fabiochiu/medium-articles huggingface dataset:
How I hacked 92k users Information using open s3 bucket
By: Rudra Sarkar
Tags: Infosec, AWS, Pentesting, Data Breach, Bug Bounty

Invoices

First of all this is my biggest hack I did in my life.The website I found few day ago while I am looking for bus ticket.After booking Bus ticket I thought let’s find something on there, I know that they don’t have Bug Bounty, This isn’t the matter, I started finding.Long story short let get into steps how I did all this.

Checking Technology

They are using Laravel Framework , Vue.js which is comes with Laravel Framework as we know.Also they are using Amazon AWS S3.

I reported first bug which is Blind XSS they replied me

Reply From CTO

So, one of the admin logged into their admin panel and I got notification from XSSHunter , Again I sent mail to CTO with the DOM snippet where have user information like Name, Mobile Number

Admin Resource Dashboard

After this the CTO wanted to meet with me.

Reply from CTO

Before I set the meeting time i found another bug which is IDOR On a Sub domain using the vulnerability I can able to check any users wallet information, And my friend Aayush Pokhrel who help me to find out the Sub domain then I reported the IDOR issue to CTO.

Who don’t want to get invite from a Company 😍

Then I go forward and start finding further.So after checking source code I found that they are using Amazon AWS S3 and I visit to the URL which look like.

https://s3.ap-south-1.amazonaws.com/cdn-redacted/redacted_***/static/css/app.a852a04b6405ea05ffe709430e138802.css

It’s showing CSS code, Then I thought 🤔 that let’s check it’s open or not, So I visit https://s3.ap-south-1.amazonaws.com/cdn-redacted/ and I found that it publicly open.

Dude it’s gonna be a blast right now 💥

I fire up my Kali and Setup AWS with CLI and then I tired type command to know what’s in there.After 10 Minute my AWS account got suspend because my card expired , So I ask help from Aayush Pokhrel but he also don’t have AWS account and then Aayush talk with Smaran Chand who give me his access token and secret key I configured my AWS CLI, Then I got all of these bellow:

$ aws s3 ls s3://cdn-redacted

Bucket Information

As you can see db_backups/

Database Backup

Which size is almost 430MB, I found almost 92K+ users information on the database backup.

This how I got all the information and I sync whole bucket ( Total Size: 35.6 GB ) into my PC for show to the CTO that they can understand the issue clearly.

What I Got From The Bucket

Database Backup

Invoices

Affiliate Payment information with users phone number

Top-up success information

Lot’s of E-mail, sensitive information including.

Call record between customer and customer care

Then I meet with the CTO and Co-Founder and I show all the stuff what I got, They really appreciate about my finding.

Then the company offered me job as Security Engineer, and I was really surprised.

Let’s Dance xD

Thanks for reading, If there any mistake in spelling pardon me.Find me on twitter @rudr4_sarkar
My First Bug ($500)
Tags: Bugs, Security, Pentesting, Bug Bounty

This is my first blog so ignore if i make any mistakes.

After spending 2 to 3 months looking for bugs i couldn’t find anything. So i went on HackerOne’s Hacktivity page where you can read disclosed reports of vulnerabilities reported by researchers.

As i was reading the reports i found this vulnerability that i didn’t know about.

The vulnerability was that you can spoof their email address and then the attacker can send emails from their email address which could lead to sending fake emails or attempts of phishing.

To see if you can send an email of a target domain you need to check if it has an SPF (Sender Policy Framework) Record. Its basically a framework that checks which hosts are authorized to send mail for a domain.

To check this visit https://www.kitterman.com/spf/validate.html There are many websites to check this but i find this very simple. Just type the domain name and click on Get SPF Record (if any).

For eg: If you receive an email like support@example.com then type example.com

Response

If you get No valid SPF record you probably can send an email using that domain. To send an email visit https://emkei.cz . A lot of websites are available to send emails i just find this easy to use and the emails are received fairly quick. Fill in all the details and hit send and if you receive an email from that domain its vulnerable.

I tried this on the websites that i used to hack and 3 of them didn’t have the SPF record and so i reported them and after a few days they replied.
Bug Bounty: Broken API Authorization
By: Omkar Bhagwat
Tags: API, Bounty Program, Authorization, Cybersecurity, Bug Bounty

Hey everyone, I’d like to share how I found a simple API authorization bug in a private program, which affected thousands of sub-domains and allowed me to exploit a plethora of unprotected functionality without user interaction, from account deletion to takeovers and leaking limited information(Full name, e-mails ids and employer).

Tl;dr: The server wasn’t checking if the authorization bearer token belonged to a regular user or a poweruser.

It’s a private program, so some information will be redacted and I’ll refer to the site as “target.com”.

I had a dirsearch scan running in the background while skimming through

academy.target.com, to get an overview of the sites functionality.

