{"id":33936,"date":"2020-09-12T15:41:44","date_gmt":"2020-09-12T15:41:44","guid":{"rendered":"https:\/\/abadnet.com.sa\/online\/?p=33936"},"modified":"2020-09-12T16:04:16","modified_gmt":"2020-09-12T16:04:16","slug":"%d8%a5%d9%83%d8%aa%d8%b4%d8%a7%d9%81-%d8%a7%d9%84%d8%ab%d8%ba%d8%b1%d8%a7%d8%aa-%d8%a7%d9%84%d8%a8%d8%b1%d9%85%d8%ac%d9%8a%d8%a9-%d9%88%d9%85%d9%8f%d9%83%d8%a7%d9%81%d8%a6%d8%aa%d9%87%d8%a7-bug-bounty","status":"publish","type":"post","link":"https:\/\/abadnet.com.sa\/online\/%d8%a5%d9%83%d8%aa%d8%b4%d8%a7%d9%81-%d8%a7%d9%84%d8%ab%d8%ba%d8%b1%d8%a7%d8%aa-%d8%a7%d9%84%d8%a8%d8%b1%d9%85%d8%ac%d9%8a%d8%a9-%d9%88%d9%85%d9%8f%d9%83%d8%a7%d9%81%d8%a6%d8%aa%d9%87%d8%a7-bug-bounty\/","title":{"rendered":"\u0625\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0645\u064f\u0643\u0627\u0641\u0626\u062a\u0647\u0627 Bug Bounty"},"content":{"rendered":"\n

\u0625\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0645\u064f\u0643\u0627\u0641\u0626\u062a\u0647\u0627<\/h3>\n\n\n\n

\u0641\u064a \u0645\u0648\u0636\u0648\u0639\u0646\u0627 \u0627\u0644\u064a\u0648\u0645 \u0633\u0646\u062a\u062d\u062f\u062b \u0639\u0646 \u0635\u0627\u0626\u062f\u064a \u0627\u0644\u062b\u063a\u0631\u0627\u062a\u060c \u0648\u0645\u0627\u0647\u0649 \u0641\u0643\u0631\u0629 \u0645\u064f\u0643\u0627\u0641\u0623\u0629 \u0635\u064a\u062f \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0623\u0648 \u0627\u0644\u0640 (Bug bounty).<\/p>\n\n\n\n

 \u0645\u064f\u0635\u0637\u0644\u062d \u0627\u0644\u0640 (Bug bounty):<\/strong><\/h4>\n\n\n\n

\u064a\u064f\u0639\u0631\u0641 \u0645\u064f\u0635\u0637\u0644\u062d \u0627\u0644\u0640 (bug bounty) \u0628\u0627\u0644\u0644\u063a\u0629 \u0627\u0644\u0639\u0631\u0628\u064a\u0629 \u0628\u0645\u0643\u0627\u0641\u0623\u0629 \u0627\u0644\u062b\u063a\u0631\u0629\u060c \u0648\u0647\u064a \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0635\u0641\u0642\u0629 \u064a\u0639\u0631\u0636\u0647\u0627 \u0627\u0644\u0643\u062b\u064a\u0631 \u0645\u0646 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0643\u064f\u0628\u0631\u0649 \u0644\u064a\u062d\u0635\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644\u0647\u0627 \u0645\u0643\u062a\u0634\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0639\u0644\u0649 \u0645\u0643\u0627\u0641\u0622\u062a \u0645\u0627\u0644\u064a\u0629 \u0648\u0634\u0647\u0627\u062f\u0627\u062a \u0634\u0643\u0631 \u0628\u0633\u0628\u0628 \u0625\u0643\u062a\u0634\u0627\u0641\u0647\u0645 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0648\u0627\u0644\u062a\u0628\u0644\u064a\u063a \u0639\u0646\u0647\u0627 .<\/p>\n\n\n\n

\u0648\u062a\u0645\u0643\u0646 \u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u0642\u0627\u062a \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0642\u0628\u0644 \u0645\u0639\u0631\u0641\u0629 \u0627\u0644\u0634\u0631\u0643\u0629 \u0628\u0647\u0627\u060c \u0645\u0645\u0627 \u064a\u0633\u0627\u0639\u062f \u0641\u064a \u062a\u062c\u0646\u0628 \u0625\u0633\u0627\u0621\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627\u060c \u0648\u0639\u0644\u0649 \u0631\u0623\u0633 \u062a\u0644\u0643 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0647\u0645<\/p>\n\n\n\n

Google , Facebook, Apple , Twitter , Yahoo , Microsoft , IBM , Uber , Sony , Paypal , Kaspersky , STC<\/strong><\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

\u0645\u0646 \u0647\u064f\u0645 \u0635\u0627\u0626\u062f\u064a \u0627\u0644\u062b\u063a\u0631\u0627\u062a\u061f<\/strong><\/h4>\n\n\n\n

