Why should you anaylse JS depending on the cases you face? You saw something, where could it be?
Voila babeeeeee move to the JS files directlyyyyyyyyyyy I would show you why :D
and how I granted 4 bugs of payment bypass through JS Files Help :D
#bugbountytips
#bugbounty
hunting on API with JSON format? go to reset password and try to submit 2 emails separated with "\n" as:
{"action":"reset-password", "email":"accA
@mail
.com\naccB
@mail
.com"}
You can receive reset password link on both emails
#BugBounty
#bugbountytips
#bugbountytip
@A7madAnw
@Mozawlat
ياصاحبي انت فاهم غلط الموضوع كله ان الظابط ده كان بيفطر على عربية فول عند عم ابراهيم فبحري وظهر الفوج الاسرائيلي وفنفس اللحظه كان عاوز يسخن طبق الفول ف قال يسخنه ببوز سلاحه فعشان يسخن السلاح طلعه ضرب منه ٧ طلقات
صاب ٣ بالغلط
وقتل ٣ بالغلط
والسابعه جت فطيزك
I Posted a recent 1 of my Priv8 Nuclei Template that helped me a lot in finding "Open Redirect" Bugs in various programs ^_^
Link:
And here we go with the following one line command for running it directly
#bugbountytips
#bugbountytip
#bugbounty
Bug Bounty's tip for today
Never give up on finding "Method Not Allowed" error !
It may ask you for some params or values, Then boom !!
There are a lot for secrets hidden here and there
Recon, Recon, Recon, Recon ....
#bugbountytips
#bugbountytip
#BugBounty
Nice ways to leverage SQLI Injection to LFI and RCE
LFI:
item=&search='+Union+Select+1,2,3,4,5,6,load_file("/etc/passwd")#
RCE:
In the SS 🥰
Uploading a shell 🥰
#bugbounty
#bugbountytips
BugBounty Tip For Today :")
Have you ever used the "Match & Replace" Hacking?
- Most scenario I face with the "match & replace role", is replacing false with true in response body
If the developer is directly depending on the booleans[true/false] that he receives from the
I made a nuclei template for checking
x-forwarded-host
x-forwarded-for
reflections in the response!
This may lead to SSRF or XSS or caching vulns!
link:
#bugbounty
#nuclei
#nucleitemplates
Tip for today ^_^
For accessing the environment file ..
I was looking in my normal used wordlist and I found that I only have
- /env/.config
- .env/config
Add "/.env.example" to your wordlist, It's helpful and giving results.
#bugbounty
#bugbountytips
If you are dealing with a website that is using "Coupons"
Start grepping URLs from "waybackurls" and run:
cat waybackrzlts.txt | grep "coupons"
You can find there some discount codes published for public
#BugBounty
#bugbountytips
#bugbountytip
Tip for the day 🤩
1. enumerate subdomains with subfinder
2. start fuzzing using ffuf
3. found /ping -> "OK"
4. Make it /ping/ -> "Access to the panel login"
5. Luckily It had a misconfiguration allowed me access the panel with dummy google account 🥳
#bugbounty
#bugbountytips
Tip of the day 🤩
Don't forget always try to set the values in the response from the post data
for ex: if you have in the response "verify":false
Try "verify":true, in the post data !!
Wait for the next write-up ❤️
#BugBounty
#bugbountytips
#bugbountytip
Bypassing email verification tip !!
If the verification url containing the email, like:
Try to change the “email” param value !!
It may be validating the verification token and activating any email with it !!
#BugBounty
#bugbountytip
#bugbountytips
Gonna Start adding priv8 nuclei templates on my
GitHub:
This temp is a start, a URL Redirection Template
depending on a bug a friend caught it earlier
PoC:
#Github
#Nuclei
#BugBountyTips
Bug Bounty Tip About CSRF
More ways to find CSRF ^_^
- viewing then normal page source viewing the function of deleting the account
-
viewing another js page contains the function
- Keep reading ..