I noticed an interesting endpoint like: academy.target.com/api/docs

Endpoints like these are a goldmine because they have API documentation and specify the structure of requests and responses.

On browsing to the endpoint, I found the page to be extremely similar to Swagger UI (this site didn’t use swagger though). It also had a button simply called “Authenticate”, and clicking on it navigated to a login page but it threw a “Account not authorized” message, if I tried logging in.

There were some interesting endpoints like:

/poweruser/add

/poweruser/delete

/user/delete

/user/create

/user/user_logged_in

/user/profile

The page kinda looked like this.

This caught me off guard because it seemed like these endpoints should be reserved for internal/power users use only.

Directly calling the endpoints without any API token or authorization header resulted in:

An unsurprisingly disappointing response

The website didn’t seem to offer any API, and I couldn’t find any way to generate an API token, so I decided to check it out later.

After extensively searching the site, I still couldn’t find a single API token in the requests or the response.

However, I noticed many requests had an authorization bearer token.

I decided to simply copy the header and include it in the calls to the API endpoints I found.

I created another account and tried to change its password, with a POST request to api/user/edit.

HTTP request to change another users password, this time with the bearer token.

Successful response lol.

Voilà! It worked like a charm. Apart from escalating my account to a power-user, I could successfully invoke almost all the other API endpoints.

The documentation detailed the parameters I needed to delete/take over/create new accounts and do some other bad things.

I decided to report the vulnerability directly to the vendor and it turned out they had a private bug bounty program and awarded me a $440 bounty.

Thanks for reading!
ManageEngine ServiceDesk Plus: Arbitrary File Upload
By: Duc Anh Bui
Tags: Cybersecurity, Writeup, Bug Bounty

Introduction

This article is a write up on how I found my second critical vulnerability at the company’s internal bounty program.

I wrote this for educational purposes only. Do not perform any illegal activity or pen-testing without permission.

Vulnerability exploitation

After a bunch of enumerations and information gathering on subdomains. I found an interesting subdomain that uses ManageEngine ServiceDesk Plus, which have lots of potential security risk.

A few minutes in, I discovered a way to get RCE on this subdomain. This method required an authenticated user to send a POST request to a vulnerable endpoint. (CVE-2019–8394).

2020 solving 2020 problems

In file common/FileAttachment.jsp line 332 only check file upload extension when parameter ‘module’ equal to ‘SSP’ or ‘DashBoard’ or ‘HomePage’, and if parameter ‘module’ is set to ‘CustomLogin’ will skip check file upload extension function and upload arbitrary file to folder ‘/custom/login’ and this file can access directly from url ‘host:port/custom/login/filename’ . An authenticated user with minimum permission (ex: guest) can upload webshell to server.

So the first thing is to acquire an account (don’t care about the privileges). Rolled the dices and found the simplest account credentials of all time. This made me remembered about my first bug bounty case for V* with admin:admin credentials, easy money easy life.

admin:admin

Got the account, let’s dive into the process of gaining RCE

The first step is to authenticate to access the application with guest credentials, then the server will send a response with cookie parameters.

After that, take the cookie parameters and webshell content and put them in sections showed in the image below (I got the webshell from this repo)

Notes: Edit your webshell content to have no newlines (spaces are ok), I struggled for half an hour to get my shell run properly.

The server send me an 200 OK response. Go check the path

/custom/login/{your_shell_name}.jsp

Thank god the shell popped up. I can execute arbitrary code on the web server from now on!

First time RCE on Window

Corona Quarantine List?

Conclusion

Always keep your application up-to-date to mitigate security issues.

Keep trying, there’s still a light at the end of the tunnel xD

References

https://github.com/SecurityRiskAdvisors/cmd.jsp
SQL Injection Via Stopping redirection to a login page
By: Abde Ouabala
Tags: Security, Noob, Web Apps, Testing, Bug Bounty

Hi everyone,

in this simple small write up, I’ll describe how I was able to exploit a SQL injection vulnerability Via stopping redirection to a login Amin page!

Actualy while testing on a subdomains , related to razer company called “ rsa3072.razersynapse.com“

going to access /admin page → page 200 → redirects again to the login page , Decided to stop the redirection using an known extention named “Noredirect” , and here is what i got exactly ( See the image down )!

Actulay this is a bypass for the /admin part ! we got many sensitive data like game Keys , Emails , users creds ,..

After that i decided to search for more links , maybe there will be something interesting !

Access’d a game link , looks like →/source-data/view?source_data_id=[id]

tried to inject (‘) after the id , got a 500 inernal server error !

Tried a sql injection command to see if the response with return to 200!, the first thing i tried is order by 1- -, and yes i was right! the page returned 200 ok.

