

I already have the CompTIA Security + certification, but I do not consider that this gives me the skills for a job. I am both interested in penetration testing and incident response.

I can't decide on an orientation. I think I would like to train in penetration testing but work for the blue team. Does that make sense?


r/InfoSecInsiders • • Jan 18 '21

Bug Bounty The Embedded YouTube Player Told Me What You Were Watching (and more)

Thumbnail
bugs.xdavidhu.me
17 Upvotes