#bugbounty
#bugbountytips
90% of this man’s bugs were privilege escalation & IDORs !
Someone i like his farming methodology for real!
His h1:
His BBCTP episode:
NahamSec episode:
Really a great man to learn from!
Had an absolutely stellar time at
@Hacker0x01
's
#h1305
! The
@CapitalOne
team was a real joy to work with, and Miami felt like just the perfect location.
As this was my 16th LHE, I was beginning to think I would never make MVH, but having a positive attitude, grit, and
ياشباب
في playlist جديده حنبدأها قريب باذن الله
الفكره عباره عن محاضره للضيف، بيتكلم فيها عن توبيك معين يخص السيكيوريتي
مدتها من ١٥ لـ ٢٠ دقيقه
بيكون مجهز pdf او word او power point مثلًا يشرح منه
الموضوع متاح لأي شخص شايف انه يقدر يقدم محاضره كويسه قويه عن توبيك معين، dark
انا نزلت فيديو جديد بشرح فيه ايه هي ثغرات الprivilege escalation فالابلكيشنز
اسهل طريقه فعلًا تجيب بيها فلوس وابسط مايمكن، هي الـprivilege escalation
وموجوده في مواقع كتير ومش كتير كذلك بيتكلم عنها
لينك:
يارب الفيديو يفيدكم باي معلومه جديده ❤️
Tip of the day !!
After running waybackurls, gau, katana ..
Try to grep those parameters, They may lead to URL Redirection !!
grep “redirect_uri=”
~ “redirect=”
~ “to=”
~ “returnurl=”
more ::
#BugBounty
#bugbountytip
#bugbountytips
سلام عليكم
يارب تكونوا بخير ياشباب
عاوز اعمل playlist جديدة نشرح فيها vulnerabilities قوية الى حد ما
الى عدى بـbugs لذيذة فيها أفكار أو Chains ياريت ياريت يكلمني برايڤت نظبط حلقة لذوذة
عشان عاوزين نعمل بلاي ليست محترمة كدة عن bugs قوية
نثبت للغرب اننا عندنا هاكرز بردو 😂😂
Quick & Important Tip, That i missed when i started ..
You don't have to go start on public programs in h1 or bc
You can find single websites that has its own bug bounty program
there is less competition and you as a beginner need thi
@nadeenabdulaziz
معتقدش ان تنفيذ اوامر ربنا واحنا مش راضيين ومقتنعين بيها وانها خير لينا احنا ده شئ كويس
اصل هو مش محتاج مننا شئ، هو قالنا اعملوا كذا وكذا وكذا لينا مش ليه، وفنفس الوقت ده الصالح والصح
حتى الصلاه ابسط العبادات، انتي بتصلي وبتعبديه عشان يكرمك انتي كذلك مش عشان ربنا يكبر ويتطور
I've created a tool extracting all the endpoints from js URLs in 1 sec !!
You can use it, It's free on my Github now !!
Called it: "EndExt" for "Endpoint Extractor"
#BugBounty
#bugbountytips
#github
#tools
an Idea To Do rate limit without rate limit 😎
- I tried to test rate limit on this request, But I got error "Too Many Requests"
- But Actually the function didn't check how many emails are getting sent in 1 request and If email is duplicated or not
#bugbounty
#bugbountytips
Some of my ways to bypass the CSRF authentication_token ..
1. You can remove the whole ‘token’ param and value and try send the request
A lot of the websites i’ve been testing has this misconfiguration ..
#bugbounty
#bugbountytips
#csrf
@the_shousha
في كومنت انا شوفته وهو صح عمومًا
بيقولك اللي حتطلع بيه مش حيعوض الضرر
ضرر سواء ذنوب أو مضيعة وقت .. بصري ذهني سمعي عمياني حتى, البتاع ده كل صحابي اللي حملوه بما فيهم أنا كنا بندمنه وبنمسحه وبنقعد نحمله تاني بسبب الخرا اللي فيه
بسم الله الرحمن الرحيم والصلاة والسلام على أشرف المرسلين سيدنا محمد
Bismillah 🫡🫡
Today, I've written the tool of the next video on the youtube and published it on github !!