So i decided to use sqlmap for auto detecting the type of injection and for easy injecting !

Here is a small picture to show the final injection with sqlmap , Never forget to stopp the redirection while injecting with sqlmap tool ! cuz it will automatiquuely redirects you to login page ! so no injection can be performed there!

For manual injection , i’ll shot over other write ups Nshallah !

So That’s all !

Thank you for reading!

Regards,

St00rm
Bug Chain Tales: P5+P5=P3
By: Verneet Singh
Tags: Xss Attack, Security, Bug Bounty, Csrf

I have started the hunt few months back but after lots of hard luck. I got into one public program. I started hunting, after hunting some bugs. I got around some P5 bugs which was of no use to get reported. In this blog i will get you the idea how i turned no paying bugs to high paying.

1st P5 bug: Self XSS

In shipping address there was reflected XSS but due to CSRF token it will be considered as Self XSS. So that is of no use.

2nd P5 bug: Login CSRF

As the title suggest by having the token url. You can get logged into others account.

Here is the magical part that can make it effective. The attacker can save the address from “Add address” section and save the XSS payload with it.

Now time to use login CSRF. Send the fresh login token of your account to victim. As soon as victim clicks on it he will get logged into your account without any knowledge.

He adds the item to cart and go to checkout. On checkout page as soon he selects address from saved address. The XSS will be executed.

Impact:

Steal data like: Credit card details, Email address, Shipping address, Phone number and more. As the XSS is on billing page it can steal some critical information.

Bug report:
XPath SQL Injection in OpenEMR. Data Exfiltration in OpenEMR 2018…
By: Nairuz Abulhul
Tags: Sql, Web Penetration Testing, Hackthebox, Cybersecurity, Bug Bounty

Applications errors and warning messages are significant for understanding the application’s infrastructure and its underlying technologies. If you can get an application to communicate back to you during testing with viewable errors, you will understand the application’s behavior better.

This article will focus on exfiltrating data through XPATH functions in MySQL error-based injections. I’ll be going through the manual enumeration of an application, discovering the SQL vulnerability, and then using the Intruder feature in Burp Suite to automate the database dumping.

📔 $_Key_Concepts_To_Cover:

In-Band Error Based SQL Injection.

XPath functions in MySQL.

Identifying the SQL vulnerability with manual testing.

Use Burp Suite to speed up the process of the data exfiltration.

$_In_Band_Error_Based_SQL_Injection

In-band SQL Injection occurs when an attacker is able to use the same communication channel to both launch the attack and gather results. — “Acunetix.com”

$_XPath_functions

XPath functions are XML functions used in SQL injections to generate outputs in error messages crafted to reveal confidential data. Two functions were introduced in MySQL version 5.1 and later:

ExtractValue() : Extract a value from an XML string using XPath notation UpdateXML(): Return replaced XML fragment

For this tutorial, we need the ExtractValue() function for the data exfiltration.
Quick intro about what is XSS
By: Pranav Dhumal
Tags: Xss Attack, Coding Interviews, Software, Xss Vulnerability, Bug Bounty

Quick intro about what is XSS

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.

An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page. For more details on the different types of XSS flaws, see: Types of Cross-Site Scripting.

https://owasp.org/www-community/attacks/xss/

To Start with XSS attacks will go to XSS lab Click on the link below

Challenge 1

after opening this will be your First challenge

After typing furious in text box you can see that furious is getting reflected so the website is vulnerable below So if you input script <script>alert(document.URL)</script>into the text box You will complete your 1st challenge

Eg=

If you want to check if there is a XSS in a real website then go to the search bars i.e where the site is taking input parameters and put this script in there

<script>alert(hello)</script> and if the website responds with a pop up hello then there is a XSS in that website so now you have successfully hunted for the XSS vulnerability ,you can now report this to website to earn some bounty

WILL WRITE ABOUT NEXT CHALLENGES IN FEW DAYS
A square peg in a round hole: Traditional Contracts for Agile Projects
By: Joseph Badru
Tags: Lawyers, Contracts, Agile, Tech

A square peg in a round hole: Traditional Contracts for Agile Projects

As a young lawyer, taking up a career shift to Tech, specifically Product Management was exciting and challenging. Working on my first product, I had to do a review of the Vendor Agreement with the Client (because I am a Lawyer). In doing this, I realized that this Agreement was not suited for the Agile methodology we were to employ. I decided to find out if there was a non-traditional method of drafting Contracts suitable for Agile projects.

I discovered that law firms in some climes were already adopting a new way of drafting contracts for Agile projects. They called these contracts AGILE CONTRACTS. Many organizations who have embraced Agile methodology, still employ the waterfall contract models in their transactions with clients. Eventually, when user stories change because of iterations from user feedback, change in scope and pricing cause problems.

