Nathan

15

[Muhammad Fauzan 🇵🇰 @Fozisimi143]

Great article about Arbitrary File upload through changing Get method to PUT method.

https://t.co/Pd2fI4FyvV

[Pawan Rawat 🇮🇳 @PawanRa20262178]

Low hanging fruits $$..❤️

Bug:- Jira security issue

#bugbounty

[Ranjit Adhikari 🇳🇵 @RanjitAdhikar34]

Bug: Broken access control

1. Admin add User-A
2. User-A capture request on adding files
3. Admin remove User-A
4. User-A can edit the file details from captured request & add new files forever😀

#bugbounty #bugbountytips #hackerone

[Rodolfo Assis @RodoAssis]

While I write the next post, take a look at this one if you didn't do it already. 😉

https://t.co/BpO1zPB9DW

[Fardeen A. 🇮🇳 🇵🇸 @insecrez]

Burpsuite Extensions one should have :-
1) HTTP Request Smuggler
2) HUNT
3) InQL for Graphql Vulnerabilities
4) J2EE Scan
5) Json/JS Beautifier
6) JSON web token Attacker
7) xssValidator
8) Ferida
9) Hackvertor
#bugbounty #bug #dev #cybersecurity #opensource #infosec

[Youssef (s3c) @s3c_krd]

How i hacked world wide Tiktok users
#BugBounty #infosec #CyberSecurity #hacking #TikTok
https://t.co/2fNJRQcpID

[Nicolas Krassas @Dinosn]

Pentesting Active Directory https://t.co/fuSnfQD4qF

[CyCatz @CyCatz_Official]

#bugbountytips #bugbounty Facebook Account takeover Trick to #Bypass #Facebook email disclosure

1.Interesting endpoint

2.Bruteforces the cli

3.OTP verification endpoint and sets a new password for victim’s account.

More..https://t.co/gkxlfDP64X

[Nathan @0x010_]

Amazing! I compromised a few Mail Servers a while ago with the help of Shodan! It's a powerful tool.

[zapstiko @zapstiko2]

How I hacked BBC mail servers by Momen Ali https://t.co/xUwEYKWieQ

[Renganathan @IamRenganathan]

13 ways to bypass an OTP
Credits: @harshbothra_

#otpbypass #bugbounty #bugbountytips #infosec

https://t.co/7rxSfIVoHA

[Nathan @0x010_]

Basic but nice!

[Nathan @0x010_]

Sample?

[CyCatz @CyCatz_Official]

#bugbountytips #bugbounty IDOR + DOS Trick to #Bypass Application’s Logic to #DOS Attack

1. What do you understand by DOS attack
2. #IDOR
3. IDOR -> DOS
4. What does this script do
5. Impact

More..https://t.co/Qbrbpasbrg

[Isira Adithya @isira_adithya]

If the WAF Blocks your every xss payload, Then use
document.location++
to show the impact.
Upon JS execution, you/victim will be redirected to http(s)://<domain>.com/NaN

This trick will save lot of time, after reporting take your time to escalate the impact.
Good Luck 👍

[Arth Bajpai 🇮🇳 @arth_bajpai]

Intresting 2fa bypass
Here I was able to bypass the 2fa by changing the request method

After Loging in, It asked me to enter the 2fa , I took the resend request on burp and changed the request method to DELETE from POST and 2fa setup was deleted

#bugbountytips #bugbounty

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

File Upload Tricks

-Use double extensions: .jpg.php
-Use reverse double extension: .php.jpg
-Mix uppercase and lowercase: .pHp, .pHP5, .PhAr
-Null byte: .php%00.png, .php\x00.png
-Multiple dots: file.php......
-Whitespace characters: file.php%20

#BugBounty #bugbountytips

[🇮🇳Dron Patel🇮🇳 @dron_patelzz]

2FA Bypass Techniques

1.)Response Manipulation:-In response if "success": false, change it to "success": true

2.)Status Code Manipulation:-If status code is 4xx. try to change it to 200 OK and see if it bypass restrictions.

3.)2FA Code Reusability:-Same code can be reused.

[Ryan M. Montgomery @0dayCTF]

If you've found an OS command Injection with WAF enabled, special characters like (/"'&|()-;:.,`) and whitespaces blocked. Try this method to bypass.
-
E.g.: reading /etc/passwd file:
cat$IFS$9${PWD%%[a-z]*}e*c${PWD%%[a-z]*}p?ss??
-
Credit: Aysar Harb
-
#cybersecurity #pentesting