Cooltrickshome.blogspot.com Website Review

While testing HackerOne, I observed an issue with the file upload functionality. It seems that on File upload, the uploader uses the content within the file for determining the content type of file instead of filetype. Although this does not pose much of a risk since the changed extensions would be visible at do*nload time but wanted to blog about instead of extension by HackerOne so few browser would simply save it on user computer with incorrect extension, which caused the above Recently I developed interest in an*lyzing the Android apk network traffic. I was able to capture traffic using HTTP interceptor for some of the apk but many other apk started giving error in interceptor - The On searching this issue, I came to know that apk are performing SSL pinning. In order to capture traffic for these apk, I need to bypas* the SSL pinning. After reading multiple articles, I founded this easy way of performing the same. This post is only for educational purpose. Don't use this for any unauthorized activities. Prezi allows you to create cool presentation, which you can later share with your audience. It also allows you to add collaborator who can as*ist in your presentation creation I started testing Prezi for security vulnerabilities VULNERABLE REQUEST: While adding collaborator to your prezi presentation, below PUT Attacker id or a genuine collaborator of this presentation with editor rights. 2) If Attacker used a genuine collaborator id having editor rights, then after firing this request, the collaborator permission would lower from editor to viewer only 3) If Attacker, simply changes the above request header from PUT to delete then any collaborator (except owner) pas*ed within body parameter would get deleted from that presentation 4) This attack worked only for public prezis (and not for private prezis) because they are somewhat special - everyone has view vulnerable endpoint unfortunately considered this default view permission as a collaborator permission, which allowed you to add