If you are a Lawyer new to Tech, the first step will be to understand the Agile methodology. Agile anticipates that flexibility is crucial in building products. This happens through iterations called Sprints and is largely influenced by feedback from potential users. I will be sharing more on drafting Agile contracts in my next post. Feel free to ask any questions.

#agile hashtag#softwaredevelopment hashtag#productmanager hashtag#lawyer
Motorcycle Accidents Increasing Faster than New Motorcycles and Drivers
By: D'Oliveira
Tags: Lawyers, Attorney, Motorcycle, Personal Injury Attorney, Motorcycle Accident

As if the fact that motorcycle wrecks continue to occur frequently, the number of motorcycle accidents resulting in severe injuries or death is growing at a rate of more than double the amount of new motorcycles/drivers in the United States. Statistics from the United States Department of Transportation and the National Highway Traffic Safety Administration continue to show that something needs to be done about the occurrence of motorcycle accidents in this country.

Surprising Motorcycle Crash Statistics

According to the United States Department of Transportation and the National Highway Traffic Safety Administration:

On average, more than 5,000 motorcyclists die in fatal accidents each and every year.

Head injuries, such as those that are caused by the lack of a helmet, are the leading cause of deaths in motorcycle accidents.

Motorcyclists not wearing helmets are 40 % more likely to die of a head injury than those who wear a helmet.

Motorcyclists are more than 25 times more likely to experience a severe/deadly accident than those in passenger cars.

The motorcycle accident fatality rate is nearly 5 times higher than the fatality rate for those involved in accidents in a passenger vehicle.

Even though motorcycles only account for roughly 5% of all registered vehicles in the country, motorcycle accidents account for as high as 13% of all accidents each year.

An estimated 1 in 4 motorcyclists involved in a fatal crash was driving with either an invalid license or no license at the time of the crash.

Motorcycle Safety Should Always Come First

Many motorcycle crashes tend to result from the motorcyclist not following, or taking, many simple safety measures. It may not be surprising to many that roughly 50% of all motorcycle accident fatalities involved speeding, and in roughly 40% of motorcycle accidents, the driver had a blood alcohol level above the legal limit. These accidents could have been prevented all too easily.

Please always remember to:

Avoid speeding

Be mindful of traffic signs and conditions

Not drive aggressively

Use a signal when turning

Not drive under the influence of alcohol and drugs

Too many people, young and old, have had their lives either ended or ruined because of motorcycle accidents. Please always keep safety your number one priority on the road and always do your part to help prevent the occurrence of these tragic accidents.

If you or a loved one has been in a motorcycle accident, you should consider contacting one of our lawyers in RI with experience in handling these types of cases. The personal injury attorneys of d’Oliveira & Associates would like to meet with you and discuss the investigation of your motorcycle accident. Our law firm has represented and assisted numerous auto accident victims in bringing lawsuits against other drivers and insurance companies alike, and there are no fees unless we are successful. To have a member of our law office contact you, please fill out a contact form or call us at 1–800–992–6878.
Marks & Klein Counsels on Multi-Unit Planet Fitness Transactions
By: Brandon Shields
Tags: Lawyer, Aquistion, Franchise

One of America’s leading franchise law firms, Marks & Klein, recently served as lead counsel in the acquisition of multiple Planet Fitness locations in Central Florida.

Marks & Klein have become the go-to firm for Planet Fitness transactions, recently representing transactions in CO, CA, CT, NC, NJ, MA, RI, and VA.

“We are thrilled for our clients and the Planet Fitness system. Serving as lead counsel, along with my franchise team of Allison Scaduto, Kristin Blackman and Laurie Waitzel, we have handled hundreds of millions of dollars in Planet Fitness acquisition and sale transactions this year,” Justin Klein, partner of Marks & Klein, commented.

Pictured Above, from left to right: Justin Klein, Allison Scaduto, Kristin Blackman

Klein further illustrated his enthusiasm, “Marks & Klein is fortunate to be involved in some of the most significant transactions in the Planet Fitness network. It’s an exciting time for this franchise and we look forward to our involvement in upcoming transactions.”
What Is A Deposition
By: Accelerated Court Reporting
Tags: Lawyers, Arbitration, Court Reporting Firms, Deposition

A deposition is a question and response session that takes place with a court reporter present to eliminate all that’s said. A deposition can also be tape recorded or videotaped testimonies. Sometimes it is also called an examination before trial. Neither a jury or a judge will be present. This isn’t a trial. The purpose of a deposition would be to permit the other side to find out about your case. A deposition should be taken because your deposition testimony might be used against you and will be recorded. The lawyer representing you can explain the types of questions and will meet with you before the deposition.

