Cyb3rn3t1c5โจ๐ง๐พ
@cyb3rn3t1cs
penetration tester | I play with keyboards for a living |voiceoverartist |speaks ๐ซ๐ท ๐ธ๐ฆ,Yoruba,hausa,Ebira| Cybergirl 4.0 | CAP|EJPT| |BTL1|SC-200|CNSP|SAL1
ID: 1570785650328100866
http://linkedin.com/in/humairah-adamu-sidi-31a022243 16-09-2022 14:44:32
4,4K Tweet
2,2K Takipรงi
994 Takip Edilen
๐จ๐ฟ๐ด๐ฒ๐ป๐ ๐ฐ๐ฎ๐น๐น ๐ณ๐ผ๐ฟ ๐ฎ๐น๐น ๐๐๐ฆ๐ข๐ ๐ฎ๐ป๐ฑ ๐๐บ๐ฝ๐น๐ผ๐๐ฒ๐ฒ๐ ๐ช๐ต๐ผ ๐จ๐๐ฒ ๐ ๐ถ๐ฐ๐ฟ๐ผ๐๐ผ๐ณ๐ ๐ง๐ผ๐ผ๐น๐ I read about a newly identified ๐ฃ๐ต๐ถ๐๐ต๐ถ๐ป๐ด ๐๐ฒ๐ฐ๐ต๐ป๐ถ๐พ๐๐ฒ called "๐๐ผ๐ฃ๐ต๐ถ๐๐ต" and I thought to share. This attack exploits Microsoftโs Copilot
Letโs take a case study of the API Pentest I did on Vulnbank by Ghost St Badmus With burpsuite, I intercepted traffic and manipulated the login endpoint which gave me access to another users account, why was this, filtering on auth endpoint was bad This is a flaw a penetration
API penetration testing course APIsec University is quite good