Chax

Bug bounty learner

[Chax @Ch4xcker]

@ysjagan @ncbn actually ur hardcore fan sir after ur initiation of pension to old age peoples home, but this guy who is insulted our gods literally God Rama you are supporting him in name of criticizing govt ? there are many things to criticize govt but not this in name of Ram - u lost a vote

[Chax @Ch4xcker]

@hardik__goyal @AdvAshutoshBJP okay lets stop pm trips and lets stop abhijeet checking in hotels and let him sleep on streets

[Chax @Ch4xcker]

@RajratnaWrites sorry that title goes to nehru, no one can match him

[Chax @Ch4xcker]

@AdamGoat67 @rtmnmk @AzatAlsalim leave it dude if u react they will use this to provoke more

[Chax @Ch4xcker]

@Timesofiraan @grok is this true bhavani

[Germán Fernández @1ZRR4H]

👁️ 👁️ #opendir

######################
24_7_auto_pilot.sh
access_backdoor.txt
access_monitor.sh
access_pgadmin_dashboard.sh
access_pharma.sh
admin_portal_attack.sh
all_passwords.txt
all_ports.txt
all_routes.json
all_users.txt
alternative_targets.txt
analyze_current.py
analyze_exposed_files.sh
analyze_form.sh
analyze_infrastructure_patterns.sh
analyze_js.sh
analyze_login.sh
analyze_myanmar_server.sh
analyze_new_services.sh
analyze_ping_vuln.sh
analyze_planka_js.sh
analyze_real_bank.sh
analyze_servers.py
antibiotic_manufacturing.txt
archive_old_hacks/
assess_vietnamese_site.sh
attack_all_polish_clinics.sh
attack_confluence.sh
attack_dashboard.sh
attack_dns.sh
attack_dovecot.sh
attack_email_infra.sh
attack_internal_services.sh
attack_linux_servers.sh
attack_pgadmin.sh
attack_planka.sh
attack_plesk.sh
attack_port80.sh
attack_portainer.sh
attack_progress.log
attack_shodan_results.sh
attack_sonarqube.sh
attack_ssh_ftp.sh
attack_tareas_smartkea.sh
attack_thai_rdp.sh
attack_tomcat.sh
attack_traefik.sh
attack_webserver.sh
attack_windows_servers.sh
auto_attack.sh
auto_hacker/
auto_monitor_attack.sh
automated_attack_system.sh
backdoor_deploy.sh
bank_ports.txt
bank_scan.txt
become_insider.sh
brute_results.txt
business_patterns.sh
bypass_firewall.sh
check_bluekeep.sh
check_email_auth.sh
check_eternalblue.sh
check_host_injection.sh
check_other_ports.sh
check_other_services.sh
check_outdated_software.sh
check_petitpotam.sh
check_previous_target.sh
check_printnightmare.sh
check_smb_relay.sh
check_smbghost.sh
check_web.sh
check_web_vulns.sh
check_zerologon.sh
confluence_cookies.txt
contingency_plan.sh
continuous_attack.sh
continuous_attack_daemon.sh
cookies.txt
cpanel_exploit.sh
cpanel_shell.sh
cracked_emails.txt
create_german_password_list.sh
create_phishing.sh
credential_harvest.ps1
credential_stuffing.sh
curl_searches.sh
cve_medical_exploits.sh
data_exfil_prep.sh
deep_docker_analysis.sh
deep_recon.sh
deploy_immediate_shell.sh
detailed_backends.py
dicom_attack.sh
direct_exec.sh
direct_wp_config.sh
discover_pgadmin.sh
django_error.txt
docker_direct_attack.sh
docker_exploit.rc
docker_swarm_pwn.sh
docker_via_traefik.sh
double_attack.sh
downloaded_files/
dynamic_passwords.txt
email_1_raw.txt
email_credentials.txt
email_scan.txt
emergency_colombia_attack.sh
emergency_polish_attack.sh
enhanced_surgical_attack.sh
escalate_access.sh
eternalblue_check.txt
eternalblue_scan.txt
evil_dll.c
execute_mission.sh
exploit_confluence.sh
exploit_fortinet.sh
exploit_jira.sh
