This media is not supported in your browser
VIEW IN TELEGRAM
🔖 An easy way to read bug bounty witeups
🔴Example: bugbountyhunting.com/?q=csrf (for example, to search for CSRF writeups)
🖥 Tool: 🔗 Link
❤ Share & Support & Reaction Us
🧩 #bugbounty
📰 @BackupLSO
📚 @LibrarySecOfficial
If you are tired of googling for #BugBounty writeups, You can use this tool which lets you search writeups easily. You can also pull the search data in JSON format if you need it.
Just like a Google query you can append the search term to the 'q' parameter to search for writeups matching that keyword. And I don't save your searches, everything happens on the frontend.
🔴Example: bugbountyhunting.com/?q=csrf (for example, to search for CSRF writeups)
🖥 Tool: 🔗 Link
❤ Share & Support & Reaction Us
🧩 #bugbounty
📰 @BackupLSO
📚 @LibrarySecOfficial
Bug Bounty Guide
Bug Bounty is based on finding vulnerabilities in certain software.To claim the bounty, bugs must be original and previously unreported
Bug Bounty Platforms
💠 HackerOne
https://www.hackerone.com
💠 Bugcrowd
https://www.bugcrowd.com
💠 Synack
https://www.synack.com
💠 Detectify
https://cs.detectify.com
💠 Cobalt
https://cobalt.io
💠 Open Bug Bounty
https://www.openbugbounty.org
💠 Zero Copter
https://www.zerocopter.com
💠 Yes We Hack
https://www.yeswehack.com
💠 Hacken Proof
https://hackenproof.com
💠 Vulnerability Lab
https://www.vulnerability-lab.com
💠 Fire Bounty
https://firebounty.com
💠 Bug Bounty
https://bugbounty.jp/
💠 Anti Hack
https://antihack.me
💠 Intigrity
https://intigrity.com/
💠 Safe Hats
https://safehats.com
💠 Red Storm
https://www.redstorm.io/
💠 Cyber Army
https://www.cyberarmy.id
💠 Yogosha
https://yogosha.com
❤ Share & Support & Reaction Us
🧩 #bugbounty
📰 @BackupLSO
📚 @LibrarySecOfficial
Bug Bounty is based on finding vulnerabilities in certain software.To claim the bounty, bugs must be original and previously unreported
Bug Bounty Platforms
💠 HackerOne
https://www.hackerone.com
💠 Bugcrowd
https://www.bugcrowd.com
💠 Synack
https://www.synack.com
💠 Detectify
https://cs.detectify.com
💠 Cobalt
https://cobalt.io
💠 Open Bug Bounty
https://www.openbugbounty.org
💠 Zero Copter
https://www.zerocopter.com
💠 Yes We Hack
https://www.yeswehack.com
💠 Hacken Proof
https://hackenproof.com
💠 Vulnerability Lab
https://www.vulnerability-lab.com
💠 Fire Bounty
https://firebounty.com
💠 Bug Bounty
https://bugbounty.jp/
💠 Anti Hack
https://antihack.me
💠 Intigrity
https://intigrity.com/
💠 Safe Hats
https://safehats.com
💠 Red Storm
https://www.redstorm.io/
💠 Cyber Army
https://www.cyberarmy.id
💠 Yogosha
https://yogosha.com
❤ Share & Support & Reaction Us
🧩 #bugbounty
📰 @BackupLSO
📚 @LibrarySecOfficial
HackerOne
HackerOne | Leader in Continuous Threat Exposure Management | Security for AI
HackerOne combines AI with the ingenuity of the largest community of security researchers to find and fix security, privacy, and AI vulnerabilities across the SDLC. HackerOne offers AI red teaming, crowdsourced security, bug bounty, vulnerability disclosure…
Media is too big
VIEW IN TELEGRAM
🔖 A TO Z ABOUT XSS
Overview:-
Cross-Site Scripting (XSS) attack are a type of injection,in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.
An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page.
🧩 #XSS
📰 @BackupLSO
📚 @LibrarySecOfficial
Overview:-
Cross-Site Scripting (XSS) attack are a type of injection,in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. Flaws that allow these attacks to succeed are quite widespread and occur anywhere a web application uses input from a user within the output it generates without validating or encoding it.
An attacker can use XSS to send a malicious script to an unsuspecting user. The end user’s browser has no way to know that the script should not be trusted, and will execute the script. Because it thinks the script came from a trusted source, the malicious script can access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. These scripts can even rewrite the content of the HTML page.
🧩 #XSS
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
Websites pentesting With Burpsuite
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
how to setup Mobile app Traffic proxy with Burp Suite
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
🧩 #Burpsuite
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
Scan for Vulnerabilities on Any Website Using Nikto
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
Media is too big
VIEW IN TELEGRAM
How Pentester Scan vulnerability of Any Website
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support & Reaction Us
📰 @BackupLSO
📚 @LibrarySecOfficial
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
📖 Cyber Security books and sources
📚 @LibrarySecOfficial
💠 Blueteam sources:
⭕️ @BlueTeamKit
💠 Osint tools and courses:
⭕️ @OsintGit
💠 Cyber Security Courses and Resources & Learn Bug bounty:
⭕ @BackupLso
💠 All Red Team resources are here!
