Web Security Insights By Maloy Roy Orko

Title: " IP Address OSINT Full Course Using Android via IP OSINT TOOLKIT "- Covered By Maloy Roy Orko Creator: Maloy Roy Orko Description: Unlock the power of OSINT on your Android device!  💻 In this video, we dive into using the IP OSINT Toolkit to uncover valuable information from IP addresses .  🌐🔍 Join us for tips, tricks, and tools to enhance your investigations! Don't forget to like and subscribe!  👍✨ Discover how to leverage the IP OSINT Toolkit on your Android device for effective IP address investigations! 📲🔎 Covered Topics :  IP Location Tracing Basic IP Location Advanced Tracing Tor & Proxy Check Reverse Geocoding  Forward Geocoding Mass IP Location Tracing IP OSINT TOOLKIT Link: http://ip-osint.ct.ws/ Tags : cyber security ip address ip network security find ip address what can someone do with my ip v p n can hackers hack me with my ip ip address hacking explained ip tracking how hackers use ip addresses how to track ip address what is m...

Bug Bounty Facts:  Don't Even Think About Bounty If You Are Thinking That Finding A Open Redirect Can Make Money. For Making Money: You have to be able to do chaining attacks like Open Redirect to Xss  This is a Security Risk Not Vulnerability. Why They Don't Care About Your Finding ? (1) Security System Like Linkshim  (Linkshim Basically Blocks Phishing or Malicious Websites Based On its Content as it hits the website first and then redirects) (2) CSP Strict Policies (To block XSS) (3) Firewalls Scenarios -1: As,above security configurations block attacks and then why will they consider it as vulnerability? Scenarios -2: There is no data dump vulnerability or access and modification issue here. The whole thing us: Users will fall for Phishing & Browser Hijacking For This! That's   The Problem of users not the authorities as they have no problem in their system. This was just an redirection system.

Hi All,  I am  Maloy Roy Orko . CVE Number: CVE-2025-1356 Recently in one of my pentest research, I found an  Library-Card-System By Needyamin  which is an open source E-commerce application using native PHP. Curious to explore its functionalities, I downloaded and set it up in my local system.  After fiddling with the source code, I found that it did not have any kind of  SQL Injection  protection. It can lead into mass user data in risk and database leaks can be happened by hackers too and admin panel credentials were in risk too . The Main Thing Is, if any NON-IT personal uses this template,he will fall into this vulnerability and his companies reputation can be lost too .Thats why I am trying to inform everyone about this. Title of the Vulnerability:                    Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko  Vulnerability Class:    ...

Hi All,  CVE Number : CVE-2025-1355 I am  Maloy Roy Orko . Recently in one of my pentest research, I found an  Library-Card-System  application By Needyamin which is an open source Image Gallery Management System using PHP, MYSQL, JAVASCRIPT. It is based on the scripting languages of PHP.  Library-Card-System  is an Library Card System using PHP, MYSQL, JAVASCRIPT Curious to explore its functionalities, I downloaded and set it up in my local system.  After fiddling with the source code, I found that it did not have any kind of File Extension or Upload protection In signup.php file. It  can lead into : Malware Distribution Remote Code Execution (RCE) Data Breach Denial of Service (DoS) Web Shell Installation Bypassing Security Controls Reputation Damage The  Main Thing  Is, If any NON-IT personal uses this template,he will fall into this vulnerability and his companies reputation can be lost too.Thats why I am trying to inform everyo...