Nikhil

team member : @NULLKrypt3rs

[Zed Attack Proxy @zaproxy]

Just released v21.1.0 of the Wappalyzer technology detection add-on. Update includes the latest patterns/icons from upstream and support for DOM patterns courtesy of @bettercalln1ck
Get it via zap marketplace.
#owasp #zaproxy #cybersec #appsec #redteam #purpleteam

[Cobalt @cobalt_io]

Explore Scope Based Recon Methodology in a new blog post by Core pentester, @harshbothra_. Harsh will look at how to perform recon and examine what methods are best to use based on scope. Check it out: https://t.co/4DbxjwqFUm

[payloadartist @payloadartist]

If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it.

https://t.co/r7JhrBuHLr

#cybersecurity #bugbountytips #infosec #100DaysOfCode

[Harsh Bothra @harshbothra_]

#learn365 Day-30: Common Business Logic Issues (Wrap)

(Cont'd...)
9. Parameter Tampering
- Tamper Payment or Critical Fields to manipulate their values
- Add multiple fields or unexpected fields by abusing HTTP Parameter Pollution & Mass Assignment
#bugbountytips #appsec
(1/n)

[Ayoub FATHI 阿尤布 @_ayoubfathi_]

I just published leaky-paths on Github, it's a collection of special paths linked to major web CVEs, known juicy APIs, known misconfigurations.. etc.

They could be used for web-content discovery as a way to find quick-wins.

Please feel free to contribute
https://t.co/6vhUjXMOfV

[Somdev Sangwan @s0md3v]

It generates an email address and then prints any OTPs or confirmation links sent to it.

Just enter 'ote' in your terminal and get your OTP.

Github: https://t.co/SmYvpfXI8I

[NULLKrypt3rs @NULLKrypt3rs]

b00t2root CTF ended! Hearty congratulations to team @ByteForc3, @Zh3r00 and @0x90r00t for bagging the top three positions! We would also like to thank our esteemed sponsors @offsectraining @vector35 for sponsoring the prizes. Adieu guys! See you all next year :)

[NULLKrypt3rs @NULLKrypt3rs]

15+ hrs into the CTF and we are seeing some intense competition here :P
If you havent registered yet shoot here: https://t.co/91rNoi2tIt
#boot2r00tctf2020

[NULLKrypt3rs @NULLKrypt3rs]

We are very happy to have @vector35 as our esteemed sponsor!!
Registers yourselves at https://t.co/kjExYUF8Oh Hope you are as excited as we are :)

[NULLKrypt3rs @NULLKrypt3rs]

We are very happy to have @offsectraining as our esteemed sponsor!!
Registers yourselves at https://t.co/91rNoi2tIt Hope you are as excited as we are :)

[𝕎𝔼𝕊𝕊 † @K0to4m4tsukami]

SSRF localhost access bypasses

0
127.00.1
127.0.01
0.00.0
0.0.00
127.1.0.1
127.10.1
127.1.01
0177.1
0177.0001.0001
0x0.0x0.0x0.0x0
0000.0000.0000.0000
0x7f.0x0.0x0.0x1
0177.0000.0000.0001
0177.0001.0000..0001
0x7f.0x1.0x0.0x1
0x7f.0x1.0x1

[Nikhil @bettercalln1ck]

@tryhackme My favorite thing about TryHackMe is the weekly release of new boxes and they give enough time to solve the boxes. After few days hints are released. It has helped me greatly to increase my skills.

[dw1 @dwisiswant0]

go-stare: A fast & light web screenshot without headless browser but Chrome DevTools Protocol!
https://t.co/UXUTWu28OK

#infosec #bugbounty #golang #chromedp

[Luke Stephens (hakluke) @hakluke]

Here's a solid bug bounty tip. If you are going to focus on one vulnerability class, make it logic bugs. Most of the P1 bugs I see pop up are logic errors that developers have made. They often have high impact and they can't be discovered through automation.

To find them ...

[Mårten Mickos @martenmickos]

14 year old ethical hacker rewarded with a $25,000 bounty https://t.co/Ct1Zt7QlLQ

[Nikhil @bettercalln1ck]

Team @NULLKrypt3rs rank in csaw'20 qual india region.

[Patrik Grobshäuser @ITSecurityguard]

Enumeration of 789 root domains (passive + active discovery) using @owaspamass - this tool is a beast!

took 10 minutes :)

[Patrik Grobshäuser @ITSecurityguard]

Bug Bounty these days: recon |xargs| grep -ax( “$sub.example.com) &> /dev/null > outtmp1.txt | httprobe -c 10000000000000 > gau | screenshots -/outdir1/as> xssscnner300 < "vulntest.txt" | nuclei -T $TARGET | masscan --rate 9999999999 | sort -uqa >/tmp/ > all_final_final.html

[dw1 @dwisiswant0]

Found CVE-2019-8449? Leverage your enumeration! 🤓

> ffuf -w SecLists/Usernames/xato-net-10-million-usernames.txt -u "https://domain.tld/rest/api/latest/groupuserpicker?query=FUZZ&maxResults=1" -mr "Showing 1"

#bugbountytips

[Harsh Bothra @harshbothra_]

Burp Extensions that I use: (1/n)

1. Autorize - To Test BACs
2. Burp Bounty - Profile-based Scanner
3. Active Scan++ - Add more power to Burp's Active Scanner
4. AuthMatrix - Authorization/PrivEsc Checks
5. Broken Link Hijacking - For BLH

#bugbountytips #bugbounty