⭕ @RedTeamVillageRtv
💠 To add to the message list:
🤖 @LibrarySecOfficialBot
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
📖 Cyber Security books and sources
📚 @LibrarySecOfficial
💠 Blueteam sources:
⭕️ @BlueTeamKit
💠 Osint tools and courses:
⭕️ @OsintGit
💠 Cyber Security Courses and Resources & Learn Bug bounty:
⭕ @BackupLso
💠 All Red Team resources are here!
⭕ @RedTeamVillageRtv
💠 To add to the message list:
🤖 @LibrarySecOfficialBot
⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️⚜️
Subdomain_hunting_NETFLIX_AND_ENUMERATION_1704752989.pdf
4.3 MB
🔖 Subdomain Hunting Netflix Enumeration
❤ Share & Support US
#SubDomain
📰 @BackupLSO
📚 @LibrarySecOfficial
❤ Share & Support US
#SubDomain
📰 @BackupLSO
📚 @LibrarySecOfficial
✎ Deobfuscate obfuscator.io, unminify, transpile, and unpack webpack/browserify, using webcrack to resemble the original source code as much as possible.
Command Line Interface
Examples
• Repository: Github
• Website: webcrack.netlify.app
#bugbounty #recon #javascript #deobfuscate
📰 @BackupLSO
📚 @LibrarySecOfficial
Command Line Interface
npm install -g webcrack
Examples
webcrack input.js
webcrack input.js > output.js
webcrack bundle.js -o output-dir
• Repository: Github
• Website: webcrack.netlify.app
#bugbounty #recon #javascript #deobfuscate
📰 @BackupLSO
📚 @LibrarySecOfficial
This media is not supported in your browser
VIEW IN TELEGRAM
🧑🎓 👉 SQL Injection $1000 Bounty | Bug bounty POC by The Cyberboy, 2024
See also:
❗️ How Finding an SQL Injection Vulnerability Earned a $1000 Bug Bounty
❗️ SQL Injection Bug Bounty POC
❗️ SQL Injection by HackTricks
📰 @BackupLSO
📚 @LibrarySecOfficial
See also:
❗️ How Finding an SQL Injection Vulnerability Earned a $1000 Bug Bounty
❗️ SQL Injection Bug Bounty POC
❗️ SQL Injection by HackTricks
📰 @BackupLSO
📚 @LibrarySecOfficial
This media is not supported in your browser
VIEW IN TELEGRAM
OWASP Juice Shop Walkthrough All-in-one-PDF, 2025 (upd)
Updated 2025 version
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools!
Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!
💥Official page
Early post:
YouTube playlist + PDF (2020)
❤ Share & Support & Reaction Us
🧩 #Owasp
📰 @BackupLSO
📚 @LibrarySecOfficial
OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools!
Juice Shop encompasses vulnerabilities from the entire OWASP Top Ten along with many other security flaws found in real-world applications!
💥Official page
Early post:
YouTube playlist + PDF (2020)
❤ Share & Support & Reaction Us
🧩 #Owasp
📰 @BackupLSO
📚 @LibrarySecOfficial
Complete SQLMap Database Penetration Testing Guide by Harshit Rajpal & Aarti Singh
This PDF breaks down SQLMap from beginner to advanced level, with real-world examples, commands, and workflows that mirror what you’d do in an actual assessment.
🔹 SQL Injection Detection
– Error-based, Boolean-based, Time-based
– Identifying vulnerable parameters
– Breaking queries to trigger server errors
🔹 Database Enumeration
– Listing DBMS names
– Enumerating databases, tables, columns
– Extracting sensitive data safely
🔹 Data Extraction Techniques
– Dumping specific tables
– Full database dumps
– Hash extraction and format recognition
🔹 SQLMap Targeting Options
– -u for single URL targeting
– Attacking from log files
– Bulk attack using multiple URLs
– Using Google Dorks with SQLMap
– Running SQLMap on intercepted HTTP requests (-r option)
🔹 File System & OS Interaction
– Uploading / downloading files
– Executing system commands
– Out-of-band shells and Meterpreter sessions
📰 @BackupLSO
📚 @LibrarySecOfficial
This PDF breaks down SQLMap from beginner to advanced level, with real-world examples, commands, and workflows that mirror what you’d do in an actual assessment.
🔹 SQL Injection Detection
– Error-based, Boolean-based, Time-based
– Identifying vulnerable parameters
– Breaking queries to trigger server errors
🔹 Database Enumeration
– Listing DBMS names
– Enumerating databases, tables, columns
– Extracting sensitive data safely
🔹 Data Extraction Techniques
– Dumping specific tables
– Full database dumps
– Hash extraction and format recognition
🔹 SQLMap Targeting Options
– -u for single URL targeting
– Attacking from log files
– Bulk attack using multiple URLs
– Using Google Dorks with SQLMap
– Running SQLMap on intercepted HTTP requests (-r option)
🔹 File System & OS Interaction
– Uploading / downloading files
– Executing system commands
– Out-of-band shells and Meterpreter sessions
📰 @BackupLSO
📚 @LibrarySecOfficial