exploit_live_portainer.sh
exploit_pgadmin_guest.sh
exploit_planka_api.sh
exploit_portainer.sh
exploit_real_vulns.sh
exploit_smartkea.sh
exploit_spring4shell.sh
exploit_traefik_docker.sh
expose_internal_services.sh
exposed__.env
exposed__.git_config
exposed__.git_HEAD
exposed__.kube_config
exposed__app_.env
exposed__appsettings.json
exposed__backup.tar
exposed__backup.tar.gz
exposed__backup.zip
exposed__config.json
exposed__config_.env
exposed__configuration.json
exposed__data_portainer_portainer.db
exposed__database.sql
exposed__docker_portainer.db
exposed__dump.sql
exposed__env
exposed__etc_docker_daemon.json
exposed__etc_kubernetes_admin.conf
exposed__etc_portainer_portainer.db
exposed__home_*_.ssh_id_rsa
exposed__portainer_portainer.db
exposed__robots.txt
exposed__root_.docker_config.json
exposed__root_.ssh_id_rsa
exposed__root_.ssh_id_rsa.pub
exposed__server-status
exposed__settings.json
exposed__src_.env
exposed__var_lib_docker_config.json
exposed__var_lib_portainer_portainer.db
exposed__wp-admin
external_attack_options.sh
extract_backends.py
extract_creds.sh
extract_hashes.sh
extract_hospital_data.sh
extract_medical_data.sh
extract_server_info.sh
FALLBACK_SURVIVAL_PROOF.md
final_access_plan.sh
final_assault.sh
final_attack_plan.sh
final_execution_plan.sh
final_persistence.sh
final_postgres_attack.sh
final_survival_negotiation.md
final_survival_proof.md
final_traefik_attack.sh
final_wish_access.sh
find_all_pgadmins.sh
find_api_direct.sh
find_api_server.sh
find_auth_endpoint.sh
find_backups.sh
find_docker_api.sh
find_exposed_files.sh
find_hidden_servers.sh
find_ips.py
find_main_server.sh
find_medical_vulns.sh
find_planka_credentials.sh
find_public_access.sh
find_real_banking.sh
find_real_hospitals.sh
find_real_infrastructure.sh
find_real_vulnerable.sh
find_traefik_secrets.sh
follow_redirects.sh
full_config.json
full_recon.sh
full_scan.gnmap
full_scan.nmap
full_scan.txt
full_scan.xml
full_service_scan.txt
full_web_scan.sh
german_hospital_passwords.txt
get_hashes.sh
get_main_server.sh
get_medical_info.sh
get_shell_now.sh
hospital_access.txt
hospital_access_proof.md
hospital_access_proof.sh
hospital_attack/
hospital_credentials.txt
hospital_creds.txt
hospital_ips.txt
hospital_passwords.txt
hospital_proof_1768436654.txt
hospital_proof_for_villagers.txt
hospital_users.txt
identify_medical_data.sh
immediate_action.sh
internal_network_map.md
investigate_dashboard.sh
investigate_redirects.sh
jenkins_attack.groovy
jenkins_attack.sh
known_medical_exploits.sh
leaked_medical_creds.txt
live_hosts.txt
main_scan.txt
malicious.dll
manual_exploit.sh
manual_research.sh
manual_upload_instructions.sh
mass_portainer_attack.sh
mass_rdp_brute.sh
medical_cves.txt
medical_database_hunter.sh
medical_device_defaults.txt
medical_device_search.sh
medical_passwords_detailed.txt
medical_shares.txt
medusa_results.txt
method_discovery.sh
monitor_attack.sh
monitor_secondary_targets.sh
msuite_exploit.sh
mwdbank_full_scan.txt
mwdbank_main_attack.sh
mwdbank_recon.sh
network_recon.sh
NUCLEAR_EMAIL_SUCCESS.txt
nuclear_exploit.sh
nuclear_exploitation.sh
nuclear_passwords.txt
nuclear_scan.sh
nuclear_scan.txt
nuclear_spray.sh
NUCLEAR_TRAEFIK_SUCCESS.txt
nuclei-templates/
old_hacking_files/
oracle_attack.sh
other_vulns.sh
