🚨 $3,000 TikTok Bug Bounty 🤑🔥
An IDOR let a researcher tag themselves on a TikTok artist's video, earning a $3,000 bounty. 👀
📖 https://t.co/ni9fIFA79b
👉 Join team 👉 https://t.co/FeMz53HSN0
Big #Bugbountytip / #bugbountytips
Google Services Hunting
Google services are amazing, and for bug hunters, it's amazing as well. In some cases, you can get some P1-P2-P3 from these services, such as
Workspaces / Sheets / Groups / Drives / Etc...
In groups: you can access emails / internal data/ credentials
In Sheets, you can access PIIs / Edit access
In Drive: you can access backups/ PII / Etc...
still hard to find and
It was an issue how to make good and at the same time fresh dorks for bug bounty programs
Then I found out that a lot of links have the same path, and it was like this
All Google resources I've found
https://t.co/2SixYDAKvE
https://t.co/tbE8WaX9CX
https://t.co/5D7Clds9cH
https://t.co/OfodYVKOk0
https://t.co/ZyA0JFkax4
https://t.co/mhIbyMF03b
https://t.co/QwByRWofh8
https://t.co/vAwAEX8KxI
https://t.co/4y1UMeZdq7
https://t.co/u7mOVPnus3
https://t.co/V9ALsFoqP9
https://t.co/2eLIaEPCGm
https://t.co/VxllqvwT6n
https://t.co/c1vkp8YrBt
https://t.co/2EkMSEUpIt
UrlScan Dorking:
page.url:"https://t.co/qb3s3f8koJ*"
page.url:"https://t.co/BNLIA1rXht*"
You can replace * => the program domain
Google Dorking:
site:https://t.co/qb3s3f8koJ* "inurl:/a/"
Or for specific domain
site:https://t.co/qb3s3f8koJ* "inurl:/a/domain.com"
GitHub Dorking:
"https://t.co/qb3s3f8koJ"
Or for a specific domain
"https://t.co/FKHqr19e0o"
Shodan Dorking:
"https://t.co/3vQLeWEs54"
Web Archive
https://t.co/c8tGyvVlH7
Don't forget:
It's not just https://t.co/pbqxKC9P4s
still you have to look for docs/groups/mail/drive/spreadsheetsX
still working in Google Research and will add more and more soon ......
Happy Hunting♥
#bugbounty
🚨 New blog post: CSPT Forced Post Deletion
I wrote about a real-world authorization issue where improper access control allowed an attacker to delete posts they should not have access to.
Full writeup 👇
https://t.co/Xxk2bicDHj
#BugBounty#WebSecurity#CyberSecurity
A $3,250 OAuth Crit. This was so basic, surprising how no one found it on the main site.
The team recognized it and fixed it in 24hrs.
Taking my time to finish the writeup. For now, you can read my:
$2,000 web cache deception: https://t.co/CAxfKAC0eP
One of the most important lessons that I have learnt is that whenever you are making some important decisions in life be very carefully to choose. Specifically when you say ‘YES’ to things. Decisions will impact your life very much.
New write-up 🚨A seemingly harmless Android deep link turned into a full account takeover vulnerability. By chaining insecure deep-link handling with automatic session propagation, a victim's account could be compromised with a single click. Sometimes the most dangerous bugs hide behind "convenience" features.
Read more: https://t.co/yi4JfkikAX #BugBounty #AndroidSecurity #MobileAppSec
$2,200 Zoho Bug Bounty 🤑
Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account by Abdalla Ali 🤯🔥
👨💻 Abdalla Ali (x/abdallaEg1)
🔗 https://t.co/Imv7chkDac
🔗 https://t.co/BqauJGCaTo
🔗 https://t.co/OFghVH9WMp
🔗 https://t.co/FeMz53HSN0