\u064a\u064f\u0639\u0631\u0641 \u0628\u0627\u0644\u0647\u0643\u0631 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a\u060c \u0623\u0648 \u0627\u0644\u0645\u062e\u062a\u0631\u0642 \u0630\u0648 \u0627\u0644\u0642\u0628\u0639\u0629 \u0627\u0644\u0628\u064a\u0636\u0627\u0621\u060c \u0648\u064a\u0645\u0627\u0631\u0633 \u0645\u0627 \u064a\u0639\u0631\u0641 \u0628\u0640\u00ab\u0627\u0644\u0640\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a\u0629\u00bb<\/p>\n\n\n\n

\u064a\u0631\u0643\u0632 \u0627\u0644\u0647\u0643\u0631 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a \u0639\u0644\u0649 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0623\u0646\u0638\u0645\u0629\u060c \u0639\u0644\u0649 \u0639\u0643\u0633 \u0627\u0644\u0642\u0631\u0635\u0627\u0646 \u0630\u0648 \u0627\u0644\u0642\u0628\u0639\u0629 \u0627\u0644\u0633\u0648\u062f\u0627\u0621 \u0627\u0644\u0630\u064a \u064a\u062d\u0627\u0648\u0644 \u0625\u062e\u062a\u0631\u0627\u0642\u0647\u0627\u060c \u0643\u0645\u0627 \u0625\u0646\u0647 \u0634\u062e\u0635 \u0645\u0635\u0631\u0651\u062d \u0644\u0647 \u0628\u0625\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0648\u0633\u0627\u0626\u0644 \u0627\u0644\u0645\u0645\u0646\u0648\u0639\u0629 \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u0623\u062e\u0637\u0627\u0631 \u0623\u0645\u0646 \u0627\u0644\u062d\u0648\u0627\u0633\u064a\u0628 \u0648\u0627\u0644\u0634\u0628\u0643\u0627\u062a.<\/p>\n\n\n\n

\u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a<\/strong><\/h4>\n\n\n\n

\u062c\u0645\u064a\u0639 \u0627\u0644\u0623\u0634\u062e\u0627\u0635 \u0645\u0643\u062a\u0634\u0641\u064a \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0644\u062f\u064a\u0647\u0645 \u062a\u0645\u0643\u0651\u0646 \u0639\u0627\u0644\u064a \u0641\u064a \u0644\u063a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0648 \u0641\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0625\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a<\/p>\n\n\n\n

\u0648\u0645\u0646 \u0627\u0628\u0631\u0632 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0630\u064a \u064a\u062a\u0639\u0644\u0645\u0647\u0627 \u0627\u0644\u0635\u064a\u0651\u0627\u062f\u064a\u0646 \u0647\u064a :<\/p>\n\n\n\n

\u0627\u0628\u0631\u0632 10 \u0645\u0646 \u0627\u0646\u0648\u0627\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a <\/th>\u0644\u0644\u0625\u0637\u0644\u0627\u0639 \u0623\u0643\u062b\u0631<\/th><\/tr><\/thead>
1. Cross-site Scripting – All Types (dom, reflected, stored, generic)<\/td>Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites more<\/a><\/td><\/tr>
2. Improper Authentication – Generic<\/td> When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. more<\/a><\/td><\/tr>
3. Information Disclosure<\/td> A vulnerability is a weakness in an application (frequently a broken or missing control) that enables an attack to succeed. Be sure you don’t put [attacks] or [controls] in this category. more<\/a><\/td><\/tr>
4. Privilege Escalation<\/td> Privilege escalation is the result of actions that allows an adversary to obtain a higher level of permissions on a system or network more<\/a><\/td><\/tr>
5. SQL Injection<\/td> A\u00a0SQL injection<\/a>\u00a0attack consists of insertion or “injection” of a SQL query via the input data from the client to the application more<\/a><\/td><\/tr>
6. Code Injection<\/td> Code Injection is the general term for attack types which consist of injecting code that is then interpreted\/executed by the application more<\/a><\/td><\/tr>
7 .Server-Side Request Forgery (SSRF)<\/td> In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to read or update internal resources more<\/a> <\/td><\/tr>
8. Insecure Direct Object Reference (IDOR)<\/td> Insecure Direct Object References occur when an application provides direct access to objects based on user-supplied input more<\/a> <\/td><\/tr>
9. Improper Access Control – Generic<\/td> The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor. more<\/a><\/td><\/tr>
10. Cross-Site Request Forgery (CSRF)<\/td> Cross-Site Request Forgery is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated more<\/a> <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

<\/p>\n\n\n\n

\u0643\u064a\u0641 \u062a\u064f\u0635\u0628\u062d \u0635\u0627\u0626\u062f \u062b\u063a\u0631\u0627\u062a\u061f<\/strong><\/h4>\n\n\n\n

