https://moza369.github.io/tags/hackerone/Recent content in Hackerone on MOZAHugoen-usFri, 01 May 2026 00:00:00 +0000https://moza369.github.io/projects/ciora/Fri, 01 May 2026 00:00:00 +0000https://moza369.github.io/projects/ciora/<h2 id="overview">Overview</h2> <p>Ciora is a <strong>Bash-based recon automation tool</strong> built for bug bounty hunters and pentesters. It downloads the <strong>HackerOne program scope</strong> (public or private with session cookie), extracts web assets &amp; wildcards, and optionally performs <strong>subdomain enumeration</strong> using multiple tools.</p> <h2 id="features">Features</h2> <ul> <li>Supports <strong>public &amp; private HackerOne programs</strong> (cookie auth for private)</li> <li>Automatically extracts: <ul> <li>Web assets</li> <li>Wildcards</li> <li>Cleaned wildcard domains</li> </ul> </li> <li>Subdomain enumeration with: <ul> <li><strong>Amass</strong></li> <li><strong>Sublist3r</strong></li> <li><strong>Assetfinder</strong></li> <li><strong>Subfinder</strong></li> <li><strong>ShuffleDNS</strong></li> </ul> </li> <li>Merges results into one file (<code>all_subdomains.txt</code>)</li> <li>Pretty banner + clean output</li> </ul> <h2 id="installation">Installation</h2> <p>Clone the repo and install dependencies:</p>https://moza369.github.io/writeups/csrf-missing-protection-editor/Mon, 14 Jul 2025 00:00:00 +0000https://moza369.github.io/writeups/csrf-missing-protection-editor/<h2 id="summary">Summary</h2> <table> <thead> <tr> <th>Detail</th> <th>Value</th> </tr> </thead> <tbody> <tr> <td><strong>Target</strong></td> <td>Web application editor (<code>/editor/*</code>)</td> </tr> <tr> <td><strong>Weakness</strong></td> <td>Cross-Site Request Forgery (CSRF)</td> </tr> <tr> <td><strong>Severity</strong></td> <td>High</td> </tr> <tr> <td><strong>Status</strong></td> <td>Resolved</td> </tr> <tr> <td><strong>Platform</strong></td> <td>HackerOne</td> </tr> <tr> <td><strong>Reported</strong></td> <td>2025-07-14</td> </tr> <tr> <td><strong>Resolved</strong></td> <td>2025-09-10</td> </tr> </tbody> </table> <h2 id="overview">Overview</h2> <p>A state-changing API endpoint under the application&rsquo;s editor interface had <strong>no CSRF protection at all</strong>. This allowed an attacker to craft a simple HTML page that, when visited by a logged-in user, would silently create or modify data in the victim&rsquo;s account without any interaction.</p> <h2 id="the-vulnerability">The Vulnerability</h2> <p>The endpoint:</p>