NegativeWibes

When we play with JavaScript, seriously we don’t need any tool only we have to understand the flow of JavaScript.  By Using JavaScript I bypassed the login in an application. I am always excited to bypass things like login bypass, Otp Bypass etc. while I testing an application. I always check View-source of application mainly on login page and registration page 1.    Open application login page.  There are two ways of login in the application. One way by username and password and another one is mobile no and otp. I choose second one 2.       Let’s view source  of application login page : ON seeing this code I noticed that    if otp is wrong then above function throw an error  otherwise loginwithmobile(mob No) function is called .

Seeing the bugs of the zoom meeting, an idea came to my mind that let's play with the zoho meeting. First of all, its functionality is understood. 🤔 I myself created the meeting host and joined. I saw the meeting id is numeric (10 digits). It came to my mind that Can I know the meeting id of other users. Picture 1.0 The first way is to Brute force the meeting id . I used intruder to extract other users meeting id , oh no my ip got blocked for some minutes. Mean rate limiting is in place. I tried to bypass the rate limit. but no success . i Used every headers like X-Forwarded-For , X-Remote-IP, X-Forwarded-Host , X-Originating-IP. but no success 😒😒. So I went around the all the headers and cookies values. I Manipulated every cookie value but hey. i see there is a ZMEET_CSRF_TOKEN =x.x.x.x.x.xx IN JOIN REQUEST.I manipulate the ZMEET_CSRF_TOKEN And again hit request .  hey  I bypassed the rate limit.  😉😉😉  Now time to extract other use...

As you know that every chat application send push notification to user’s device when a message arrive. Push Notification: Push notification is a message pushed from a software application to the user’s device. Push notification originates from the server and they only reach users who have installed the application. Push notifications  are messages that pops up on a user's mobile device in a heads-up manner are called  push notifications .  Push notifications  help in delivering timely & relevant information to users even if the user is not active on the website or  app DESCRIPTION : Most of the chat application have chat delete functionality, in which a user can delete the message for everyone. In this case, message are no longer for both user. But due to some loop holes in message deletion functionality like Message still shown on push notification after deleting the message from application. PROCEDURE : 1.     Se...

First We discuss about what is passcode and Why it is Implemented in  Mobile Applications. PASSCODE Implemented in Mobile Application to protect Applications from an Unauthorized Access.like for example your cliq or any application account is logged in mobile phone .any your friend ask you to give phone , your friend try to open cliq application to see your message, but your friend cant open the application without entering passcode . he have to enter passcode for open, so it is an extra layer security in  applications. Passcode protection implemented in Android Application is an extra layer security to protect an unauthorized access. How Passcode Protection is bypassed by Bruteforcing? You know that passcode protection or pin protection in mobile applications have some attempt to enter passcode , if you enter  wrong passcode more than 5 times or 10 times based on application security , User logged out automatically and redirected to login page.but due to some ...

                      Lets first disccuss about the what is Web Cache and why it used? Web cache: A Web cache (or HTTP cache) is an information technology for the temporary storage (caching) of Web documents, such as Web pages, images, and other types of Web multimedia, to reduce server lag. WHY IT IS USED? When you visit a website, you don’t just need to retrieve the content of the page you’re seeing — you also need a bunch of resources such as JavaScript files, stylesheets, and fonts and so on, which your browser downloads in addition to the content of the page. Browser caching allows your browser to store these files for a while, so it doesn’t need to retrieve them every time you visit the site. The first time you visit this site (WinningWP.com), for example, you’ll receive a bunch of resources that your browser will immediately cache. This first will likely take a few seconds to completely download...

Hey Guyes today i found a vulnerability of  user information leakage due to improper auth token implementation in application. DESCRIPTION: some applications  mask user informaion like mail id , phone no , adhar card, pain card or any personal information of use for  user privacy. but due to some loop holes an attacker can see masked user information. LETS CONTINUE HOW I FOUND :- ➤ 1.       Login in application 2.        Click on deals and capture that request in burpsuite 3.       Send that request in repeater tab check response 4.        Now logout account check response same response appeared. 5.    I tried to check with old auth token then also same response received Phone number and mails are not showing in response⦽ 1.       I tried to bruteforce deals id 2.    ...

A brute force attack is a popular cracking method: by some accounts, brute force attacks accounted for five percent of confirmed security breaches. A brute force attack involves ‘guessing’ username and passwords to gain unauthorized access to a system. Brute force is a simple attack method and has a high success rate   . Hey guyes today I will tell you how I bypass misconfigured rate limiting protection and from this   victim account can be hijacked by bruteforcing the password . LETS DESCRIBE :      An application like  xyz.com implemented rate limiting protection on login page  on basis  of ip.        If any user hit login request 25 times repeatedly then their ip will be blocked for next 10 or 12 seconds.       So I created a  python  script to handle this automatically: import requests import os import time global pastebin_url import sys if len(sys.argv) == 2: filename = sy...

 improper cache managment to cross site request forger y 1.you have to  check  all visited pages saved in browser cache or not  2 you have to check  csrf  token is applied for  user by user . that should not be expired.  LETS  START  login your account EXAMPLE(abc)  visit all pages  logout the account  now click back buttton u see all visited pages  open profile page   on intercept and click on save  capture this request   we get a csrf token of that user ----------------------------------------------- create new account login that account and go to profile and  capture the  request of update profile and make a csrf form of that request.  now paste csrf token  that we previously taken and save as.html   if abc login accounnt and that html page is send and when he opened that page their profile  get changed -------...