Writeup: 23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite
https://t.co/i4usLz5s38
credit: @h4x0r_dz#bugbountytips#bugbounty
The writeup is ready 📝
(Subdomain Fuzzing worth 35k bounty!) 💰
I tried my best to make everything clear, and useful ✨
Enjoy 😊
credit: @XHackerx007#bugbountytips#Hacking
https://t.co/BlDsRQ9bTL
💸 My new writeup: 23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite
credit: @h4x0r_dz#bugbountytips
https://t.co/m1U1ZtcIUd
🤔Many people have often asked me how to search for "ivanti", for shodan you can search as title:"Ivanti Connect" hostname:"target.*"
credit: @ynsmroztas#bugbountytip#bugbounty
🔥 Found SQL Injection to Account Takeover Manually :)
1. Enter mobile number to login intercept
{"mobile_number":"8888888888"} >> 200
{"mobile_number":"8888888888'"} >> 500
{"mobile_number":"8888888888''"} >> 200
credit: @bbr_bug#bugbountytips
If you see android:exported="true" in AndroidManifest.xml in Android pentests, you should definitely try the intent injection method, this may give you ssrf, exfiltration sensitive data, rce. 🥰🌹🥳
#BugBounty#bugbountytips
I've made a simple and effective bash script that leverages the power of @KN0X55 API for mass XSS scanning🔥.
https://t.co/GHj4xheERL
#BugBounty#KNOXSS#xss