Cyber

@epagov

Broken link hijacking by tharun poc

Joined December 2020

1 Following

0 Followers

1 Posts

epagov retweeted

N$🌟

@__nav1n_

over 1 year ago

If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found. Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips

$__nav1n_'s tweet photo. If your target uses Rails, look for Action View CVE-2019-5418 - File Content Disclosure vuln. Although this is an old bug, it can still be found. Intercept the request in Burp and replace the Accept header with: `Accept: ../../../../../../../../../../etc/passwd{{` #bugbountytips$

244

949

75K

Cyber

@epagov

Last Seen Users on Sotwe

Trends for you

Most Popular Users