password_spray.sh
passwords_rdp.txt
paused.conf
persistence_backdoor.sh
persistent_mass_attack.sh
persistent_portainer_monitor.sh
pgadmin_attack.sh
pgadmin_deep_analysis.sh
planka_app.js
planka_cookies.txt
planka_main.js
plc_passwords.txt
plc_users.txt
plesk_scan.txt
poland_attack.sh
poland_fast_attack.sh
poland_final_attack.sh
poland_full_scan.txt
poland_intel.sh
poland_retry.sh
polish_clinic_attack.sh
polish_portainer_targets.txt
pop3_credentials.txt
portainer.db
portainer_advanced.sh
portainer_attack.sh
portainer_backup.tar
portainer_bruteforce_final.sh
portainer_bypass.sh
portainer_final_attack.sh
portainer_scan.txt
portainer_targets.txt
postgres_advanced.sh
postgres_exploit.py
postgresql_nuclear.sh
prepare_extraction_tools.sh
priority_targets.txt
pro_exploit.sh
protonvpn-stable-release_1.0.3-2_all.deb
public_medical_data.sh
quick_shell_tests.sh
quick_shodan_search.sh
quick_vietnam_attack.sh
quick_web_scan.sh
rdp_bruteforce.sh
rdp_creds.txt
rdp_passwords.txt
rdp_results.txt
rdp_users.txt
read_emails.sh
real_analysis.sh
real_attack.sh
real_credential_attack.sh
real_exploits.sh
real_hunt_logs/
real_persistent_hunter.sh
real_shodan_queries.sh
real_survival_strategy.md
real_targets.txt
real_time_monitor.sh
reality_assessment.md
reanalyze_infrastructure.sh
recon_other_services.sh
recon_sagawa.sh
research_planka_api.sh
research_polish_medical.sh
responder_config.ini
robots.txt
s7_attack.sh
sagawa-vtm[.]com.vn-subs.txt
scada_attack.sh
scada_ports.txt
scan_internal_network.sh
scan_sagawa-vtm[.]com[.]vn.txt
scan_specific_medical.sh
SecLists/
secure_and_exfiltrate.sh
service_exploits.sh
setup_responder.sh
shell.aspx
shell.php
shodan_jenkins_results.txt
shodan_manual_search.md
shodan_portainer_results.txt
shodan_style_search.sh
smartkea_final_data_20260115_191803.tar.gz
smartkea_passwords.txt
smb_exploit.sh
smb_passwords.txt
snap/
sonarqube_exploits.sh
spider_attack.sh
ssh_brute.sh
ssh_nuclear_passwords.txt
ssh_passwords.txt
ssh_polish_attack.sh
ssh_polish_passwords.txt
ssh_polish_results.txt
ssh_results.txt
ssh_users.txt
subs_sagawa-vtm[.]com[.]vn.txt
SUCCESS_email.txt
surgical_poland_attack.sh
surgical_strike.sh
survival_contingency_plan.md
survival_negotiation.sh
survival_proof.md
takeover_now.sh
target_ips.txt
TARGET_LIST.md
test_banking_portal.sh
test_german_clinic.sh
test_jira_cve.sh
test_poland_ip.sh
test_rdp.sh
test_shell_access.sh
test_shodan_targets.sh
thai_business_passwords.txt
thai_hospital_attack.sh
thai_optimized_passwords.txt
thai_specific_passwords.txt
thai_users.txt
tomcat_final.sh
traefik_add_route.sh
traefik_api_exploit.sh
traefik_complete.json
traefik_config_attack.sh
traefik_current.json
traefik_full_docker.json
traefik_hijack.sh
traefik_proxy_attack.sh
traefik_real_attack.sh
traefik_routing_hack.sh
traefik_vuln_check.sh
trigger_auth.sh
ultimate_attack.sh
urgent_portainer_attack.sh
users.txt
users_rdp.txt
verify_email_auth.sh
verify_exploit.sh
verify_targets.sh
vietnam_subs.txt
village_medical_package.txt
village_offer.txt
vue_login_attack.sh
vuln_scan.txt
vulnerable_targets.txt
web_admin_urls.txt
web_creds.txt
web_defaults.txt
web_results.txt
win_backdoor.ps1
winrm_test.rb
wordpress_attack.sh
wordpress_exploit_auto.sh
wp_admin_exploit.sh
zimbra_attack.sh
zimbra_final_attack.sh