This preparation period will last to prepare you, but please be prompt. We’ll also answer your questions during that time and allow you to feel much more comfortable. Throughout the deposition, the lawyer for the defendant’ll questions you. You’ll usually be queries by the attorney of every party being sued as a defendant. Your lawyer will be there at your side shield your pursuits and to object to questions. If any your lawyer will question the defendant and co defendants. All parties will be asked the way the incident happened. You are also going to be asked about the character and extent of the injuries you’re asserting, and the kind and length of any treatment.

Over the course of the deposition, your lawyer may object to a question. In that case, you shouldn’t response the question unless and till your lawyer tells you that you might do so. You might also be requested to look at documents, like incident reports or forms signed by you, or pictures of the collision scene or damage to property. Just keep in mind that you lawyer is there to defend you, and if there’s something you don’t understand, you should say so.

In addition, if English isn’t your first language and you’re much more easily to queries in a different language, you should let your lawyer’s office know in advance of the deposition, in order that arrangements might be made to an interpreter to be current. Keep in mind that opposing counsel is trying to get info from you, so you need to keep your answers short and truthful, and do not volunteer more, attempting to be too helpful. Don’t volunteer any info or explain anything unless you’re asked to explain. Do not guess. Do not be afraid to answer, I do not know. And on the other hand, if one say I do not know too frequently, you might seem untruthful.
The Wouldn’t It Be Great IF Game for Lawyers
By: Amyli Mcdaniel
Tags: Lawyers, Law, Law Firm, Legaltech

Most lawyers I know are realists and many are admitted pessimists. I guess spending much our career time having to think about what could possibly go wrong or dealing with things that have gone wrong can do that to us.

I spend a decent amount of time around “anything is possible” entrepreneurs and just love their energy. No problem cannot be solved.

I especially love “idea brainstorming” where one idea leads to another and then another. A great way to get an idea chain going is to come up with a list of “Wouldn’t it be great if. . . .” statements.

For me when it comes to the legal profession, I have been pondering a few of those questions for close to 20 years- here they are:

“Wouldn’t it be great IF I could create legal engagements where clients could pay less than what they are paying now for a legal need (more affordable) AND I could make more money then what I make now for providing that legal need?”

“Wouldn’t it be great IF my clients felt they had an AMAZING client experience with me as their lawyer after each engagement?”

“Wouldn’t it be great IF I could help more people than I can today without having the work more hours?”

If you played the Wouldn’t it be great IF game, how would you finish this sentence- for things in your business and your personal life?

Now, think about playing this same game to ask BIG POSITIVE IMPACT questions.

Wouldn’t it be great IF we could bury the billable hour model for good? Wouldn’t it be great if we could grow the overall legal market by broadening access to justice ?! Wouldn’t it be great IF the percentage of lawyers suffering from burnout was reduced to zero?

SHARE THIS
Jean Danhong Chen 5 Tasks Immigration Lawyers Do
By: Jean Danhong Chen
Tags: Lawyer, Immigrant Lawyer, Jean Danhong Chen

As an immigrant, you are probably not as lucky as Americans to find a job as many of the jobs that Americans find.

Jean Danhong Chen Fortunately for you, there is probably an immigration lawyer who will assist you in hiring and hiring workers, or at least assist you.

Immigration lawyers can help you with everything from applying for a job, dealing with human relations staff and finding employment opportunities.

An immigration lawyer can assist you in all matters relating to the law of citizenship, such as citizenship, application for citizenship and immigration law.

A lawyer provides legal advice on all aspects of immigration laws, including immigration — supported employment, family-supported immigration and immigration-supported employment.

The attorneys provide legal advice on all aspects of immigration law and the law of the United States of America.

Lawyers: Lawyers provide medical advice, legal assistance and legal assistance in all areas, from citizenship applications, immigration applications and visas, immigration policy and law enforcement issues, to all facets of US citizenship and citizenship law, including family immigration, employment promotion and labor issues.

Jean Danhong Chen Immigration attorneys provide legal advice on all aspects of immigration law and the law of the United States of America. Immigration lawyers interpret and guide the process by which people can secure travel, work and student visas.

Some specialise, for example, in visa applications, travel and work visas, employment and employment promotion issues, immigration policy and law enforcement.



Immigration lawyers do not represent their clients directly in court, but help and advise them on their rights as immigrants. Immigration officers prefer to work with immigration lawyers who can communicate professionally, demonstrate reason, have knowledge and are sincere in their commitment to their clients. Some immigration lawyers are found in small practices specializing in immigration law.

Whether you are interested in obtaining a work permit in the United States or permanent resident status or even a temporary work visa, an experienced immigration lawyer is a true expert in what you need to achieve this.

Jean Danhong Chen A qualified immigration lawyer can guide you through the complicated process with a clear understanding of your rights as an immigrant, your legal status and the goals you are trying to achieve.

