Account Takeover

Account Takeover by Shamim_12

[Account Takeover @wnbachicagosky]

https://t.co/LJc2iqdHnP

[Raze @figmaafrica]

https://t.co/qgPJSfxjNU #bugbounty #bugbountytips

[Raze @figmaafrica]

https://t.co/qgPJSfxjNU #bugbounty #bugbountytips

[Raze @figmaafrica]

🎯 Bug Bounty Videos a Thread 🧵

[Raze @figmaafrica]

#bugbountytips #bugbountytip

[Raze @figmaafrica]

https://t.co/AuOhgbabsC by @medusa_0xf

[Raze @figmaafrica]

Inspired by the article https://t.co/a1eKsKQBC2
I have also taken this challenge for 200hours
But my Program is not a wide-scope program; I have a solo subdomain in scope, like xyz. xyz .com (no wide scope, only Business logic Vulns)
Will track the Time #BugBounty

[Raze @figmaafrica]

https://t.co/5mcY6BqZB3
#bugbounty #bugbountytips

[Raze @figmaafrica]

You have 24 hours
to turn $10 into $100 using only the internet

What’s your plan?

[Raze @figmaafrica]

(10/10) to get your IPs for shordan dork
{sudo shodan download --limit 1000 myresults.json.gz 'DORK'}

to print the & filter the results to live
sudo shodan parse --fields ip_str,port --separator " " myresults.json.gz | awk '{print$1":"$2}' | httpx -o live-IPs.txt
#bugbountytip

[Raze @figmaafrica]

(9/10 ) xss payloads :
%26%2302java%26%23115cript:alert(document.domain)

IIS
https://t.co/grLZ12EDYU

https://t.co/NjDw2kcgFM
https://t.co/76oHXAZNdt
https://t.co/LOZfSybG5w
https://t.co/gNjh77EwC0
https://t.co/Cp1HKGbskP

#bugbountytip

[Raze @figmaafrica]

https://t.co/8RZ1XMCtS3

Stealing some Bug Bounty tips from @GodfatherOrwa Boss

[Raze @figmaafrica]

Master JavaScript Recon for Bug Bounty Hunting: Step-by-Step Guide | PART 1

https://t.co/9waqcz6P1W

#bugbounty #bugbountytips #bugbountytip

[Account Takeover @wnbachicagosky]

Trying something new
https://t.co/EMgmsK17Y4

Any help would be appreciated 👍
Hoping for positive response

[Raze @figmaafrica]

This is the worst bug bounty program ever I have ever seen, ( https://t.co/nukjUojtv7 )
if anyone planning to hunt on this, please dont
@AppyPieInc @connect_appypie @AppypieClub @Tester_appypie

[Dhruv Rathee @dhruv_rathee]

Never underestimate the power of a common man ✊