The Whole Automation and Reporting of the fuzzing process.
⭐️ Why I made this tool?
ANSWER:
- As a wide
Full Scenario Tip ..
Today I received a program invitation and it was interesting actually
usually the first think that I look for it is the settings&profile page and I try to bypass all of the functions there
Status: PPR
#bugbounty
#bugbountytip
#bugbountytips
Pre account Takeover Tip ..
1. Signup using email address you have, You will receive a validation link on YOUR EMAIL.
2. There's an email verification bypass bug, was allowing me to take actions inside the account before verifying my email. I used it to change my email to
خدوا بالكم لاني قابلت كيز اول مره اقابلها حرفيًا ومن اغرب الكيسز، كنت عايز احمل openVPN عشان اكونكت على حاجه ..
ف سرشت فجوجل عادي وفتحت اول مرقع بما انه اصلًا ظاهر من بره حتى الـref بتاعة ومخدتش بالي من موضوع سبونسر ده، انا فتحت الاول لان محرك البحث حيطلع
One of my problems that Im facing daily after I run waybackurls and grep "\.js" then wanna run Secretfinder
That not all the Js files are good/valid ! they may open! but maybe they r 404 pages !
I created this tool to filter them <3
#Github
#BugBounty
فيديو جديد عاليوتيوب, لسه نازل من ساعتين <3
link:
العنوان:
Monitoring your new subdomains, updates (in less than 15 minutes)
بالعربي ازاي توصلك رسايل بالتجديدات من التارجت بتاعك اول بأول
يارب الفيديو يفيدكم يشباب <3
#bugbounty
#bugbountytips
#cyerbugs
بسم الله الرحمن الرحيم
قال رسول الله صلى الله عليه وآله وسلم: ((علماء هذه الأمة رجلان: رجلٌ آتاه الله علمًا فبذله للناس ولم يأخذ عليه طمعًا، ولم يشتر به ثمنًا، فذلك تستغفر له حيتان البحر، ودواب البر، والطير في جوف السماء. ورجلٌ آتاه الله علمًا فبخل به عن عباد الله، وأخذ عليه
Always try to manipulate with special characters to bypass the domains restrictions !!
In my case, I blocked the emails with “” .. But what i did to bypass?
Intercept -> Change “i” to “İ”
Now it’s done !! ❤️
#bugbountytip
#bugbountytips
#bugbounty
خدوا بالكم لاني قابلت كيز اول مره اقابلها حرفيًا ومن اغرب الكيسز، كنت عايز احمل openVPN عشان اكونكت على حاجه ..
ف سرشت فجوجل عادي وفتحت اول مرقع بما انه اصلًا ظاهر من بره حتى الـref بتاعة ومخدتش بالي من موضوع سبونسر ده، انا فتحت الاول لان محرك البحث حيطلع
سبيس القهوه دي حسست الواحد انه خرج مع شوية ناس بنفس العقليه والدماغ والسن يفضفضوا ويتكلموا فأي حاجه سواء شغل أو مواضيع مختلفه وغيره
الموضوع لذيذ فعلًا
إعتبروني عضو رسمي فالقهوه معاكوا الفتره اللي جايه 😂❤️
After you finish the web crawling process ..
You may find some duplicated lines with "?", like:
Use this command to get the unique URLs with clear params:
awk -F'?' '!seen[$1]++ {print}' file.txt
#bugobunty
#bugbountytips
The tip of today !!
I found a parameter in the json POST data in my request of activating my free trial called:
"trial_expires":1681188815,
I was able to extend my trial by making a new far unix time, By using:
#bugbountytips
#BugBounty
#bugbountytip