GitBook
5.57K subscribers
268 photos
4 videos
390 files
866 links
ctf, pentest, writeUps, osint, labs,
tips، GitBooks, Notion
Web pentest, bug bounty
Download Telegram
🌟One-Liner - Extract all URLs from the Source Code

curl "testphp.vulnweb.com" | grep -oP '(https*://|www\.)[^ ]*'


🔔@0x0SojalSec
Please open Telegram to view this post
VIEW IN TELEGRAM
⚠️Google Drive Dorks
site:http://drive.google.com inurl:folder
site:http://drive.google.com inurl:open
site:http://docs.google.com inurl:d
site:http://drive.google.com "confidential"
site:http://docs.google.com inurl:d filetype:docx
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2
☄️IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

🛍https://github.com/errorfiathck/IDOR-Forge
Please open Telegram to view this post
VIEW IN TELEGRAM
Authentication Bypass: ⚔️
🔖2FA bugs setup/implementation, bypass and disable.

🔗 What is two-factor authentication?
🌐 Cloudflare
🔗 Multi-factor Authentication Labs:
🌐 Portswigger
🔗 2FA/MFA/OTP Bypass:
🌐 Hacktricks
🔗 Testing 2 Factor Authentication:
📱Github
🔗 Account Takeover (2FA Bypasses):
📱Github
Please open Telegram to view this post
VIEW IN TELEGRAM
If you hate wasting time with 2FA, try this:

1. Install github.com/rsc/2fa on your computer/VPS & configure it with your 2FA sites.
2. Install Espanso, then add the config below.

Now, whenever you need an OTP, just type :otp and it’ll auto-fill. Easy and fast!

Credit- sw33tLie
⚡️SQLI Login Bypass Payloads