Bhagirath Saxena 🇮🇳

Security Researcher

[Bhagirath Saxena 🇮🇳 @rix4uni]

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more.

https://t.co/NxJqeMV52L

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Complete Guide for Fuzzing in Bug Bounty Hunting

https://t.co/WNceP8NrzL

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

You can try these if alert, confirm, prompt is blocked

Check out all list:
https://t.co/8giBVOp6pC

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day3 - How to Detect Reflected XSS (Step by Step):
- GLink: https://t.co/4EaBKrjM2y
- YTLink: https://t.co/shE5iDTdlf
Timestamps:
00:00:00 — Start
00:00:05 — How to Detect Reflected XSS

https://t.co/Lbd4QyNbZ4

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

How you can Create advanced XSS payload like these:
https://t.co/SHoao4aoz3

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day18 - Live Bug Bounty Hunting on Google - https://t.co/uz32ybtMAf:
- GLink: https://t.co/2UAfM41IG5
- YTLink: https://t.co/KTCTQXohZv
Timestamps:
00:00:00 — Start
00:00:15 — Live Bug Bounty Hunting on Google

https://t.co/d4ZKGdSOYz

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Currently, https://t.co/APtD8MG9l6 has only 31 self-hosted programs.

Anyone can add programs at:
https://t.co/KkLiAnkk4Z

You can also add to this file if you don't want to do Google dorking:
https://t.co/zEG4liA1xo

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Dork for Finding BugCrowd Private Bug Bounty Programs

Dork: intext:"Powered by Bugcrowd" -site:https://t.co/lW9VXGV70J

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

How To Find HackerOne Private Programs

https://t.co/UNE14hhxIG

Get all program links shown in video:
https://t.co/c8wCS8l8xW

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day17 - SSL Certificate Recon on Shodan (Pro Tips):
00:16:51 — DotGit Recon
01:01:32 — Find Critical Bugs Using Shodan Recon
01:37:30 — Find Jenkins Critical Issues Within Minutes
01:56:44 — Automate Shodan Recon
https://t.co/OLYLM9t7to

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day16 - How to Find Hidden Secrets on Github:
- YTLink: https://t.co/jNemNvYbt0

Timestamps:
00:03:37 — Why Do Github Recon?
00:44:25 — Find Hidden Secrets Github using gitrepoenum
03:33:16 — Run Github Actions on nucleihubquery

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day15 - Live Recon on IIS Windows Server - Part-3:
- GLink: https://t.co/LdPd2vpJL7
- YTLink: https://t.co/685n9PCZti

Timestamps
- 00:00:00 — Start
- 00:04:40 — Automatically Guess IIS Short filename

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day14 - Live Recon & Hunting on SelfHosted Program
- Link: https://t.co/nWHRH8GAPe
Timestamps:
00:00:00 — Start
00:00:25 — Live Hunting on SelfHosted Program

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Created SelfHosted - Bug Bounty Programs

Website Link:
https://t.co/k8s8tFAGei

Get detailed info about scope or you can add new programs:
https://t.co/KeLQXIlDCI

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day13 - Mass Hunting CVE using nuclei & GarudRecon Workflow:
- Link: https://t.co/mhHmWKeH53
Timestamps:
00:27:25 — Create Detailed nuclei template
00:27:25 — Get new CVE using cvemapping
01:21:16 — How to Find CVE in minutes-google dorking
#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day12 - Reflected XSS Automation:
- Link: https://t.co/Wg4TOYTuwY
Timestamps:
00:00:00 — Start
00:06:53 — XSS lab solve
00:31:00 — Automate boring XSS recon using xssrecon
02:39:53 — GarudRecon workflow for mass RXSS

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day11: https://t.co/VwGGxpRTS9

- Directory fuzzing with special tricks
- TechBased Directory fuzzing on 403, 302, 404, 200
- Fuzzing with nuclei tags custom wordlists
- Create custom wordlists
- Created nuclei tags custom wordlists

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Day9: https://t.co/519I07eP7p

# Topics Done:
- How to find Self-Hosted Programs Using google dorking
- Create custom nuclei templates
- Create custom GarudRecon workflows

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

Hello Hackerone, Please solve this issue.

@Hacker0x01

[Bhagirath Saxena 🇮🇳 @rix4uni]

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI.

Added v0.0.8 with some installation improvement

https://t.co/nO7xUwRaW0

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

GarudRecon v0.0.7 has been released with `workflow` feature

https://t.co/NxJqeMVCSj

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

GarudRecon v0.0.7 has been released with `workflow` feature

https://t.co/NxJqeMVCSj

#bugbounty #bugbountytips #bugbountytip

[Bhagirath Saxena 🇮🇳 @rix4uni]

An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more.

https://t.co/NxJqeMV52L

#bugbounty #bugbountytips #bugbountytip