Pikachu

Looking for bugs.

[ISRO @isro]

Paying tributes to the Father of the Indian Space Program, Dr. Vikram Ambalal Sarabhai on his birth anniversary.
Recently, Chandrayaan-2 captured the Sarabhai Crater on Moon. Read more here https://t.co/VQwS4HYh0g
#VikramSarabhai

[Ammar Amer @cry__pto]

-1-Shodan Queries.txt:
https://t.co/RG6on661H9
-2-Information Gathering with Shodan.pdf:
https://t.co/LqWZs1gHoN
-3-Passive Data Collecting: Shodan.pdf:
https://t.co/TYWVbNMPYl
more:
https://t.co/gNMSDGULS6
#bugbountytips #Hacking #osint #PenTest #redteam

[OWASP Amass @owaspamass]

Check out this OWASP Amass tutorial authored by project contributor @ngkogkos!

#dns #osint #recon #bugbountytips #assetdiscovery

https://t.co/0ymY02tU73

[Rahul Kankrale @RahulKankrale]

If android app opening urls in webview then always look for js interfaces through Object.getOwnPropertyNames

And access custom js interfaces and there functions
@Hacker0x01
#AndroidHackingMonth
Like this 👇
https://t.co/YnyNJm4J2e

[dawgyg - Defcon @thedawgyg]

When testing for SSRF, change the HTTP version from 1.1 to HTTP/0.9 and remove the host header completely. This has worked to bypass several SSRF fixes in the past.
#bugbountytip #bugbountytip #bugbounty

[Nick || hunt4p1zza @ngkogkos]

Performing Race Condition tests w/ Burp Suite, coupon redeem example:

1. Use Null Payloads
2. Use same number of threads to requests (x15 here) & 0 throttle
3. Disable the baseline request (it's will be sent first w/ delay invalidating your coupon)

#bugbounty #burpsuitetip

[Pikachu @sonyCrackle]

Do not submit any report to @Winnicakes. I reported critical IDOR they patched the issue and didn't even send a single reply.

[Pikachu @sonyCrackle]

@jobertabma @Hacker0x01 eligible for swag? 😛

[Pikachu @sonyCrackle]

UI changed but its still there. Time to replce it @Hacker0x01

[Pikachu @sonyCrackle]

@hackerone

[Max Yaremchuk @0xw2w]

Wrote a new article https://t.co/uq35TonvGx «Сookie-based XSS exploitation | $2300 Bug Bounty story». The article contains exploitation methods that I have ever used, which will help you to understand how to use this XSS to prove and increase vulnerability impact. Happy reading:)