\u0644\u0643\u064a \u062a\u0643\u0648\u0646 \u0635\u0627\u0626\u062f \u062b\u063a\u0631\u0627\u062a \u0639\u0644\u064a\u0643 \u0623\u0646 \u062a\u0642\u0648\u0645 \u0628\u062a\u0639\u0644\u0645 \u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0646 \u0627\u0644\u0645\u0647\u0627\u0631\u0627\u062a \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0639\u0644\u064a\u0643 \u0623\u0646 \u062a\u0639\u0631\u0641\u0647\u0627 \u0648\u062a\u062a\u0639\u0627\u0645\u0644 \u0645\u0639\u0647\u0627 \u0642\u0628\u0644 \u0627\u0644\u0628\u062f\u0621 \u0641\u0649 \u062a\u0639\u0644\u0645 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642\u060c \u0648\u0643\u0630\u0644\u0643 \u0645\u0647\u0627\u0631\u0627\u062a \u0643\u0645\u0628\u064a\u0648\u062a\u0631 \u0623\u0633\u0627\u0633\u064a\u0629\u060c \u0648\u0627\u0644\u0645\u0641\u0627\u0647\u064a\u0645 \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629\u060c \u062a\u062d\u062a\u0627\u062c \u0623\u064a\u0636\u0627 \u0627\u0646 \u062a\u0643\u0648\u0646 \u0645\u062a\u0642\u0646 \u0644\u0644\u063a\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0648\u0623\u064a\u0636\u0627\u064b \u062a\u0623\u062e\u0630 \u062f\u0648\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0647\u0643\u0631 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a \u0623\u0648 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u060c \u0648\u062c\u0645\u064a\u0639\u0647\u0627 \u0645\u062a\u0627\u062d\u0647 \u0641\u064a \u0645\u0639\u0647\u062f \u0622\u0628\u0627\u062f \u0644\u0644\u062a\u062f\u0631\u064a\u0628<\/a>.<\/p>\n\n\n\n

\u062f\u0648\u0631\u0629 WAPT \u0633\u0648\u0641 \u062a\u0642\u0627\u0645 \u0641\u064a \u0645\u0639\u0647\u062f \u0622\u0628\u0627\u062f \u0642\u0631\u064a\u0628\u0627\u064b \u0648\u0647\u064a \u062a\u0634\u0645\u0644 \u0627\u0628\u0631\u0632 \u0627\u0646\u0648\u0627\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0625\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a<\/strong><\/p>\n\n\n\n

\u0645\u062a\u0627\u0628\u0639\u0629 \u0627\u0648\u0644 \u0645\u062d\u0627\u0636\u0631\u0629 \u0645\u062c\u0627\u0646\u064a\u0647 \u0645\u0646 \u0627\u0644\u062f\u0648\u0631\u0629 \u0641\u064a \u0645\u0639\u0647\u062f \u0622\u0628\u0627\u062f : WAPT Online<\/a><\/strong><\/p>\n\n\n\n

\u0644\u0644\u062a\u0633\u062c\u064a\u0644 \u0641\u064a \u0627\u0644\u062f\u0648\u0631\u0629 \u0645\u0646 \u0647\u0646\u0627 :<\/strong> https:\/\/www.abadnet.com.sa\/wapt-web-application-penetration-testing<\/a><\/p>\n\n\n\n

<\/p>\n\n\n\n

\u0645\u0639 \u062a\u0645\u0646\u064a\u0627\u062a\u0646\u0627 \u0644\u0643\u0645 \u0628\u0627\u0644\u062a\u0648\u0641\u064a\u0642 .. <\/p>\n","protected":false},"excerpt":{"rendered":"

\u0625\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0648\u0645\u064f\u0643\u0627\u0641\u0626\u062a\u0647\u0627 \u0641\u064a \u0645\u0648\u0636\u0648\u0639\u0646\u0627 \u0627\u0644\u064a\u0648\u0645 \u0633\u0646\u062a\u062d\u062f\u062b \u0639\u0646 \u0635\u0627\u0626\u062f\u064a \u0627\u0644\u062b\u063a\u0631\u0627\u062a\u060c \u0648\u0645\u0627\u0647\u0649 \u0641\u0643\u0631\u0629 \u0645\u064f\u0643\u0627\u0641\u0623\u0629 \u0635\u064a\u062f \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0623\u0648 \u0627\u0644\u0640 (Bug […]<\/p>\n","protected":false},"author":1,"featured_media":34008,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[62,66],"tags":[64],"class_list":["post-33936","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-62","category-security","tag-bugbounty"],"_links":{"self":[{"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/posts\/33936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/comments?post=33936"}],"version-history":[{"count":0,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/posts\/33936\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/media\/34008"}],"wp:attachment":[{"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/media?parent=33936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/categories?post=33936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/abadnet.com.sa\/online\/wp-json\/wp\/v2\/tags?post=33936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}