Many of the characteristics of top immigration lawyers can only be established in court, where you can explain your circumstances to immigration lawyers who offer you potential strategies for success.
5 Things You’re Missing From Your LinkedIn Profile
By: Allison Shields Johs
Tags: Lawyers, Hugemissedopportunity, Linkedinprofiles

I’ve worked with hundreds of lawyers and reviewed who knows how many lawyers’ LinkedIn Profiles, and I can tell you that most of them are missing these 5 elements:

Is your LinkedIn Profile up to the challenge?

Here are the 5 elements:

1. A header image — otherwise known as a cover photo. The header image appears at the top of your LinkedIn Profile. It is a huge missed opportunity for your personal brand. Your cover photo could include your logo or an image that reinforces your brand. You can also include your contact information in your cover photo — although it appears elsewhere on your Profile, it requires people to make an extra click. Putting it front and center makes it easier for people to contact you outside of LinkedIn. You can use a tool like Canva to create a unique cover image for your LinkedIn profile.

2. Any description of your clients. Remember — your LinkedIn Profile is about you but it isn’t for you — it’s for your target audience, whether that be potential clients, referral sources or other professionals. If I’m looking at your LinkedIn profile, will I know who you help and how? Will I be able to tell what kinds of clients I should refer to you? If I am in your target audience, will I be able to identify you as someone who can solve my problems?

3. Your story. LinkedIn may be structured like a resume, but it shouldn’t read like one. Think of your LinkedIn profile as a vehicle for telling your story and the story of your clients. Don’t just list skills and responsibilities — explain what they mean and their impact in the real world.

4. The jurisdictions where you practice. When you use LinkedIn, you are literally interacting with the world — and that means people outside of the jurisdictions where you practice may be seeing your LinkedIn Profile. Make it clear where you are admitted to practice, and in what courts. It may make it easier for people to refer business to you. Not everyone is going to click over to your website or try to find that information elsewhere. You can include these either in your About section or under Experience under your current position.

5. Any required disclaimers. Check your jurisdiction’s ethical rules — if your jurisdiction requires disclaimers to be placed on advertisements, your LinkedIn Profile likely qualifies. You can add one to your About or Experience sections.

How did you do? Does your LinkedIn Profile contain these 5 elements?

I’m Allison Shields, President of Legal Ease Consulting, and you can find more tips on using LinkedIn in the book, Make LinkedIn Work for You, available on Amazon.com, or you can download our 47 LinkedIn tips for lawyers on my website at LawyerMeltdown.com.
Domain Name Protection As A Trademark
By: Navitha V
Tags: Coporate, Trademark, Lawyers, Law Firm, Domain Name Registration

Within the internet, a domain name is an identification string that describes a sphere of administrative autonomy, authority, or power. Domain names are created by the domain name system’s rules and goods (DNS).

What is domain name?

Within the internet, a domain name is an identification string that describes a sphere of administrative autonomy, authority, or power. Domain names are created by the domain name system’s rules and goods (DNS). A domain name is any name that is registered in the DNS. In general, a domain name denotes an internet protocol resource, such as a personal computer used to access the internet, a server computer hosting a website or the website itself, or some other internet-based service. There are only a few of these domains available. For instance, gov — government departments, edu — educational institutions, org — non-profit organizations, com — commercial enterprises, and so on.

A domain name, such as yahoo.com, is the address of a website that is meant to be readily identifiable and remembered. This user-friendly website addresses aid in the internet connection between computers and people. Domain names have become corporate identifiers and gradually, trademarks for domain names — for example, sony.com — because they are easy to recognize and use…….

Read More
LAW Is Bound To Make An Impact In Your Business | Eliott Dear Esq
By: Elliott Dear Esq
Tags: Lawyer, Law

LAW Is Bound To Make An Impact In Your Business | Eliott Dear Esq Elliott Dear Esq Apr 9·3 min read

A lawyer can handle all descriptions of legal matters from delineating inclinations to patent claims to protecting people against criminal charges. Qualified lawyers have to attend law school and pass a judiciary exam to practice law. Advocate, of course, means one that studies the law. “Law” itself comes from the Patriarchal Norse rootlet information interval, which suggests something placed down or fixed.

The profession generally pays well, and you get to put that cool “esquire” after your name. Eliott Dear Esq chooses from a variety of specialties, including corporate law, tax law, entertainment law, and criminal law.

Artificial Intelligence and the Law Pod UK

This magazine inquires papers that discuss the development of ceremonious or computational illustrations of legitimate knowledge, reasoning, and decision making. AI can use critical truckloads of data and sort through it using various parameters same as the previous judgment of the judge, related case judgments, emotional triggers, etc.

Its package also helps a legal practitioner prognosticate the consequence of any case on hand. Artificial Intelligence at Growling WLG and consultation on all perspectives of AI and Intellectual Property, particularly regarding the growth craftsmanship's, automotive, aviation, financial, and retail sectors.

