bugbounty – TheLabda

Partial Local File Inclusion (LFI)

Post author:labda
Post published:June 1, 2023
Post category:buglog Hacking

What is a Local File Inclusion?Local File Inclusion (LFI) is a type of vulnerability that occurs when a web application allows an attacker to include or read files on the…

Buglog#13

Post author:labda
Post published:July 16, 2021
Post category:buglog Hacking

Found XSS with CVSS 5,7 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Buglog#12

Post author:labda
Post published:July 16, 2021
Post category:buglog Hacking

Found authentication bypass with CVSS 7,5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Buglog#11

Post author:labda
Post published:July 16, 2021
Post category:buglog Hacking

Found SQLi with CVSS 7,5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Buglog#10

Post author:labda
Post published:July 16, 2021
Post category:buglog Hacking

Found XXE to local file exfiltration with CVSS 6,5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Buglog#9

Post author:labda
Post published:July 16, 2021
Post category:buglog Hacking

Found Session Fixation with CVSS 4,4 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

How to get the max out of an IDOR?

Post author:labda
Post published:June 22, 2021
Post category:Hacking tutorial

People asking me, how I make so much submissions on one target.The answer is easy: If you stick to a specific target, you will be able to understand the functionality…

Bugs4Trees Status update / Bugs4Trees friss infó

Post author:labda
Post published:June 22, 2021
Post category:bugs4trees Hacking

English By the inspiration of @xdavidhu I decided to follow his idea, to plant trees after receiving a bounty from any platform.At 06/09/2021 I purchased 4 avocado trees in Kenya.…

Buglog#8

Post author:labda
Post published:June 21, 2021
Post category:buglog Hacking

Found IDOR with CVSS 5,3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Buglog#7

Post author:labda
Post published:June 21, 2021
Post category:buglog Hacking

Found IDOR with CVSS 5,4 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)