HMCyberAcademy

HMCyberAcademy

3 Followers
AllVideosLiveAbout
    File upload 6 | Remote Code Execution via Polyglot Web Shell Upload #BugBounty
    7:37

    File upload 6 | Remote Code Execution via Polyglot Web Shell Upload #BugBounty

    File upload 5 | Web Shell Upload via Obfuscated File Extension #BugBounty
    7:30

    File upload 5 | Web Shell Upload via Obfuscated File Extension #BugBounty

     2  views
    File Upload 4 | Web Shell Upload via Extension Blacklist Bypass #BugBounty
    7:38

    File Upload 4 | Web Shell Upload via Extension Blacklist Bypass #BugBounty

     2  views
    File upload 3 | Web shell upload via path traversal
    11:09

    File upload 3 | Web shell upload via path traversal

     4  views 2 comments
    File upload 2 | Web shell upload via Content-Type restriction bypass
    5:32

    File upload 2 | Web shell upload via Content-Type restriction bypass

     1  view
    Access control 11 | Method-based access control can be circumvented
    6:52

    Access control 11 | Method-based access control can be circumvented

    Access control 10 | URL-based access control can be circumvented
    12:57

    Access control 10 | URL-based access control can be circumvented

     1  view
    Access control 12 | Multi-step process with no access control on one step
    6:25

    Access control 12 | Multi-step process with no access control on one step

    Access control 13 | Referer-based access control
    7:06

    Access control 13 | Referer-based access control

    File upload 1 | Web shell upload via Content-Type restriction bypass
    10:41

    File upload 1 | Web shell upload via Content-Type restriction bypass

     1  view
    Access control 9 | Insecure direct object references
    3:51

    Access control 9 | Insecure direct object references

     2  views
    Access control 8 | User ID controlled by request parameter with password disclosure
    3:57

    Access control 8 | User ID controlled by request parameter with password disclosure

     7  views
    Access control 7 | User ID controlled by request parameter with data leakage in redirect
    3:36

    Access control 7 | User ID controlled by request parameter with data leakage in redirect

     5  views
    Access Control 6 | User ID controlled by request parameter, with unpredictable user IDs
    5:06

    Access Control 6 | User ID controlled by request parameter, with unpredictable user IDs

     8  views
    Access Control 5 | URL-based Access Control Can Be Circumvented #bugbounty #portswigger
    4:09

    Access Control 5 | URL-based Access Control Can Be Circumvented #bugbounty #portswigger

     5  views
    Access Control 4 | User Role Can Be Modified in User Profile #bugbounty #portswigger
    5:26

    Access Control 4 | User Role Can Be Modified in User Profile #bugbounty #portswigger

     7  views
    Access Control 3 | User Role Controlled by Request Parameter #BugBounty #portswigger
    3:50

    Access Control 3 | User Role Controlled by Request Parameter #BugBounty #portswigger

     5  views
    Access Control 1 | Unprotected Admin Functionality #BugBounty #portswigger
    4:56

    Access Control 1 | Unprotected Admin Functionality #BugBounty #portswigger

     4  views
    Access Control 2 | Unprotected Admin Functionality with Unpredictable URL #BugBounty #portswigger
    3:19

    Access Control 2 | Unprotected Admin Functionality with Unpredictable URL #BugBounty #portswigger

     2  views
    Command Injection 5 | Blind OS Command Injection with Out-Of-Band Data Exfiltration
    4:46

    Command Injection 5 | Blind OS Command Injection with Out-Of-Band Data Exfiltration

     5  views 1 comment
    Command Injection 4 | Blind OS Command Injection with Out-Of-Band Interaction
    6:48

    Command Injection 4 | Blind OS Command Injection with Out-Of-Band Interaction

     2  views
    Command Injection 3 | Blind OS Command Injection with Output Redirection
    9:52

    Command Injection 3 | Blind OS Command Injection with Output Redirection

     2  views
    Command Injection 2 | Blind OS Command Injection with Time Delays
    11:43

    Command Injection 2 | Blind OS Command Injection with Time Delays

    Command Injection 1 | OS Command Injection, Simple Case
    9:56

    Command Injection 1 | OS Command Injection, Simple Case

     2  views
    Path Traversal 6 | File path traversal, validation of file extension with null byte bypass
    3:43

    Path Traversal 6 | File path traversal, validation of file extension with null byte bypass

     7  views
Prev Next
Rumble logo