VDP to Bounty!! I was awarded a $250 bounty on @Hacker0x01!
I started hunting on a VDP. Luckily I found an open redirect. Reported it via their website's responsibile disclosure page. Got a verification email from hackerone.
https://t.co/vYLfoIvbpC #TogetherWeHitHarder
@Gisme_1 @snfiidev@gitconnected knowledge of javascript can help you. The trick is to replace repetitive operators with variables for making it shorter.
@snfiidev@gitconnected The optimized one. It's mentioned in the article 🙂
A=![]+'';B=!![]+'';C=[][[]]+'';F=[][C[4]+C[5]+A[2]+B[0]+A[4]+B[1]];D=F+'';F[D[3]+D[6]+C[1]+A[3]+B[0]+B[1]+C[0]+D[3]+B[0]+D[6]+B[1]](A[1]+A[2]+A[4]+B[1]+B[0]+'(1)')()
VDP to Bounty!! I was awarded a $250 bounty on @Hacker0x01!
I started hunting on a VDP. Luckily I found an open redirect. Reported it via their website's responsibile disclosure page. Got a verification email from hackerone.
https://t.co/vYLfoIvbpC #TogetherWeHitHarder
@badthin2 @Hacker0x01 I apologize for the late reply but you can increase the severity of clickjacking by tricking a user into performing sensitive actions like changing their email address, deleting account, etc.
Second-order SQL injection on view parameter.
1. Create a malicious note with SQLi payload through /?note=<payload> parameter.
2. Goto /?view to execute your SQLi payload
#SQLI#bugbountytips
Vulnerable Code Snippet 💀
🥁 This time we have improved the experience by making it possible to run this code snippet in a docker environment!
Can you find the bug this time?
Practice your skills and try it yourself on our Github👇
https://t.co/fILsXfBZDi
#YesWeRHackers #BugBounty #YWHSnippet
Worth trying for anyone who wants to improve their XSS skills or learn something new. XSS via stylesheet injection challenge by @yeswehack.
#YesWeRHackers