Found this on twitter. The POC is very informative. What you think?

Good Morning Everyone!
What topic should I post today. Let me know on discussion:) Thanks!

Surprisingly Havij - SQL injection tool helped me to achieve a error based sqli on ferrari 😳

Subdomain Enumeration from different sources

Simple but effective method to narrow down your scope, sometimes it helps to think simple.

waybackurls --dates domain(.)com | grep '?id='

Payload : if(now()=sysdate(),SLEEP(8),0)

By:@ynsmroztas

#bugbountytips #bugbounty

Rejetto HTTP File Server - Template injection

🚨CVE-2024-29849~29852: Veeam’s Backup Nightmare, Full System Access Exposed

⚠Veeam Backup Enterprise Manager has been issued 4 critical vulnerabilities, allowing unauthorized access, account takeover, and data exposure.

💥PoC: https://github.com/sinsinology/CVE-2024-29849

💥Dorks:
Hunter:/product.name="Veeam Backup Enterprise Manager"

FOFA:app="Veeam-Backup-Enterprise-Manager"

SHODAN:http.title:"Veeam Backup Enterprise Manager"

#Veeam #backup #infosec #infosecurity #Infosys #Vulnerability #bugbounty #bugbountytips

Thank You Everyone for the Support 🫶

Nahamsec Reconnaissance Guide

🌐🕵️‍♂️Ominis: OSINT: Web Hunter 🌐🕵️‍♂️

👉It gathers online information by querying Google with a user-inputted query. The tool then extracts relevant details like titles, URLs, and mentions of the query from the search results.

Targetable and Actionable Results 🎯
1. Identifying Potential Threats 🚨
2. Monitoring Competitors 🕵️‍♂️
3. Gathering Human Intelligence 👥
4. Detecting Brand Mentions 📣
5. Investigating Individuals 🔍
6. Uncovering Financial Insights 💰
7. Mapping Digital Footprints 🗺️
8. Tracking Online Campaigns 📊
9. Monitoring Regulatory Compliance 📝
10. Forecasting Emerging Risks 📈
11. Google Search Filtering 🖇

🔗Download: https://github.com/AnonCatalyst/Ominis-OSINT

For Tryhackme and Hackthebox Vip+ Vouchers DM me.
Available For India Only. Dm @wtf_yodhha

🚨cloud_enum🚨

👉Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

🔗https://github.com/initstring/cloud_enum

#bugbounty #bugbountytips