Control and the realization and enforcement of judgments

The Law covers civil actions associating with divorce, legal separation and annulment of marriage, and matters concerning maternal loyalty for children of both wives when the engaged transactions take place. India has accomplished respective negotiations with various countries regarding reciprocity in the enforcement of judgments and decrees.

Politics, courts, and the UK’s exceptional market

It has been powerful opposition from the Scottish and Welsh courts. The internal market will have important connections for the parties, parliaments, regulators, courts, and corporations in all members of the UK, and businesses have been proposed about its assumptions for devolved policymaking. Sparse critics have claimed that the decision gravels the way for a harmful and inconstant election structured around a populist defense of courts and parliament versus.

Expediting parliamentary inspection arrangements for the UK domestic market

Reflecting how the long-term entanglements for devolution will be assessed.

Conclusion

The rule by which the rights of individuals in a prosecution are concluded by a judge’s application of relevant statutes or legal opinions to the facts of the case that are authentic by the jury. the Eliott Dear law ought been changed as a result of its personification, both through sanctioned interpretation and through alteration of the common law.
I have an X Chromosome, am I worth-less?
By: Andrea Goldman
Tags: Gender Pay Gap, Lawyers, Gender Equality, Equal Pay Day, Equal Pay

I have an X Chromosome, am I worth-less?

In SA, females earn between 25% and 33% less for performing exactly the same job as an XY chromosomal human (aka a male). And whilst platitudes are uttered that “this issue must be addressed”, nothing concrete actually happens. Are we headed for having to publish the salaries and wages of our staff in order to achieve equality? Must that be the next step to obtain equality between the genders? If that is the case, a host of legislation will need to be amended to make allowances for such personal information to be published. And who would verify the veracity of the information?

Are pay-audits the solution? Who would conduct the audit and who would pay for it? Do we want to further legislate an already overburdened and over-regulated labour market?

The more one digs into whether these proposed solutions are real “solutions” one realizes that in potentially solving a problem, new and difficult problems are created, which may undermine the “solution” to begin with. That it is so complex to resolve such a simple issue as fairness and equality is a desperately sad commentary on the way in which females are treated in society and how their contribution to economic concerns is wholly undermined.

The solution is however embarrassingly simple. Employers have a duty to regulate themselves and ensure that employees are paid equally for the work they undertake irrespective of the chromosomes that comprise an employee's anatomy.
Contempt of Court
By: Anubhav Yadav
Tags: Lawyers, Law, Contempt Of Court

In common parlance, contempt means the act of despising; or lack of respect or reverence for something or someone1. It includes anything published ( in case words, spoken or written, or by signs, or by visible representation, or otherwise). The contempt of court comes under contempts of court act, 1971 which further has two parts i.,e civil contempt and criminal contempt. For a layperson to understand the primary difference between civil and criminal contempt; civil contempt is more like direct willful disobedience to any decree, judgement or any direction of the court. Whereas, criminal contempt is in direct disobedience of the court’s decision for, instance, through words spoken or written, or by any visible representation, or otherwise. These days contempt of court is in fashion by way of tweets. “Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers.2” This above is Article 19 of the Universal Declaration of Human Rights, adopted in 1948. Which talks about the protection of opinion and expression for an individual. Then, what is the thin line between contempt of court and freedom of speech and expression? Should contempt of court be made unconstitutional by the apex court? Or everything seems righteous as it is going.
U.S. v. E-6, JAX Naval Station — Negligent Homicide and Manslaughter
By: Mickey Williams
Tags: Military, Law, Lawyers, Attorney, Litigation

September 2020. In 2018, we were retained to represent an E-6 in the United States Navy. Our client was accused of negligent homicide, manslaughter, obstruction of justice, damage to government property, conspiracy, DUI with bodily harm, and an array of Article 92 violations. The Government alleged that our client was accused of killing a Djiboutian National while operating a government vehicle at Camp Lemmonier.

According to the charges, our client had lost control of his vehicle while intoxicated, and this negligent action led to the death of the Djiboutian National who was on his way to work. The NCIS investigation was over 4,000 pages long, and our defense investigator interviewed dozens and dozens of witnesses. Over 30 motions were filed in this case and it was covered by the Navy Times and Military Times.

Our argument was that there was no evidence to suggest that our client caused the accident. In fact, the one reliable eyewitness was going to testify that the deceased was driving his scouter in my client’s lane and struck my client. This would mean that my client was not guilty of negligent homicide or manslaughter. We requested an accident reconstruction expert to help us further understand what happened in the case. Our expert reviewed hundreds of photographs, FARO scans, and the entire investigation file. Our expert also concluded that there was no evidence to suggest that our client caused the accident.