[shubs @infosec_au]

@assetnote @SLCyberSec My work on the novel SSRF technique that landed a critical payout at a Live Hacking Event: https://t.co/CTSTEtKiD1

[A.Mugh33ra🇵🇰❤️🇵🇸 @mugh33ra]

403 bypassed ✅
Payload --> ;%09..

#BugBounty #hackerone #idor #sqlinjection #bugbountytip

[Chax @Ch4xcker]

@AshwiniVaishnaw wow what a nice application irctc, totally worth the charges we are paying, sorry you are looting, we the looted are so happy, increasing charges but can't handle traffic on app, I missed my festival beacause of this, I will pay 100 rupees as tip for you

[Chax @Ch4xcker]

@RahulGandhi #FirstChristianTerrrorist "Francis Xavier" "so called saint"

[Milad Safdari (Ξulex) @eulex0x]

I just work 8 hours no stop on bypassing Post XSS and I made it.

CSRF bypass was not easy but better than XSS.

Just watch the Title. 🙃

You can find payload and tip in follow comment.
#BugBounty #bugbountytip

[NullSecurityX @NullSecurityX]

XSS Bypass Method:

Payload:
">>>>>><marquee>RXSS</marquee></head><abc></script><script>alert(document.cookie)</script><meta

#BugBounty #XSS

[Krishna Agrawal @Krishnasagrawal]

SQL Joins Cheatsheet 📘📚

Save it for later ✅️

#sql

[Rahul Sirvi @rahul0x01]

XSS payload bypassing Imperva WAF:

Find the payload in the image attached.
X isn't allowing me post the payload :(

#BugBounty #bugbountytips

[DarkShadow @darkshadow2bd]

Nextjs SSRF in Middleware header!
✅POC:

GET / HTTP/1.1
Host: target. com
Location: http://oast. me
X-Middleware-Rewrite: http://oast. me

For more BugBounty tips join my telegram channel 👉🏼 https://t.co/J6uPf8H57o

[Rahul Sirvi @rahul0x01]

Many bug hunters ignore blank 401 Unauthorized pages.

If you ever land on a 401 Unauthorized page (like in the image), always check the response, you might find something big.

#BugBounty #bugbountytips #appsec #latepost

[Corben Leo @hacker_]

I've made $500k+ from SSRF vulnerabilities.

Here are my tricks:

[João Gomes (zig_shark) @JoaoGomes12243]

Improper Authorization🥰

[N$🌟 @__nav1n_]

If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found.

Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

#Tips :-

1- As usual i Fuzzed all live subs using my  custom short information disclosure wordlist :-

cat live-subs.txt | python3 https://t.co/4ewrAVXHk8 -i 200 -e php,bak,old,zip,tar.gz,txt,log,conf,json,asp,j p,aspx,yml,yaml,rar --stdin