BugBountyPlayer

{{fname}} {{lname}}

Twitter bookmark account. Used to prevent spamming my regular twitter followers with boring appsec tweets.

[Bug X Hunter 💻 @Bug_X_hunter]

Wanted To fetch Endpoints of the Web Application . #bugbountytips
#bugbounty #bug @iAnkitKapoor01
Here's the simple way Without any tool. :👇

[JS0N Haddix @Jhaddix]

🎯 Red Team/Bug Bounty recon method

📋 2nd level subdomain brute forcing:

> cat knownsubs | rev | cut -d . -f 1-3 | rev | sort -u | tee sub.subdomains

🔨 Brute force those.

Any that had * from SSL certs (wildcards) are ideal candidates.

(learned from @NahamSec & @m0chan98)

[HackGit @hack_git]

APKLeaks

Scanning APK file for URIs, endpoints & secrets.

https://t.co/7dr8ozPMIf

#pentesting #infosec #bugbounty
https://t.co/tSOCYsukLc

[JS0N Haddix @Jhaddix]

⏰ Want a one-liner that notifies you of any fresh domains (if they come up) to you each hour?

#3 ⬇️

> screen

> subfinder -silent -d {target}.com -o {target}

> while true; do subfinder -silent -dL {target} -all -nW | anew {target} | notify; sleep 3600; done

[HackGit @hack_git]

🌙🦊 Dalfox

A powerful open-source XSS scanner and utility focused on automation.

https://t.co/vm3vT1V3W2

#infosec #pentesting #redteam

[ProjectDiscovery @pdiscoveryio]

The sky is the limit with Katana's customizable field options! 🚀 🪐 🌌

🌀 Here's a basic example of how katana could be used to look for API keys in responses!

📝 Change the regex to match actual API keys!

More details 👉 🔗 https://t.co/np1oO96TnE

#Hackwithautomation

[James Kettle @albinowax]

You can find a curated list of my past research, tools & presentations at https://t.co/P1f1nWDxFr - now with an enhanced topic-based structure

[Muhammed Anzil @alone_breecher]

Some dorks for public bug bounty programs🚨

inurl /bug bounty
inurl : / security
inurl:security.txt
inurl:security "reward"
inurl : /responsible disclosure
inurl : /responsible-disclosure/ reward
inurl : / responsible-disclosure/ swag
inurl : / responsible-disclosure/ bounty
inurl:'/responsible disclosure' hoodie
intext: we offer a bounty
white hat program

#bugbountytips #BugBounty #dorks #programs #Google

[ProjectDiscovery @pdiscoveryio]

Use PTR queries to extract subdomains associated with an ASN using dnsx! 🚀

Discover more subdomains by querying PTR records!

Install dnsx now 👉 https://t.co/1319t7GcEd

#Hackwithautomation #ASN #Security

[ProjectDiscovery @pdiscoveryio]

📣 Nuclei Cloud Beta is fast approaching. We're excited to announce a new feature, Nuclei Cloud AI!

Use AI to write templates based on vulnerability reports, blogs, and more! Here's @olearycrew to tell you all about it!

https://t.co/IFGP8KYF9p

[Luke Stephens (hakluke) @hakluke]

How to hack web applications in 2023: Part 1 🚀

💻 Types of web apps
⚙️ Setting up for testing
🪲 RCE
🐞 SQLi
🐛 XXE
🪳 Insecure Deserialization
🐜 XSS

And that's just Part 1! 😱 👇 #hacking #pentesting #bugbounty

https://t.co/uHIDJu0if2

[Douglas Day @ArchAngelDDay]

100 (very) short bug bounty rules:

[Paul Seekamp @nullenc0de]

@d3mondev @TomNomNom https://t.co/KxvJia1wQ1

Is really all you need.

[Osirys @osiryszzz]

The old auth bypass by editing http responses from 302 to 200 never stops paying. 10 unique endpoints vuln to sqli.
Always pay attention to 30x redirects with unusually long responses.
Again, another occasion for the “expectation VS reality” check. Will find out soon enough

[ProjectDiscovery @pdiscoveryio]

A bug bounty hunters guide to building a fast one-shot recon script! 🚀

🎯 DNS enum
subfinder, shuffldns, haktrails, puredns + dnsx

🚢 Port scanning
nmap, httpx (+ naabu)

🕷 Crawling
gospider (+ katana)

Learn how 👇 #hackwithautomation
https://t.co/TWMVZjD7HW

[Hammad 🇵🇰🇵🇸 @Hammad7361]

Found another SQLi on @Bugcrowd 's private program
#ItTakesACrowd #BugBounty #bugbountytips #bugbountytip
Tip: Use this payload 0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
In the value of every parameter and check if response delays according to the provided time in payload

[JS0N Haddix @Jhaddix]

@NahamSec @bbuerhaus @Rhynorater @arneswinnen @stokfredrik @infosec_au Don’t compete or compare to others, challenge and compete with yourself.

Failure is just a lesson. Appreciate it teaching you how to adjust.

[JS0N Haddix @Jhaddix]

@NahamSec @bbuerhaus @Rhynorater @arneswinnen @stokfredrik @infosec_au Collab more. Make friends sooner. Don���t stick with programs that don’t respect your time. Don’t over index on community toxicity.

[HackGit @hack_git]

Cloudmare
Cloudmare is a simple tool to find the origin servers of websites protected by Cloudflare, Sucuri, or Incapsula with a misconfiguration DNS.
https://t.co/PwtptyDZcx https://t.co/1x8DDmt76g

[Intigriti @intigriti]

Same goes for IP addresses.. turns out there's a lot of ways to write the same thing. If your application only blacklists one, these can be easy bypasses!