Elektrine
Log in Register

#ethicalhacking

13 posts· Last used Aug 10

thecybersecguru @thecybersecguru@infosec.exchange
· 1mo ago
What Happened to HackerOne? HackerOne has changed significantly from the bug bounty platform many researchers knew in the late 2010s. Its current direction is increasingly centered around Hai, AI-assisted triage, vulnerability validation, agentic testing, continuous testing and CTEM. But the question isn't simply whether HackerOne uses AI. It's how researcher submissions, security intelligence and AI-driven workflows fit together, and what that means for the role and value of human vulnerability researchers. I dug into HackerOne's history, funding, Live Hacking Events, pricing shift, AI architecture, researcher-data controversy and current product strategy. https://thecybersecguru.com/analysis/what-happened-to-hackerone/ #HackerOne #BugBounty #InfoSec #CyberSecurity #AppSec #VulnerabilityResearch #AISecurity #CybersecurityResearch #EthicalHacking #Pentesting #AgenticAI #CTEM #SecurityResearch #BugBountyHunters #ApplicationSecurity
2
5
0
0
The Void @thevoid@infosec.exchange
· 1mo ago
Welcome to the age of AI-mediated dehumanization and abuse. Ethical hackers will also be replaced by AI agents. Will it end in a machine-versus-machine apocalypse? Or will the internet become a barren, dark wasteland filled with digital ghosts? I saw this coming and quit bug bounty a long time ago; now it's impossible to ignore. #hackerone #bugbounty #ethicalhacking #infosec https://blog.teknogeek.io/posts/what-happened-to-hackerone/
0
0
0
0
Daniel Isaac E @daniel_e@infosec.exchange
· 2mo ago
🚨 The biggest mistake in modern web security? Believing your WAF is enough. For years, we were taught: Deploy a Web Application Firewall and you're protected. That mindset no longer matches how many real-world attacks work. Today's attackers increasingly focus on: 🔓 Broken Authorization (BOLA/BFLA) 🔑 Identity & OAuth/JWT abuse 🔌 API vulnerabilities 🧠 Business Logic flaws ⚡ Race Conditions 🤖 Legitimate functionality abused in unintended ways These attacks often don't rely on payloads that a WAF is designed to block. Instead, they exploit trust. As cybersecurity professionals, we need to think beyond signatures and filtering rules. Understanding how attackers chain application logic, identities, and APIs together is becoming just as important as finding SQL injection or XSS. I wrote an article exploring this shift in modern application security. 📖 Read it here: 👉 https://danielisaace.hashnode.dev/stop-trusting-your-waf-modern-attackers-have-already-moved-on I'm curious to hear from the community: What do you think is the most overlooked attack vector in modern web applications today? Your perspective might help someone else rethink their security strategy. #CyberSecurity #ApplicationSecurity #AppSec #WebSecurity #API #OWASP #EthicalHacking #PenetrationTesting #DevSecOps #SecurityResearch #CyberDefense #InfoSec
0
0
1
0
thecybersecguru @thecybersecguru@infosec.exchange
· 2mo ago
Linux admins, pentesters, DevOps engineers, and cybersecurity students: If you still think iptables is "old" and not worth learning, think again. Even in 2026, it's still everywhere: 🐧 Linux servers 🔐 OSCP labs 💻 HTB & THM machines ☁️ Legacy production infrastructure 🐳 Docker networking In this guide you'll learn: ✅ How Netfilter actually processes packets ✅ Tables, Chains & Targets explained ✅ Rule order (the #1 mistake people make) ✅ DROP vs REJECT ✅ Connection tracking ✅ Persistent firewall rules ✅ Common attacker discoveries ✅ iptables vs nftables (what changed and what didn't) ✅ Real-world hardening examples Whether you're preparing for OSCP, RHCSA, Linux+, Security+, or securing your own servers, mastering iptables is still a foundational Linux skill. Read the complete guide 👇 https://thecybersecguru.com/networking/iptables-linux-firewall-guide/ #Linux #LinuxSecurity #iptables #Netfilter #CyberSecurity #InfoSec #BlueTeam #RedTeam #DevOps #SysAdmin #Networking #EthicalHacking #OSCP #HackTheBox #TryHackMe #CloudSecurity #Ubuntu #KaliLinux #LinuxAdmin
1
0
0
0
Pentest-Tools.com @pentesttools@infosec.exchange
· 2mo ago
Our SQL Injection Scanner is a bit of a skeptic. It won't take a hunch for an answer. It fires a real payload, watches how the database actually responds, and _only then_ calls it a finding. It's free to try, and it catches: ✅ Error-based, when the database spills its structure in an error ✅ Blind, when only a true or false response gives it away ✅ Time-based, when a deliberate delay is the only tell ✅ Union-based, when someone's pulling data from tables they shouldn't touch Every finding comes with the parameter, the payload, and the database response. Enough to reproduce it, not just believe it. Try it as a test, no account needed. Link is here https://pentest-tools.com/website-vulnerability-scanning/sql-injection-scanner-online #offensivesecurity #penetrationtesting #ethicalhacking
0
0
0
0
You've seen all posts