Android app vulnerabilities for bug bounty hunters
Here’s a thread to guide you through common vulnerabilities, how to find them, and some examples to kickstart your journey.
Let’s level up your skills! 🧵
#BugBounty#AndroidSecurity#CyberSec#cybersecurity#EthicalHacking
Arjun + Piper + Knoxnl + @KN0X55 = XSS
cc: @xnl_h4ck3r@KN0X55
Found a path for creating address.
Used Arjun for finding parameters
Used Knoxnl + Piper + Knoxss API key
Found Reflected XSS, Escalated to Account Takeover.
Use #ProxyChains to trick #WAF. I was working with @jayesh25 yesterday on an SQLi and had trouble with the WAF. However, by using ProxyChains, I successfully bypassed it WAF. Make sure you know how to configure it correctly and use good proxy lists.
#bugbountytips#SQLi
#BugBounty#bugbountytips#bugbountytip#blindxss
This script can crawl the website and find URLs that contain HTML Forms. Very useful for me to find Forms for Blind XSS.
https://t.co/CgioRiHF2k
Great weekend on H1 @Hacker0x01
Found /.git/config while fuzzing ( medium )
used GitTools : https://t.co/a0DhwhXhpZ to dump whole .git directory form server
Found DB creds in dumped files which are not accessible directly ( Critical )
#bugbountytip#bugbountytips
When you are hunting for blind XSS. Go to forget password and add admin@company .com and add your blind XSS payload on the header.
Easy way and it will logged on admin log, if he checked his account you will exploit his account.
#bugbountytips
Here's how fast the #KNOXSS API can reply with a FULL PoC, ready to be reported!
Just 1 second 🤩
in the classic TestPHP VulnWeb search page!
curl https://t.co/T3tFrmW0oA -d "target=https://t.co/dUJaLdu8dC" -H "X-API-KEY: exxxxxx3-0xx9-4xxc-9xxe-6xxxxxxxxxx6"
Try it yourself!
Slides of my talk in bsidesodisha
about
•Build your setup for hunting
Tools , Extensions , Etc…
• Quick Orwa Methodology 2023
• SQL Injection
• and for sure #bugbountytips
https://t.co/CJY6VgUKP2
feel free to ask about anything in comment and will try explained ❤️❤️