To make matters worse, NCIS did not properly secure the vehicle that my client was driving or the deceased’s motor scooter. The vehicle my client was driving was destroyed and the scooter was left outside and was damaged from exposure. Our accident investigator was denied the opportunity to inspect the two most important pieces of evidence. We filed a motion to dismiss charges based on this egregious error committed by NCIS, but ultimately the military judge ruled that the FARO scans served as an adequate substitute for the actual vehicles. A decision that we disagreed with but understood.

Finally, after three years of litigation, dozens of motions, witness interviews, and hard fights with government counsel, the homicide, manslaughter, and obstruction of justice charges were dropped. This was a tremendous team effort and is the result of a lot of grit, hard work, and determination. This is one I will remember for the remainder of my career.

____________________________________

RESULT: Negligent Homicide DROPPED. Manslaughter DROPPED. DUI with Bodily Harm DROPPED. Obstruction of Justice DROPPED.
U.S. v. W01, Fort Rucker, Alabama — Sexual Assault
By: Mickey Williams
Tags: Military, Law, Lawyers, Attorney, Sexual Assault

September 2020. Our client was accused of domestic violence, sexual assault, and indecent recording. When we first reviewed the evidence, we realized almost immediately that the Accuser was originally suspected of sexual assault for having sexual relations with our client’s wife from the same night in question. The Accuser was also a Warrant Officer and her father was a major in the U.S. Army.

When she found out that she was suspected of sexual assault, she immediately called her father for advice from the military police office. After speaking with her father, she changed her story and stated that our client sexually assaulted her. The Army Criminal Investigation Command obtained video evidence from the night in question. The video evidence showed the Accuser begging my client to have sex with her. We initially pled with the prosecutor’s office to drop the case. We argued that the video evidence clearly showed that the Accuser consented to both sex and the recording. Despite the video evidence, the case was not dropped. There was too much pressure on my client’s command to move forward with the case because it was a sexual assault case.

Over the next 14 months, we fought hard in court and out of court to convince the Government to drop the allegations. We argued that the Accuser had a clear motive to fabricate: she committed adultery and was initially under investigation for sexual assault. She falsely accused our client to take the pressure off her and save her own career. Trial was set for October, and we were all very confident that we were going to finally vindicate our client. A few days before trial, the Government informed us that the Accuser no longer wished to testify against our client. After 16 months, two motions hearings, and dozens of witness interviews the case was finally dropped.

____________________________________

RESULT: NO conviction. NO Sex Offender Registration. NO Dishonorable Discharge. ALL charges dropped.
U.S. v. E-6, JAX Naval Station — Negligent Homicide and Manslaughter
By: Robert Capovilla, Military Defense Attorney
Tags: Military, Law, Lawyers, Attorney, Navy

September 2020. In 2018, we were retained to represent an E-6 in the United States Navy. Our client was accused of negligent homicide, manslaughter, obstruction of justice, damage to government property, conspiracy, DUI with bodily harm, and an array of Article 92 violations. The Government alleged that our client was accused of killing a Djiboutian National while operating a government vehicle at Camp Lemmonier.

According to the charges, our client had lost control of his vehicle while intoxicated, and this negligent action led to the death of the Djiboutian National who was on his way to work. The NCIS investigation was over 4,000 pages long, and our defense investigator interviewed dozens and dozens of witnesses. Over 30 motions were filed in this case and it was covered by the Navy Times and Military Times.

Our argument was that there was no evidence to suggest that our client caused the accident. In fact, the one reliable eyewitness was going to testify that the deceased was driving his scouter in my client’s lane and struck my client. This would mean that my client was not guilty of negligent homicide or manslaughter. We requested an accident reconstruction expert to help us further understand what happened in the case. Our expert reviewed hundreds of photographs, FARO scans, and the entire investigation file. Our expert also concluded that there was no evidence to suggest that our client caused the accident.

To make matters worse, NCIS did not properly secure the vehicle that my client was driving or the deceased’s motor scooter. The vehicle my client was driving was destroyed and the scooter was left outside and was damaged from exposure. Our accident investigator was denied the opportunity to inspect the two most important pieces of evidence. We filed a motion to dismiss charges based on this egregious error committed by NCIS, but ultimately the military judge ruled that the FARO scans served as an adequate substitute for the actual vehicles. A decision that we disagreed with but understood.

Finally, after three years of litigation, dozens of motions, witness interviews, and hard fights with government counsel, the homicide, manslaughter, and obstruction of justice charges were dropped. This was a tremendous team effort and is the result of a lot of grit, hard work, and determination. This is one I will remember for the remainder of my career.

____________________________________

RESULT: Negligent Homicide DROPPED. Manslaughter DROPPED. DUI with Bodily Harm DROPPED. Obstruction of Justice DROPPED.