#bugbountytip — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bugbountytip, aggregated by home.social.
-
Are all the bugs really gone? How should you approach an application if you're done with recon? Here are my top 5 tips for approaching the main program and finding bugs #bugbountytip #BugBounty 1/7
-
Time Based SQL injection Payloads
-
Story of Clickjacking on Microsoft Leads To Privilege Escalation & Account Takeover Of Admin
#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
-
Exploring WordPress Juicy Endpoints: A Guide for Bug Bounty Hunters
#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
-
Wordlists Real-world infosec wordlists, updated regularly
https://github.com/trickest/wordlists
#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
-
How to Detect and Mitigate SSRF Vulnerabilities in the Early Coding Cycle: A Comprehensive Guide
#BugBounty #webdeveloper #xss #bugbountytip #CyberSec #cybersecuritytips #Pentesting #hackers #CyberSecurityAwareness #redteam #infosecurity #infosec #bounty
-
Admin Panel Bypass without the credentials
https://medium.com/@sayim0x3105/admin-panel-bypass-without-the-credentials-e867eee7c81b
#bug #bugs #bugbounty #bugbountytip #bugbountytips #hacking #hacker #ethicalhacking #ethicalhacker #ethicalhackers #cybersecurity
-
#BugBountyTip: get good at messing around with AI/LLMs because this stuff is going to be everywhere. 💰
-
New video 🚨
This week I show you my basic hacking setup and show you the basics of how to use it to find bugs 🐛, so if you’ve not set up Burp and Firefox this’ll be the video you want to watch :)
#bugbountytip #BugBounty
youtu.be/wNqaLalaNE0 -
I've published a new recon tool that helps to find assets/domains based on the Google Analytics ID.
udon: https://github.com/dhn/udon
This technique is not new and was already mentioned by @MrTuxracer and @HusseiN98D back in 2019/2020. However, I didn't find any tool that automate this task for me.
-
Tips&Tricks 🕵️
Time for a #BugBountyTip!
Make your own wordlist adapted to the target language using the CLI tool dict & dictd 🧾
-
Interesting redirection bypass in apple
👉 Redirection based on path param
👉 Failed payload:
?path=evil.com becomes somesubdomain.apple.com/evil.com👉 Working payload:
?path=.evil.com becomes somesubdomain.apple.com.evil.com👉 So attacker can redirect to his subdomain
The full article can be found here:
Bypass Apple’s redirection process with the dot (“.”) character link.medium.com/naoidNWS1vb
-
OTP Bypassing and Vulnerabilities from E-Mail fields
https://link.medium.com/g1SitTYR1vb#bugbountytips #bugbountytip #bugbounty #infosec #redteam #Pentesting #AppSec
-
✨ ffuf(Fuzz Faster U Fool)
▶️Fest web fuzzer written in Go that allows typical directory discovery, virtual host discovery (without DNS records) and GET and POST parameter fuzzing
GitHub link:
https://github.com/ffuf/ffuf▶️ Resources
👉 Comprehensive Guide on ffuf
https://www.hackingarticles.in/comprehensive-guide-on-ffuf/👉 How to Fuzz Web Applications using FFuf – Web Security Tutorial
https://www.freecodecamp.org/news/web-security-fuzz-web-applications-using-ffuf/
👉Top 25 Example Usage of ffuf Web Fuzzer
https://allabouttesting.org/top-25-example-usage-of-ffuf-web-fuzzer/👉 HOW TO FIND ZERO-DAY VULNERABILITIES WITH ffuf
https://www.securitynewspaper.com/2022/06/11/how-to-find-zero-day-vulnerabilities-with-fuzz-faster-u-fool-ffuf-detailed-free-fuzzing-tool-tutorial/#infosec #ffuf #pentesting #bugbounty #bugbountytip #redteamtip #zeroday #kalilinux
-
Unprotected API endpoint at HAwebsso.nl leads to data leak of +15k medical doctor usernames & password hashes
https://link.medium.com/dEApmWGzPvb -
Tips&Exploit 🕵️
Time for a #BugBountyTip!
Did you know that Metasploit offers a JavaScript keylogger module?💀
Use it as a proof of concept (POC) & improve your XSS exploitation!💻
-
HackPack #11 goes brrrrr🚗💨
Lots of great resources this month to keep you up to date on the latest bug bounty news🪩, #BugBountyTip & hacking tools⚔️
Check it out!👇
https://twitter.com/i/events/1587745151761481728 -
Tips&Tricks🕵️
Do you love PHP? We love it too! 🧐
A method of detecting PHP backend filters that are likely to be used!👇
-
Before reporting #SSRF, try turning it into an RCE
#Self-XSS? try making an #exploit chain with #clickjacking