Submissions from shubh.am

		Abusing URL Shortners to discover sensitive resources or assets (shubh.am)
		5 points by infosecau on Sept 22, 2015 \| past
		Enumerating IPs in X-Forwarded-For Headers to Bypass 403 Restrictions (shubh.am)
		3 points by infosecau on July 16, 2015 \| past
		Breaking International Voicemail Security via VVM Exploitation (shubh.am)
		3 points by gibsonsecurity on Oct 20, 2014 \| past \| 1 comment
		The deterioration of unmanaged bug bounties (shubh.am)
		2 points by hartleybrody on May 31, 2014 \| past
		CaptchaJacking – An Approach to Bypassing the Captcha (shubh.am)
		2 points by xvirk on May 18, 2014 \| past
		How I bypassed 2-Factor-Authentication on Google, Facebook, Yahoo, LinkedIn (shubh.am)
		392 points by sounds on May 17, 2014 \| past \| 143 comments
		Coinbase design allows for mass, targeted phishing of its users (shubh.am)
		152 points by julespitt on March 31, 2014 \| past \| 73 comments
		Demonstrating the critical nature of SSRF (shubh.am)
		2 points by EwanToo on March 18, 2014 \| past
		I found Prezi's source code (shubh.am)
		712 points by psychboo on Dec 3, 2013 \| past \| 255 comments
		XSS allowed on eBay members pages (shubh.am)
		1 point by austengary on Sept 23, 2013 \| past
		CatpchaJacking: A new approach on bypassing the Captcha. (shubh.am)
		1 point by infosecau on Sept 7, 2013 \| past

HN For You