Gokul SK

.git/config

[Gokul SK @GokTest]

Have a look at my FIRST bug bounty write-up regarding the RCE i got recently. Do share if you found it helpful.

https://t.co/YBSL6iZH8E

#BugBounty #bugbountytips #hackerone

[Gokul SK @GokTest]

@developer_ali15 Strange. The exposure itself is a big thing. Some triagers are really harsh.

[Gokul SK @GokTest]

Sometimes finding private keys are as simple as example(.)com/private.key ..!
.
.
#bugbounty #hackerone #bugbountytips #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

Found huge internal infrastructural data leak through puppetdb dashboard.

Lookout for exposed puppetdb dashboards on mainstream ports and fuzz them properly.
.
.
#bugbounty #hackerone #bugbountytips #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

Found a misconfigured backend that exposes the entire application internals. Whole internal credentials exposed.

Tips: Add these files to your wordlists /defines.inc.php
/session_start.inc.php
.
.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #TogetherWeHitHarder

[Gokul SK @GokTest]

Lazy me and lazy bugs. Found some exposed go pprof endpoints.
.
.

.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

@Sank_Sec Yeah

[Gokul SK @GokTest]

Git folder = Goldmine 🔥

.
.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

@acharyar00071 Private

[Het Mehta @hetmehtaa]

don't leave babe, I'll find next critical soon

[‎Wojak Codes @wojakcodes]

“Until death, all defeat is psychological”

[Gokul SK @GokTest]

@DeepVoid_0 @Hacker0x01 India

[Gokul SK @GokTest]

It was a life changing decision to do bug bounty and @hacker0x01 is certainly a big time game changer. Thank you @hacker0x01 for acknowledging the hardwork and delivering this prestigious t-shirt all the way from California.

.
.
#bugbounty #hackerone #bugcrowd #cybersecurity

[Gokul SK @GokTest]

@Hacker0x01 is so generous! Thank you for the burpsuite and pentesterlab vouchers!
.
.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

Seeing someone’s credentials are always a dopamine!
When you come across a puppetDB instance dont forget to check the endpoint /pdb/query/v4/resources
.
.

#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

I earned $334 for my submission on @bugcrowd https://t.co/5olas2COOw #ItTakesACrowd

[Gokul SK @GokTest]

Crazy part is one more report is still under review.

[Gokul SK @GokTest]

This was public exposure of a sensitive file.
July 10 - Marked as N/A
Fought a lot with the triager
Sep 3 - Rewarded.

triagers are too lazy to read a report.Expect a writeup.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

Found backup files through directory listing.
.
.
#bugbounty #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[Gokul SK @GokTest]

When you come across on an influxdb instance, make sure to checkout /metrics endpoint. It may leak sensitive endpoints that can be accessed without authentication.
.
.
#bugbounty #bugbountytips #hackerone #bugcrowd #hack #pentest #TogetherWeHitHarder

[ZoomEye @zoomeye_team]

ZoomEye BugBounty Radar #12 | Best Practice: Discovering Origin IPs Behind CDNs

When using ZoomEye BugBounty Radar, you may come across a target domain running a vulnerable web application (e.g., SQL injection), but it's protected by Cloudflare or another CDN, making direct exploitation impossible.

In such cases, you can try to discover the origin IP address using ZoomEye:
- Review the header, body, or SSL content of the target asset.
- Look for unique identifiers — such as page titles, server banners, or SSL subjects.
- Use one of these identifiers as a search keyword in ZoomEye.
- If the results include IPv4 or IPv6 addresses, they are likely origin IPs for the protected domain.

Example: Search using the page title — title="Welcome to XXX"

Discovering origin IPs allows you to bypass CDN protection and interact with the real host — a key tactic for bounty hunters.

🚀 Learn to hunt smarter with BugBounty Radar — follow ZoomEye for daily tips. DM us for 15 days of Bounty Radar access!
🔗 https://t.co/EHa2vFeXFT

#BugBounty #bugbountytip #CyberSec